[sleuthkit-users] icat -s

[Brian C. <ca...@ce...>]

Does anyone use the '-s' flag with icat?  It is currently setup to 
allow you to specify the type and id value for an NTFS inode, but you 
can also specify the type and id using the normal 123-128-1 inode 
address.  I am adding a flag to allow 'icat' to also show the slack 
space of the file and '-s' seems to be the most logical.  Autopsy 
doesn't use '-s' with icat and I no longer know why I added that flag.

So, if no one uses it, then I will replace it with the slack space 
option.

brian