The Sleuth Kit
4.11.1
|
Generic structure to store the file name information that is stored in a directory. More...
#include <tsk_fs.h>
Public Attributes | |
uint64_t | date_added |
Time entry was added to a directory (APFS only) | |
TSK_FS_NAME_FLAG_ENUM | flags |
Flags that describe allocation status etc. | |
TSK_INUM_T | meta_addr |
Address of the metadata structure that the name points to. | |
uint32_t | meta_seq |
Sequence number for metadata structure (NTFS only) | |
char * | name |
The name of the file (in UTF-8) | |
size_t | name_size |
The number of bytes allocated to name. | |
TSK_INUM_T | par_addr |
Metadata address of parent directory (equal to meta_addr if this entry is for root directory). | |
uint32_t | par_seq |
Sequence number for parent directory (NTFS only) | |
char * | shrt_name |
The short name of the file or null (in UTF-8) | |
size_t | shrt_name_size |
The number of bytes allocated to shrt_name. | |
int | tag |
TSK_FS_NAME_TYPE_ENUM | type |
File type information (directory, file, etc.) | |
Generic structure to store the file name information that is stored in a directory.
Most file systems separate the file name from the metadata, but some do not (such as FAT). This structure contains the name and address of the metadata.
Copyright © 2007-2020 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.