trusty (1) mmcat.1.gz

Provided by: sleuthkit_3.2.3-2.2_amd64 bug

NAME

       mmcat - Output the contents of a partition to stdout

SYNOPSIS

       mmcat [-t mmtype ] [-o offset ] [ -i imgtype ] [-b dev_sector_size] [-vV] image [images] part_num

DESCRIPTION

       mmcat  outputs the contents of a specific volume to stdout.  This allows you to extract the contents of a
       partition to a separate file.

ARGUMENTS

       -t mmtype
              Specify the media management type.  Use '-t list' to list  the  supported  types.  If  not  given,
              autodetection methods are used.

       -o offset
              Specify  the  offset  into the image where the volume containing the partition system starts.  The
              relative offset of the partition system will be added to this value.

       -b dev_sector_size
              The size, in bytes, of the underlying device sectors.  If not given, the value in the image format
              is used (if it exists) or 512-bytes is assumed.

       -i imgtype
              Identify  the  type  of image file, such as raw or split.  If not given, autodetection methods are
              used.

       -v     Verbose output of debugging statements to stderr

       -V     Display version

       image [images]
              One (or more if split) disk images whose format is given with '-i'.

       part_num
              Address of partition to process.  See the mmls output to determine the address of the partitions.

AUTHOR

       Brian Carrier <carrier at sleuthkit dot org>

       Send documentation updates to <doc-updates at sleuthkit dot org>

                                                                                                        MMCAT(1)