|
The Sleuth Kit
4.12.1
|
File that contains functions to process TSK_FS_ATTRLIST structures, which hold a linked list of TSK_FS_ATTR attribute structures. More...
#include "tsk_fs_i.h"Functions | |
| uint8_t | tsk_fs_attrlist_add (TSK_FS_ATTRLIST *a_fs_attrlist, TSK_FS_ATTR *a_fs_attr) |
| TSK_FS_ATTRLIST * | tsk_fs_attrlist_alloc () |
| void | tsk_fs_attrlist_free (TSK_FS_ATTRLIST *a_fs_attrlist) |
| const TSK_FS_ATTR * | tsk_fs_attrlist_get (const TSK_FS_ATTRLIST *a_fs_attrlist, TSK_FS_ATTR_TYPE_ENUM a_type) |
| const TSK_FS_ATTR * | tsk_fs_attrlist_get_id (const TSK_FS_ATTRLIST *a_fs_attrlist, TSK_FS_ATTR_TYPE_ENUM a_type, uint16_t a_id) |
| const TSK_FS_ATTR * | tsk_fs_attrlist_get_idx (const TSK_FS_ATTRLIST *a_fs_attrlist, int a_idx) |
| int | tsk_fs_attrlist_get_len (const TSK_FS_ATTRLIST *a_fs_attrlist) |
| const TSK_FS_ATTR * | tsk_fs_attrlist_get_name_type (const TSK_FS_ATTRLIST *a_fs_attrlist, TSK_FS_ATTR_TYPE_ENUM a_type, const char *name) |
| TSK_FS_ATTR * | tsk_fs_attrlist_getnew (TSK_FS_ATTRLIST *a_fs_attrlist, TSK_FS_ATTR_FLAG_ENUM a_atype) |
| void | tsk_fs_attrlist_markunused (TSK_FS_ATTRLIST *a_fs_attrlist) |
File that contains functions to process TSK_FS_ATTRLIST structures, which hold a linked list of TSK_FS_ATTR attribute structures.
Copyright © 2007-2020 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.