The Sleuth Kit
4.12.1
|
Library functionality of the TSK ils tool. More...
#include "tsk_fs_i.h"
Functions | |
uint8_t | tsk_fs_ils (TSK_FS_INFO *fs, TSK_FS_ILS_FLAG_ENUM lclflags, TSK_INUM_T istart, TSK_INUM_T ilast, TSK_FS_META_FLAG_ENUM flags, int32_t skew, const TSK_TCHAR *img) |
Library API for inode walking. More... | |
Library functionality of the TSK ils tool.
uint8_t tsk_fs_ils | ( | TSK_FS_INFO * | fs, |
TSK_FS_ILS_FLAG_ENUM | lclflags, | ||
TSK_INUM_T | istart, | ||
TSK_INUM_T | ilast, | ||
TSK_FS_META_FLAG_ENUM | flags, | ||
int32_t | skew, | ||
const TSK_TCHAR * | img | ||
) |
Library API for inode walking.
fs | File system to analyze |
lclflags | TSK_FS_ILS_XXX flag settings |
istart | Starting inode address |
ilast | Ending inode address |
flags | Inode walk flags |
skew | clock skew in seconds |
img | Path to disk image name for header |
References TSK_FS_INFO::inode_walk, TSK_FS_META_FLAG_ALLOC, TSK_FS_META_FLAG_ORPHAN, and TSK_FS_META_FLAG_UNALLOC.
Copyright © 2007-2020 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.