Parse whole MFT with icat?

The Sleuth Kit Help
1

I’m trying to retreive all file offsets and size to be able to reverse locate a file starting with a disk offset.

With icat.exe from sleuthkit it’s possible to view all info from an inode, but there is any way to parse all inodes and get all info in a parseable way?

2

One way is to run fiwalk on the disk/image. If you choose to export it out to xml it will display each file, the metadata and the offset to where the file resides on the disk. Fiwalk is part of the sleuthkit