The Sleuth Kit
4.12.1
|
Contains the code to open and close all supported hash database types. More...
#include "tsk_hashdb_i.h"
Functions | |
uint8_t | tsk_hdb_accepts_updates (TSK_HDB_INFO *hdb_info) |
Indicates whether a hash database accepts updates. More... | |
uint8_t | tsk_hdb_add_entry (TSK_HDB_INFO *hdb_info, const char *filename, const char *md5, const char *sha1, const char *sha256, const char *comment) |
Adds a new entry to a hash database. More... | |
uint8_t | tsk_hdb_begin_transaction (TSK_HDB_INFO *hdb_info) |
Begins a transaction on a hash database. More... | |
void | tsk_hdb_close (TSK_HDB_INFO *hdb_info) |
Closes an open hash database. More... | |
uint8_t | tsk_hdb_commit_transaction (TSK_HDB_INFO *hdb_info) |
Commits a transaction on a hash database. More... | |
uint8_t | tsk_hdb_create (TSK_TCHAR *file_path) |
Creates a new hash database. More... | |
const TSK_TCHAR * | tsk_hdb_get_db_path (TSK_HDB_INFO *hdb_info) |
const char * | tsk_hdb_get_display_name (TSK_HDB_INFO *hdb_info) |
const TSK_TCHAR * | tsk_hdb_get_idx_path (TSK_HDB_INFO *hdb_info, TSK_HDB_HTYPE_ENUM htype) |
uint8_t | tsk_hdb_has_idx (TSK_HDB_INFO *hdb_info, TSK_HDB_HTYPE_ENUM htype) |
Determine if the open hash database has an index. More... | |
uint8_t | tsk_hdb_is_idx_only (TSK_HDB_INFO *hdb_info) |
Test for index only (legacy) Assumes that the db was opened using the TSK_HDB_OPEN_TRY option. More... | |
int8_t | tsk_hdb_lookup_raw (TSK_HDB_INFO *hdb_info, uint8_t *hash, uint8_t len, TSK_HDB_FLAG_ENUM flags, TSK_HDB_LOOKUP_FN action, void *ptr) |
Search the index for the given hash value given (in binary form). More... | |
int8_t | tsk_hdb_lookup_str (TSK_HDB_INFO *hdb_info, const char *hash, TSK_HDB_FLAG_ENUM flags, TSK_HDB_LOOKUP_FN action, void *ptr) |
Searches a hash database for a text/ASCII hash value. More... | |
int8_t | tsk_hdb_lookup_verbose_str (TSK_HDB_INFO *hdb_info, const char *hash, void *result) |
uint8_t | tsk_hdb_make_index (TSK_HDB_INFO *hdb_info, TSK_TCHAR *type) |
Create an index for an open hash database. More... | |
TSK_HDB_INFO * | tsk_hdb_open (TSK_TCHAR *file_path, TSK_HDB_OPEN_ENUM flags) |
Opens an existing hash database. More... | |
uint8_t | tsk_hdb_open_idx (TSK_HDB_INFO *hdb_info, TSK_HDB_HTYPE_ENUM htype) |
uint8_t | tsk_hdb_rollback_transaction (TSK_HDB_INFO *hdb_info) |
Rolls back a transaction on a hash database. More... | |
uint8_t | tsk_hdb_uses_external_indexes (TSK_HDB_INFO *hdb_info) |
Contains the code to open and close all supported hash database types.
Copyright © 2007-2020 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.