Digital Forensics with The Sleuth Kit - ils

In The Sleuth Kit (TSK), “ils” is a command line tool that provides information about the files and directories in a given image or file system. The “ils” command works by reading the file system metadata and generating a list of inode numbers, file names, and other information about each file. This information is then displayed to the user, making it easier to identify and analyze specific files of interest.

The “ils” tool is commonly used in digital forensics and incident response to quickly scan a large image or file system for specific files or patterns of interest.

The Sleuth Kit Tools