|
The Sleuth Kit Framework
4.1
|
This is the complete list of members for TskImgDB, including all inherited members.
| addAllocUnallocMapInfo(int a_volID, int unallocImgID, uint64_t unallocImgStart, uint64_t length, uint64_t origImgStart)=0 | TskImgDB | pure virtual |
| addArtifactType(int typeID, string artifactTypeName, string displayName)=0 (defined in TskImgDB) | TskImgDB | protectedpure virtual |
| addAttributeType(int typeID, string attributeTypeName, string displayName)=0 (defined in TskImgDB) | TskImgDB | protectedpure virtual |
| addBlackboardAttribute(TskBlackboardAttribute attr)=0 (defined in TskImgDB) | TskImgDB | protectedpure virtual |
| addCarvedFileInfo(int vol_id, const char *name, uint64_t size, uint64_t *runStarts, uint64_t *runLengths, int numRuns, uint64_t &fileId)=0 (defined in TskImgDB) | TskImgDB | pure virtual |
| addDerivedFileInfo(const std::string &name, const uint64_t parentId, const bool isDirectory, const uint64_t size, const std::string &details, const int ctime, const int crtime, const int atime, const int mtime, uint64_t &fileId, std::string path)=0 (defined in TskImgDB) | TskImgDB | pure virtual |
| addFsBlockInfo(int fsID, uint64_t a_mFileId, int count, uint64_t blk_addr, uint64_t len)=0 (defined in TskImgDB) | TskImgDB | pure virtual |
| addFsFileInfo(int fileSystemID, const TSK_FS_FILE *fileSystemFile, const char *fileName, int fileSystemAttrType, int fileSystemAttrID, uint64_t &fileID, const char *filePath)=0 | TskImgDB | pure virtual |
| addFsInfo(int volId, int fsId, const TSK_FS_INFO *fs_info)=0 (defined in TskImgDB) | TskImgDB | pure virtual |
| addImageInfo(int type, int sectorSize)=0 (defined in TskImgDB) | TskImgDB | pure virtual |
| addImageName(char const *imgPath)=0 | TskImgDB | pure virtual |
| addModule(const std::string &name, const std::string &description, int &moduleId)=0 (defined in TskImgDB) | TskImgDB | pure virtual |
| addToolInfo(const char *name, const char *version)=0 (defined in TskImgDB) | TskImgDB | pure virtual |
| addUnallocImg(int &unallocImgId)=0 | TskImgDB | pure virtual |
| addUnusedSectors(int unallocImgId, std::vector< TskUnusedSectorsRecord > &unusedSectorsList)=0 (defined in TskImgDB) | TskImgDB | pure virtual |
| addVolumeInfo(const TSK_VS_PART_INFO *vs_part)=0 (defined in TskImgDB) | TskImgDB | pure virtual |
| BB_VALUE_TYPE_BYTE enum value | TskImgDB | |
| BB_VALUE_TYPE_DOUBLE enum value | TskImgDB | |
| BB_VALUE_TYPE_INT32 enum value | TskImgDB | |
| BB_VALUE_TYPE_INT64 enum value | TskImgDB | |
| BB_VALUE_TYPE_STRING enum value | TskImgDB | |
| begin()=0 (defined in TskImgDB) | TskImgDB | pure virtual |
| close()=0 | TskImgDB | pure virtual |
| commit()=0 (defined in TskImgDB) | TskImgDB | pure virtual |
| createArtifact(uint64_t artifactID, uint64_t objID, int artifactTypeID) (defined in TskImgDB) | TskImgDB | protected |
| createAttribute(uint64_t artifactID, int attributeTypeID, uint64_t objectID, string moduleName, string context, TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE valueType, int valueInt, uint64_t valueLong, double valueDouble, string valueString, vector< unsigned char > valueBytes) (defined in TskImgDB) | TskImgDB | protected |
| createBlackboardArtifact(uint64_t file_id, int artifactTypeID)=0 (defined in TskImgDB) | TskImgDB | protectedpure virtual |
| dbExist() const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| FILE_STATUS enum name | TskImgDB | |
| FILE_TYPES enum name | TskImgDB | |
| findAttributeTypes(int artifactTypeId)=0 (defined in TskImgDB) | TskImgDB | protectedpure virtual |
| findParObjId(const TSK_FS_FILE *fs_file, const int64_t &fsObjId) | TskImgDB | protected |
| getAllArtifactTypes() (defined in TskImgDB) | TskImgDB | protectedvirtual |
| getAllAttributeTypes() (defined in TskImgDB) | TskImgDB | protectedvirtual |
| getAllUnallocImgStatus(std::vector< TskUnallocImgStatusRecord > &unallocImgStatusList) const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| getArtifactTypeDisplayName(int artifactTypeID)=0 (defined in TskImgDB) | TskImgDB | protectedpure virtual |
| getArtifactTypeID(string artifactTypeString)=0 (defined in TskImgDB) | TskImgDB | protectedpure virtual |
| getArtifactTypeName(int artifactTypeID)=0 (defined in TskImgDB) | TskImgDB | protectedpure virtual |
| getAttributeTypeDisplayName(int attributeTypeID)=0 (defined in TskImgDB) | TskImgDB | protectedpure virtual |
| getAttributeTypeID(string attributeTypeString)=0 (defined in TskImgDB) | TskImgDB | protectedpure virtual |
| getAttributeTypeName(int attributeTypeID)=0 (defined in TskImgDB) | TskImgDB | protectedpure virtual |
| getCarvedFileIds() const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| getCfileName(const uint64_t a_file_id) const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| getFileCount(const std::string &condition) const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| getFileId(int fsId, uint64_t fs_file_id) const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| getFileIds(char *a_fileName, uint64_t *a_outBuffer, int a_buffSize) const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| getFileIds(const std::string &condition) const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| getFileIds() const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| getFileInfoSummary(std::list< TskFileTypeRecord > &fileTypeInfoList) const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| getFileInfoSummary(FILE_TYPES fileType, std::list< TskFileTypeRecord > &fileTypeInfoList) const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| getFileName(uint64_t file_id) const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| getFileRecord(const uint64_t fileId, TskFileRecord &fileRecord) const =0 | TskImgDB | pure virtual |
| getFileRecords(const std::string &condition) const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| getFileSectors(uint64_t fileId) const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| getFileUniqueIdentifiers(uint64_t a_fileId, uint64_t &a_fsOffset, uint64_t &a_fsFileId, int &a_attrType, int &a_attrId) const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| getFreeSectors() const =0 | TskImgDB | pure virtual |
| getFsInfo(std::list< TskFsInfoRecord > &fsInfoList) const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| getImageBaseName() const =0 | TskImgDB | pure virtual |
| getImageInfo(int &type, int §orSize) const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| getImageNames() const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| getImageNamesW() const =0 | TskImgDB | pure virtual |
| getKnownStatus(const uint64_t fileId) const =0 | TskImgDB | pure virtual |
| getMatchingArtifacts(string whereClause)=0 (defined in TskImgDB) | TskImgDB | protectedpure virtual |
| getMatchingAttributes(string whereClause)=0 (defined in TskImgDB) | TskImgDB | protectedpure virtual |
| getMaxFileIdReadyForAnalysis(uint64_t a_lastFileId, uint64_t &maxFileId) const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| getMinFileIdReadyForAnalysis(uint64_t &minFileId) const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| getModuleErrors(std::vector< TskModuleStatus > &moduleStatusList) const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| getModuleInfo(std::vector< TskModuleInfo > &moduleInfoList) const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| getNumFiles() const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| getNumVolumes() const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| getSessionID() const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| getUnallocImgStatus(int unallocImgId) const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| getUnallocRun(int a_unalloc_img_id, int a_file_offset) const =0 | TskImgDB | pure virtual |
| getUniqueCarvedFiles(HASH_TYPE hashType) const =0 | TskImgDB | pure virtual |
| getUniqueCarvedFilesInfo(HASH_TYPE hashType) const =0 | TskImgDB | pure virtual |
| getUniqueFileIds(HASH_TYPE hashType) const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| getUnusedSector(uint64_t fileId, TskUnusedSectorsRecord &unusedSectorsRecord) const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| getVolumeInfo(std::list< TskVolumeInfoRecord > &volumeInfoList) const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| HASH_TYPE enum name | TskImgDB | |
| IMGDB_FILES_KNOWN enum value | TskImgDB | |
| IMGDB_FILES_KNOWN_BAD enum value | TskImgDB | |
| IMGDB_FILES_KNOWN_GOOD enum value | TskImgDB | |
| IMGDB_FILES_STATUS_ANALYSIS_COMPLETE enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_FILES_STATUS_ANALYSIS_FAILED enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_FILES_STATUS_ANALYSIS_IN_PROGRESS enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_FILES_STATUS_ANALYSIS_SKIPPED enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_FILES_STATUS_CREATED enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_FILES_STATUS_READY_FOR_ANALYSIS enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_FILES_TYPE_CARVED enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_FILES_TYPE_DERIVED enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_FILES_TYPE_FS enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_FILES_TYPE_UNUSED enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_FILES_UNKNOWN enum value | TskImgDB | |
| IMGDB_UNALLOC_IMG_STATUS_CARVED_ERR enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_UNALLOC_IMG_STATUS_CARVED_NOT_NEEDED enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_UNALLOC_IMG_STATUS_CARVED_OK enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_UNALLOC_IMG_STATUS_CREATED enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_UNALLOC_IMG_STATUS_SCHEDULE_ERR enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_UNALLOC_IMG_STATUS_SCHEDULE_OK enum value (defined in TskImgDB) | TskImgDB | |
| initialize()=0 | TskImgDB | pure virtual |
| KNOWN_STATUS enum name | TskImgDB | |
| m_parentDirIdCache (defined in TskImgDB) | TskImgDB | protected |
| MD5 enum value | TskImgDB | |
| open()=0 | TskImgDB | pure virtual |
| quote(const std::string str) const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| setHash(const uint64_t a_file_id, const TskImgDB::HASH_TYPE hashType, const std::string &hash) const =0 (defined in TskImgDB) | TskImgDB | pure virtual |
| setModuleStatus(uint64_t file_id, int module_id, int status)=0 (defined in TskImgDB) | TskImgDB | pure virtual |
| setUnallocImgStatus(int unallocImgId, TskImgDB::UNALLOC_IMG_STATUS status)=0 (defined in TskImgDB) | TskImgDB | pure virtual |
| SHA1 enum value | TskImgDB | |
| SHA2_256 enum value | TskImgDB | |
| SHA2_512 enum value | TskImgDB | |
| storeParObjId(const int64_t &fsObjId, const TSK_FS_FILE *fs_file, const int64_t &objId) | TskImgDB | protected |
| TskDBBlackboard (defined in TskImgDB) | TskImgDB | friend |
| TskImgDB() | TskImgDB | |
| UNALLOC_IMG_STATUS enum name | TskImgDB | |
| updateFileStatus(uint64_t a_file_id, FILE_STATUS a_status)=0 | TskImgDB | pure virtual |
| updateKnownStatus(uint64_t a_file_id, KNOWN_STATUS a_status)=0 | TskImgDB | pure virtual |
| VALUE_TYPE enum name | TskImgDB | |
| ~TskImgDB() | TskImgDB | virtual |
Copyright © 2011-2013 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.