extract
Copy a file or alternate data stream from a forensic disk image to an output directory, returning size and SHA1/MD5 hashes for verification.
Instructions
Copy a file (or ADS) out of the image into out_dir (relative to, or inside, the output root); returns size, SHA1, MD5.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| ref | Yes | ||
| name | No | ||
| part | No | ||
| image | Yes | ||
| stream | No | ||
| out_dir | No | extracted |