The Sleuth Kit ver 4.4.2

Missing image name usage: ifind [-alvV] [-f fstype] [-i imgtype] [-b dev_sector_size] [-o imgoffset] [-d unit_addr] [-n file] [-p par_addr] [-z ZONE] image [images] -a: find all inodes -d unit_addr: Find the meta data given the data unit -l: long format when -p is given -n file: Find the meta data given the file name -p par_addr: Find UNALLOCATED MFT entries given the parent's meta address (NTFS only) -i imgtype: The format of the image file (use '-i list' for supported types) -b dev_sector_size: The size (in bytes) of the device sectors -f fstype: File system type (use '-f list' for supported types) -o imgoffset: The offset of the file system in the image (in sectors) -v: Verbose output to stderr -V: Print version -z ZONE: Time zone setting when -l -p is given