|
The Sleuth Kit
4.11.1
|
Public Attributes | |
| uint8_t | accessed_date [2] |
| Date part of DOS time stamp. | |
| uint8_t | accessed_time [2] |
| Time part of DOS time stamp. | |
| uint8_t | accessed_time_time_zone_offset |
| Time zone difference to UTC in 15 minute increments. | |
| uint8_t | attrs [2] |
| File attributes. | |
| uint8_t | check_sum [2] |
| Set checksum. | |
| uint8_t | created_date [2] |
| Date part of DOS time stamp. | |
| uint8_t | created_time [2] |
| Time part of DOS time stamp. | |
| uint8_t | created_time_tenths_of_sec |
| Tenths of seconds part of a DOS time stamp, range is 0-199. | |
| uint8_t | created_time_time_zone_offset |
| Time zone difference to UTC in 15 minute increments. | |
| uint8_t | entry_type |
| 0x85 if allocated, 0x05 if deleted | |
| uint8_t | modified_date [2] |
| Date part of DOS time stamp. | |
| uint8_t | modified_time [2] |
| Time part of DOS time stamp. | |
| uint8_t | modified_time_tenths_of_sec |
| Tenths of seconds part of a DOS time stamp, range is 0-199. | |
| uint8_t | modified_time_time_zone_offset |
| Time zone difference to UTC in 15 minute increments. | |
| uint8_t | reserved1 [2] |
| Reserved. | |
| uint8_t | reserved2 [7] |
| Reserved. | |
| uint8_t | secondary_entries_count |
| Number of entries following the primary directory entry (Range: 2 to 18) | |
Copyright © 2007-2020 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.