fs_cat
Read file content from a disk image by inode for forensic analysis. Works read-only via icat to preserve evidence integrity.
Instructions
Read the content of a file by inode from a disk image (icat), read-only.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| image | Yes | ||
| inode | Yes | ||
| offset | No | ||
| max_bytes | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |