This is a forensic keywords searching tool.
This is a keywords searching tool. sudo bash ks.sh for running it. It mounts a DD image file; It extracts all deleted files; slackspace; It makes a data carving on the freespace only; It indexes all by RECOLL. You need: The Sleuthkit (latest release) Photorec MD5Deep RECOLL It stores the index DB and the recoll.conf in the chosen output directory.
https://articles.forensicfocus.com/2013/04/23/ks-an-open-source-bash-script-for-indexing-data/