The Sleuth Kit
4.11.1
|
Public Attributes | |
int | alloc_file_count |
ntfs_attrdef * | attrdef |
size_t | attrdef_len |
TSK_FS_ATTR_RUN * | bmap |
char * | bmap_buf |
TSK_DADDR_T | bmap_buf_off |
uint32_t | csize_b |
ntfs_sb * | fs |
TSK_FS_INFO | fs_info |
uint32_t | idx_rsize_b |
uint8_t | loading_the_MFT |
tsk_lock_t | lock |
const TSK_FS_ATTR * | mft_data |
TSK_FS_FILE * | mft_file |
uint32_t | mft_rsize_b |
void * | orphan_map |
tsk_lock_t | orphan_map_lock |
TSK_DADDR_T | root_mft_addr |
NTFS_SXX_BUFFER | sds_data |
tsk_lock_t | sid_lock |
NTFS_SXX_BUFFER | sii_data |
uint16_t | ssize_b |
NTFS_USNJINFO * | usnjinfo |
uint8_t | ver |
Copyright © 2007-2020 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.