The Sleuth Kit
4.2
|
This is the complete list of members for TskDbSqlite, including all inherited members.
addCarvedFile(const int64_t parentObjId, const int64_t fsObjId, const uint64_t size, vector< TSK_DB_FILE_LAYOUT_RANGE > &ranges, int64_t &objId) | TskDbSqlite | |
addFileLayoutRange(const TSK_DB_FILE_LAYOUT_RANGE &fileLayoutRange) | TskDbSqlite | |
addFileLayoutRange(int64_t a_fileObjId, uint64_t a_byteStart, uint64_t a_byteLen, int a_sequence) | TskDbSqlite | |
addFsFile(TSK_FS_FILE *fs_file, const TSK_FS_ATTR *fs_attr, const char *path, const unsigned char *const md5, const TSK_DB_FILES_KNOWN_ENUM known, int64_t fsObjId, int64_t &objId) | TskDbSqlite | |
addFsInfo(const TSK_FS_INFO *fs_info, int64_t parObjId, int64_t &objId) | TskDbSqlite | |
addImageInfo(int type, int size, int64_t &objId, const string &timezone) | TskDbSqlite | |
addImageInfo(int type, int size, int64_t &objId, const string &timezone, TSK_OFF_T, const string &md5) | TskDbSqlite | |
addImageName(int64_t objId, char const *imgName, int sequence) | TskDbSqlite | |
addUnallocBlockFile(const int64_t parentObjId, const int64_t fsObjId, const uint64_t size, vector< TSK_DB_FILE_LAYOUT_RANGE > &ranges, int64_t &objId) | TskDbSqlite | |
addUnallocFsBlockFilesParent(const int64_t fsObjId, int64_t &objId) | TskDbSqlite | |
addUnusedBlockFile(const int64_t parentObjId, const int64_t fsObjId, const uint64_t size, vector< TSK_DB_FILE_LAYOUT_RANGE > &ranges, int64_t &objId) | TskDbSqlite | |
addVirtualDir(const int64_t fsObjId, const int64_t parentDirId, const char *const name, int64_t &objId) | TskDbSqlite | |
addVolumeInfo(const TSK_VS_PART_INFO *vs_part, int64_t parObjId, int64_t &objId) | TskDbSqlite | |
addVsInfo(const TSK_VS_INFO *vs_info, int64_t parObjId, int64_t &objId) | TskDbSqlite | |
close() (defined in TskDbSqlite) | TskDbSqlite | |
createSavepoint(const char *name) | TskDbSqlite | |
dbExist() const | TskDbSqlite | |
getFileLayouts(vector< TSK_DB_FILE_LAYOUT_RANGE > &fileLayouts) | TskDbSqlite | |
getFsInfos(int64_t imgId, vector< TSK_DB_FS_INFO > &fsInfos) | TskDbSqlite | |
getFsRootDirObjectInfo(const int64_t fsObjId, TSK_DB_OBJECT &rootDirObjInfo) | TskDbSqlite | |
getObjectInfo(int64_t objId, TSK_DB_OBJECT &objectInfo) | TskDbSqlite | |
getParentImageId(const int64_t objId, int64_t &imageId) | TskDbSqlite | |
getVsInfo(int64_t objId, TSK_DB_VS_INFO &vsInfo) | TskDbSqlite | |
getVsInfos(int64_t imgId, vector< TSK_DB_VS_INFO > &vsInfos) | TskDbSqlite | |
getVsPartInfos(int64_t imgId, vector< TSK_DB_VS_PART_INFO > &vsPartInfos) | TskDbSqlite | |
inTransaction() (defined in TskDbSqlite) | TskDbSqlite | |
open(bool) (defined in TskDbSqlite) | TskDbSqlite | |
releaseSavepoint(const char *name) | TskDbSqlite | |
revertSavepoint(const char *name) | TskDbSqlite | |
TskDbSqlite(const char *a_dbFilePathUtf8, bool a_blkMapFlag) | TskDbSqlite | |
~TskDbSqlite() (defined in TskDbSqlite) | TskDbSqlite |
Copyright © 2007-2015 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.