Hi,
I want to find sectors associated with a particular file. I am using python (pytsk3) and I was able to find the cluster runs but not the disk sectors. Does TSK have a feature to find associated sectors?
If you have the cluster runs then all you need to do is run a few calculations to get the sectors. You need sectors per cluster and starting sector of the partition and you should be good to find the sectors where each run starts.
Thank you very much, this is helpful.