| 
    The Sleuth Kit Framework
    4.1
    
   | 
 
Supports launching a process via an executable file to perform some analysis on a TskFile object in a TskPipeline. More...
#include <TskExecutableModule.h>
  
 Public Member Functions | |
| std::string | getOutput () const | 
| virtual Status | report () | 
| Run the module in the reporting pipeline.  | |
| virtual Status | run (TskFile *fileToAnalyze) | 
| Run the module on the given file.  | |
| void | setOutput (const std::string &outFile) | 
| Set the output location.  | |
| virtual void | setPath (const std::string &location) | 
| Set the path of the executable to run.  More... | |
| TskExecutableModule () | |
| Constructor.  | |
| virtual | ~TskExecutableModule () | 
| Destructor.  | |
  Public Member Functions inherited from TskModule | |
| std::string | getArguments () const | 
| Get the arguments.  | |
| std::string | getDescription () const | 
| Get the module description.  | |
| int | getModuleId () const | 
| Get the module id.  | |
| std::string | getName () const | 
| Get the module name.  | |
| virtual std::string | getPath () const | 
| Returns the fully qualified path to the module.  | |
| std::string | getVersion () const | 
| Get the module version.  | |
| void | setArguments (const std::string &args) | 
| Set the arguments to be passed to the module.  | |
| void | setModuleId (int moduleId) | 
| Set the module id.  | |
Additional Inherited Members | |
  Public Types inherited from TskModule | |
| enum | Status { OK = 0, FAIL, STOP } | 
| Standard values that module methods can return.  More... | |
  Static Public Attributes inherited from TskModule | |
| static const std::string | CURRENT_FILE_MACRO = "#CURRENT_FILE#" | 
| The TskModule class supports the use of a string macro that is expanded to the path of the file currently under analysis.  More... | |
  Static Protected Member Functions inherited from TskModule | |
| static std::string | expandArgumentMacros (const std::string &args, const TskFile *fileToAnalyze) | 
  Protected Attributes inherited from TskModule | |
| std::string | m_arguments | 
| std::string | m_description | 
| int | m_moduleId | 
| std::string | m_modulePath | 
| std::string | m_name | 
| std::string | m_version | 
Supports launching a process via an executable file to perform some analysis on a TskFile object in a TskPipeline.
      
  | 
  virtual | 
Set the path of the executable to run.
Confirm that an executable file exists at location.
Reimplemented from TskModule.
References LOGERROR, TskModule::setPath(), and TskException::what().
Copyright © 2011-2013 Brian Carrier.  (carrier -at- sleuthkit -dot- org)
 
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.