Use TSK to enumerate details about partitions on a disk device.

Platform support

Please be aware that some queries can only be run against certain platforms. Below is a list of the supported platforms that this query supports. Zercurity will automatically pause queries from running if errors are detected. Running a query against an unsupported platform will result in the following error: no such table: device_partitions

  • Linux
  • Mac OSX

Table schema

Name Type Description
device TEXT Absolute file path to device node
partition INTEGER A partition number or description
label TEXT  
type TEXT  
offset BIGINT  
blocks_size BIGINT Byte size of each block
blocks BIGINT Number of blocks
inodes BIGINT Number of meta nodes
flags INTEGER  

Query examples

Select all the results for the given table.

SELECT * FROM device_partitions;