The Sleuth Kit  4.11.1
Functions
tsk_hashdb.c File Reference

Contains the code to open and close all supported hash database types. More...

#include "tsk_hashdb_i.h"

Functions

uint8_t tsk_hdb_accepts_updates (TSK_HDB_INFO *hdb_info)
 Indicates whether a hash database accepts updates. More...
 
uint8_t tsk_hdb_add_entry (TSK_HDB_INFO *hdb_info, const char *filename, const char *md5, const char *sha1, const char *sha256, const char *comment)
 Adds a new entry to a hash database. More...
 
uint8_t tsk_hdb_begin_transaction (TSK_HDB_INFO *hdb_info)
 Begins a transaction on a hash database. More...
 
void tsk_hdb_close (TSK_HDB_INFO *hdb_info)
 Closes an open hash database. More...
 
uint8_t tsk_hdb_commit_transaction (TSK_HDB_INFO *hdb_info)
 Commits a transaction on a hash database. More...
 
uint8_t tsk_hdb_create (TSK_TCHAR *file_path)
 Creates a new hash database. More...
 
const TSK_TCHARtsk_hdb_get_db_path (TSK_HDB_INFO *hdb_info)
 
const char * tsk_hdb_get_display_name (TSK_HDB_INFO *hdb_info)
 
const TSK_TCHARtsk_hdb_get_idx_path (TSK_HDB_INFO *hdb_info, TSK_HDB_HTYPE_ENUM htype)
 
uint8_t tsk_hdb_has_idx (TSK_HDB_INFO *hdb_info, TSK_HDB_HTYPE_ENUM htype)
 Determine if the open hash database has an index. More...
 
uint8_t tsk_hdb_is_idx_only (TSK_HDB_INFO *hdb_info)
 Test for index only (legacy) Assumes that the db was opened using the TSK_HDB_OPEN_TRY option. More...
 
int8_t tsk_hdb_lookup_raw (TSK_HDB_INFO *hdb_info, uint8_t *hash, uint8_t len, TSK_HDB_FLAG_ENUM flags, TSK_HDB_LOOKUP_FN action, void *ptr)
 Search the index for the given hash value given (in binary form). More...
 
int8_t tsk_hdb_lookup_str (TSK_HDB_INFO *hdb_info, const char *hash, TSK_HDB_FLAG_ENUM flags, TSK_HDB_LOOKUP_FN action, void *ptr)
 Searches a hash database for a text/ASCII hash value. More...
 
int8_t tsk_hdb_lookup_verbose_str (TSK_HDB_INFO *hdb_info, const char *hash, void *result)
 
uint8_t tsk_hdb_make_index (TSK_HDB_INFO *hdb_info, TSK_TCHAR *type)
 Create an index for an open hash database. More...
 
TSK_HDB_INFOtsk_hdb_open (TSK_TCHAR *file_path, TSK_HDB_OPEN_ENUM flags)
 Opens an existing hash database. More...
 
uint8_t tsk_hdb_open_idx (TSK_HDB_INFO *hdb_info, TSK_HDB_HTYPE_ENUM htype)
 
uint8_t tsk_hdb_rollback_transaction (TSK_HDB_INFO *hdb_info)
 Rolls back a transaction on a hash database. More...
 
uint8_t tsk_hdb_uses_external_indexes (TSK_HDB_INFO *hdb_info)
 

Detailed Description

Contains the code to open and close all supported hash database types.


Copyright © 2007-2020 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.