dls

Resides in package sleuthkit.

dls opens the named device and copies data blocks (disk units). By default, dls copies unallocated data blocks (addressable disk units) only. dls was called unrm in TCT.

• man page - http://www.sleuthkit.org/sleuthkit/man/dls.html