The Sleuth Kit  4.11.1
Functions
ils_lib.c File Reference

Library functionality of the TSK ils tool. More...

#include "tsk_fs_i.h"

Functions

uint8_t tsk_fs_ils (TSK_FS_INFO *fs, TSK_FS_ILS_FLAG_ENUM lclflags, TSK_INUM_T istart, TSK_INUM_T ilast, TSK_FS_META_FLAG_ENUM flags, int32_t skew, const TSK_TCHAR *img)
 Library API for inode walking. More...
 

Detailed Description

Library functionality of the TSK ils tool.

Function Documentation

uint8_t tsk_fs_ils ( TSK_FS_INFO fs,
TSK_FS_ILS_FLAG_ENUM  lclflags,
TSK_INUM_T  istart,
TSK_INUM_T  ilast,
TSK_FS_META_FLAG_ENUM  flags,
int32_t  skew,
const TSK_TCHAR img 
)

Library API for inode walking.

Parameters
fsFile system to analyze
lclflagsTSK_FS_ILS_XXX flag settings
istartStarting inode address
ilastEnding inode address
flagsInode walk flags
skewclock skew in seconds
imgPath to disk image name for header
Returns
1 on error and 0 on success

References TSK_FS_INFO::inode_walk, TSK_FS_META_FLAG_ALLOC, TSK_FS_META_FLAG_ORPHAN, and TSK_FS_META_FLAG_UNALLOC.


Copyright © 2007-2020 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.