|
The Sleuth Kit
4.11.1
|
This is the complete list of members for TskDb, including all inherited members.
| addCarvedFile(const int64_t parentObjId, const int64_t fsObjId, const uint64_t size, vector< TSK_DB_FILE_LAYOUT_RANGE > &ranges, int64_t &objId, int64_t dataSourceObjId)=0 (defined in TskDb) | TskDb | pure virtual |
| addFileLayoutRange(const TSK_DB_FILE_LAYOUT_RANGE &fileLayoutRange)=0 (defined in TskDb) | TskDb | pure virtual |
| addFileLayoutRange(int64_t a_fileObjId, uint64_t a_byteStart, uint64_t a_byteLen, int a_sequence)=0 (defined in TskDb) | TskDb | pure virtual |
| addFsFile(TSK_FS_FILE *fs_file, const TSK_FS_ATTR *fs_attr, const char *path, const unsigned char *const md5, const TSK_DB_FILES_KNOWN_ENUM known, int64_t fsObjId, int64_t &objId, int64_t dataSourceObjId)=0 (defined in TskDb) | TskDb | pure virtual |
| addFsInfo(const TSK_FS_INFO *fs_info, int64_t parObjId, int64_t &objId)=0 (defined in TskDb) | TskDb | pure virtual |
| addImageInfo(int type, int size, int64_t &objId, const string &timezone)=0 (defined in TskDb) | TskDb | pure virtual |
| addImageInfo(int type, int size, int64_t &objId, const string &timezone, TSK_OFF_T, const string &md5, const string &sha1, const string &sha256)=0 (defined in TskDb) | TskDb | pure virtual |
| addImageInfo(int type, TSK_OFF_T size, int64_t &objId, const string &timezone, TSK_OFF_T, const string &md5, const string &sha1, const string &sha256, const string &deviceId, const string &collectionDetails)=0 (defined in TskDb) | TskDb | pure virtual |
| addImageName(int64_t objId, char const *imgName, int sequence)=0 (defined in TskDb) | TskDb | pure virtual |
| addPoolInfoAndVS(const TSK_POOL_INFO *pool_info, int64_t parObjId, int64_t &vsObjId)=0 (defined in TskDb) | TskDb | pure virtual |
| addPoolVolumeInfo(const TSK_POOL_VOLUME_INFO *pool_vol, int64_t parObjId, int64_t &objId)=0 (defined in TskDb) | TskDb | pure virtual |
| addUnallocatedPoolVolume(int vol_index, int64_t parObjId, int64_t &objId)=0 (defined in TskDb) | TskDb | pure virtual |
| addUnallocBlockFile(const int64_t parentObjId, const int64_t fsObjId, const uint64_t size, vector< TSK_DB_FILE_LAYOUT_RANGE > &ranges, int64_t &objId, int64_t dataSourceObjId)=0 (defined in TskDb) | TskDb | pure virtual |
| addUnallocFsBlockFilesParent(const int64_t fsObjId, int64_t &objId, int64_t dataSourceObjId)=0 (defined in TskDb) | TskDb | pure virtual |
| addUnusedBlockFile(const int64_t parentObjId, const int64_t fsObjId, const uint64_t size, vector< TSK_DB_FILE_LAYOUT_RANGE > &ranges, int64_t &objId, int64_t dataSourceObjId)=0 (defined in TskDb) | TskDb | pure virtual |
| addVirtualDir(const int64_t fsObjId, const int64_t parentDirId, const char *const name, int64_t &objId, int64_t dataSourceObjId)=0 (defined in TskDb) | TskDb | pure virtual |
| addVolumeInfo(const TSK_VS_PART_INFO *vs_part, int64_t parObjId, int64_t &objId)=0 (defined in TskDb) | TskDb | pure virtual |
| addVsInfo(const TSK_VS_INFO *vs_info, int64_t parObjId, int64_t &objId)=0 (defined in TskDb) | TskDb | pure virtual |
| close()=0 (defined in TskDb) | TskDb | pure virtual |
| createSavepoint(const char *name)=0 (defined in TskDb) | TskDb | pure virtual |
| dbExists()=0 (defined in TskDb) | TskDb | pure virtual |
| extractExtension(char *name, char *extension) | TskDb | inlineprotected |
| getFileLayouts(vector< TSK_DB_FILE_LAYOUT_RANGE > &fileLayouts)=0 (defined in TskDb) | TskDb | pure virtual |
| getFsInfos(int64_t imgId, vector< TSK_DB_FS_INFO > &fsInfos)=0 (defined in TskDb) | TskDb | pure virtual |
| getFsRootDirObjectInfo(const int64_t fsObjId, TSK_DB_OBJECT &rootDirObjInfo)=0 (defined in TskDb) | TskDb | pure virtual |
| getObjectInfo(int64_t objId, TSK_DB_OBJECT &objectInfo)=0 (defined in TskDb) | TskDb | pure virtual |
| getParentImageId(const int64_t objId, int64_t &imageId)=0 (defined in TskDb) | TskDb | pure virtual |
| getParentPathAndName(const char *path, const char **ret_parent_path, const char **ret_name) (defined in TskDb) | TskDb | virtual |
| getVsInfo(int64_t objId, TSK_DB_VS_INFO &vsInfo)=0 (defined in TskDb) | TskDb | pure virtual |
| getVsInfos(int64_t imgId, vector< TSK_DB_VS_INFO > &vsInfos)=0 (defined in TskDb) | TskDb | pure virtual |
| getVsPartInfos(int64_t imgId, vector< TSK_DB_VS_PART_INFO > &vsPartInfos)=0 (defined in TskDb) | TskDb | pure virtual |
| inTransaction()=0 (defined in TskDb) | TskDb | pure virtual |
| isDbOpen()=0 (defined in TskDb) | TskDb | pure virtual |
| open(bool)=0 (defined in TskDb) | TskDb | pure virtual |
| releaseSavepoint(const char *name)=0 (defined in TskDb) | TskDb | pure virtual |
| revertSavepoint(const char *name)=0 (defined in TskDb) | TskDb | pure virtual |
| TskDb(const char *a_dbFilePathUtf8, bool a_blkMapFlag) | TskDb | |
| ~TskDb() (defined in TskDb) | TskDb | inlinevirtual |
Copyright © 2007-2020 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.