The Sleuth Kit ver 4.4.2

Missing image name usage: ils [-emOpvV] [-aAlLzZ] [-f fstype] [-i imgtype] [-b dev_sector_size] [-o imgoffset] [-s seconds] image [images] [inum[-end]] -e: Display all inodes -m: Display output in the mactime format -O: Display inodes that are unallocated, but were sill open (UFS/ExtX only) -p: Display orphan inodes (unallocated with no file name) -s seconds: Time skew of original machine (in seconds) -a: Allocated inodes -A: Unallocated inodes -l: Linked inodes -L: Unlinked inodes -z: Unused inodes -Z: Used inodes -i imgtype: The format of the image file (use '-i list' for supported types) -b dev_sector_size: The size (in bytes) of the device sectors -f fstype: File system type (use '-f list' for supported types) -o imgoffset: The offset of the file system in the image (in sectors) -v: verbose output to stderr -V: Display version number