fs_cat
Read file content from a disk image by inode for forensic analysis. Works read-only via icat to preserve evidence integrity.
Instructions
Read the content of a file by inode from a disk image (icat), read-only.
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"image": "<image>",
"inode": "<inode>"
},
"name": "fs_cat"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| image | Yes | ||
| inode | Yes | ||
| offset | No | ||
| max_bytes | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |