device_partitions¶
Use TSK to enumerate details about partitions on a disk device.
Platform support¶
Please be aware that some queries can only be run against certain platforms. Below is a list of the supported platforms that this query supports. Zercurity will automatically pause queries from running if errors are detected. Running a query against an unsupported platform will result in the following error: no such table: device_partitions
Linux
Mac OSX
Table schema¶
Name |
Type |
Description |
---|---|---|
device |
TEXT |
Absolute file path to device node |
partition |
INTEGER |
A partition number or description |
label |
TEXT |
|
type |
TEXT |
|
offset |
BIGINT |
|
blocks_size |
BIGINT |
Byte size of each block |
blocks |
BIGINT |
Number of blocks |
inodes |
BIGINT |
Number of meta nodes |
flags |
INTEGER |