IMG_STAT(1)

πŸ’– IMG_STAT πŸ’–

okay bestie, welcome to img_stat β€” the section 1 general commands manual girlie who is literally just here to spill the tea about your image file. no cap. she's from the general commands manual and she's ready to serve.


✨ NAME ✨

img_stat β€” display details of an image file πŸ¦‹


🌸 SYNOPSIS 🌸

img_stat [-i imgtype] [-b dev_sector_size] [-tvV] image [images]

πŸŽ€ DESCRIPTION πŸŽ€

so like, img_stat shows you the details that are associated with an image file. and here's the thing β€” the output is image format specific, so it's giving different depending on what you feed it. πŸ’…

but fr fr, at a minimum you're getting the size. that's guaranteed, bestie. and if it's a split image format, you also get the byte range of each file. iconic behavior honestly.


πŸ‘‘ ARGUMENTS πŸ‘‘

  • -i imgtype β€” tell her what kind of image file this is, like raw. you can literally do -i list to see all the supported types, super handy. if you don't pass this, she's gonna use autodetection methods and figure it out herself. main character energy tbh.
  • -b dev_sector_size β€” the size, in bytes, of the underlying device sectors. if you don't give her one, she uses the value that's already in the image format (if it even exists, which, sometimes it does not πŸ™ˆ) or otherwise she just assumes 512-bytes. periodt.
  • -t β€” print the image type only. that's it. that's the whole vibe.
  • -v β€” verbose output of debugging statements to stderr. yes bestie, stderr specifically. not me being precise about it. 😭
  • -V β€” display version. slay.
  • image [images] β€” the disk or partition image you wanna read, and its format gets given with -i. you can pass multiple image file names if the image is split into multiple segments. and here's the lil magic trick: if you only give her one image file and its name is the first in a sequence (like, as indicated by ending in '.001'), then the subsequent image segments get included automatically. no extra work for you, you're welcome. 🧚

🫢 AUTHOR 🫢

Brian Carrier <carrier at sleuthkit dot org> πŸ’œ

Send documentation updates to <doc-updates at sleuthkit dot org> πŸ’Œ


and that's the whole page bestie!! this was IMG_STAT(1) from the General Commands Manual β€” go forth and stat those images, you absolute icon. πŸŽ€βœ¨πŸ’–

πŸ“¦ where this page comes from