Interface for class that prepares for later carving. More...
#include <CarvePrep.h>
Inheritance diagram for CarvePrep:
Public Member Functions | |
| virtual int | processSectors ()=0 |
| Make one or more unallocated sectors image files to carve. More... | |
| virtual | ~CarvePrep (void) |
| Virtual destructor to ensure derived class constructors are called polymorphically. | |
Detailed Description
Interface for class that prepares for later carving.
CarvePrep is responsible for making unallocated sectors image files for later carving. The implementation can choose to create 1 or dozens of such files. Refer to Carving Files for details, but this class should get unallocated image IDs from TskImgDB, populate the unalloc_alloc map in the database, and schedule each unallocated image for later carving.
Member Function Documentation
|
pure virtual |
Make one or more unallocated sectors image files to carve.
- Returns
- 0 on success, 1 on error.
Implemented in TskCarvePrepSectorConcat.
The documentation for this class was generated from the following file:
- framework/tsk/framework/extraction/CarvePrep.h