The Sleuth Kit Framework
4.1
|
This is the complete list of members for TskImgDBPostgreSQL, including all inherited members.
addAllocUnallocMapInfo(int unallocVolID, int unallocImgID, uint64_t unallocImgStart, uint64_t length, uint64_t origImgStart) | TskImgDBPostgreSQL | virtual |
addArtifactType(int typeID, string artifactTypeName, string displayName) | TskImgDBPostgreSQL | protectedvirtual |
addAttributeType(int typeID, string attributeTypeName, string displayName) | TskImgDBPostgreSQL | protectedvirtual |
addBlackboardAttribute(TskBlackboardAttribute attr) | TskImgDBPostgreSQL | protectedvirtual |
addCarvedFileInfo(int vol_id, const char *name, uint64_t size, uint64_t *runStarts, uint64_t *runLengths, int numRuns, uint64_t &fileId) | TskImgDBPostgreSQL | virtual |
addDerivedFileInfo(const std::string &name, const uint64_t parentId, const bool isDirectory, const uint64_t size, const std::string &details, const int ctime, const int crtime, const int atime, const int mtime, uint64_t &fileId, std::string path) | TskImgDBPostgreSQL | virtual |
addFsBlockInfo(int fsID, uint64_t a_mFileId, int count, uint64_t blk_addr, uint64_t len) | TskImgDBPostgreSQL | virtual |
addFsFileInfo(int fileSystemID, const TSK_FS_FILE *fileSystemFile, const char *fileName, int fileSystemAttrType, int fileSystemAttrID, uint64_t &fileID, const char *filePath) | TskImgDBPostgreSQL | virtual |
addFsInfo(int volId, int fsId, const TSK_FS_INFO *fs_info) (defined in TskImgDBPostgreSQL) | TskImgDBPostgreSQL | virtual |
addImageInfo(int type, int sectorSize) (defined in TskImgDBPostgreSQL) | TskImgDBPostgreSQL | virtual |
addImageName(char const *imgName) | TskImgDBPostgreSQL | virtual |
addModule(const std::string &name, const std::string &description, int &moduleId) | TskImgDBPostgreSQL | virtual |
addToolInfo(const char *name, const char *version) (defined in TskImgDBPostgreSQL) | TskImgDBPostgreSQL | virtual |
addUnallocImg(int &unallocImgId) | TskImgDBPostgreSQL | virtual |
addUnusedSectors(int unallocImgId, std::vector< TskUnusedSectorsRecord > &unusedSectorsList) | TskImgDBPostgreSQL | virtual |
addVolumeInfo(const TSK_VS_PART_INFO *vs_part) | TskImgDBPostgreSQL | virtual |
BB_VALUE_TYPE_BYTE enum value | TskImgDB | |
BB_VALUE_TYPE_DOUBLE enum value | TskImgDB | |
BB_VALUE_TYPE_INT32 enum value | TskImgDB | |
BB_VALUE_TYPE_INT64 enum value | TskImgDB | |
BB_VALUE_TYPE_STRING enum value | TskImgDB | |
begin() | TskImgDBPostgreSQL | virtual |
close() | TskImgDBPostgreSQL | virtual |
commit() | TskImgDBPostgreSQL | virtual |
createArtifact(uint64_t artifactID, uint64_t objID, int artifactTypeID) (defined in TskImgDB) | TskImgDB | protected |
createAttribute(uint64_t artifactID, int attributeTypeID, uint64_t objectID, string moduleName, string context, TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE valueType, int valueInt, uint64_t valueLong, double valueDouble, string valueString, vector< unsigned char > valueBytes) (defined in TskImgDB) | TskImgDB | protected |
createBlackboardArtifact(uint64_t file_id, int artifactTypeID) | TskImgDBPostgreSQL | protectedvirtual |
dbExist() const (defined in TskImgDBPostgreSQL) | TskImgDBPostgreSQL | virtual |
FILE_STATUS enum name | TskImgDB | |
FILE_TYPES enum name | TskImgDB | |
findAttributeTypes(int artifactTypeId) (defined in TskImgDBPostgreSQL) | TskImgDBPostgreSQL | protectedvirtual |
findParObjId(const TSK_FS_FILE *fs_file, const int64_t &fsObjId) | TskImgDB | protected |
getAllArtifactTypes() (defined in TskImgDB) | TskImgDB | protectedvirtual |
getAllAttributeTypes() (defined in TskImgDB) | TskImgDB | protectedvirtual |
getAllUnallocImgStatus(std::vector< TskUnallocImgStatusRecord > &unallocImgStatusList) const | TskImgDBPostgreSQL | virtual |
getArtifactTypeDisplayName(int artifactTypeID) | TskImgDBPostgreSQL | protectedvirtual |
getArtifactTypeID(string artifactTypeString) | TskImgDBPostgreSQL | protectedvirtual |
getArtifactTypeName(int artifactTypeID) | TskImgDBPostgreSQL | protectedvirtual |
getAttributeTypeDisplayName(int attributeTypeID) | TskImgDBPostgreSQL | protectedvirtual |
getAttributeTypeID(string attributeTypeString) | TskImgDBPostgreSQL | protectedvirtual |
getAttributeTypeName(int attributeTypeID) | TskImgDBPostgreSQL | protectedvirtual |
getCarvedFileIds() const (defined in TskImgDBPostgreSQL) | TskImgDBPostgreSQL | virtual |
getCfileName(const uint64_t a_file_id) const (defined in TskImgDBPostgreSQL) | TskImgDBPostgreSQL | virtual |
getFileCount(const std::string &condition) const | TskImgDBPostgreSQL | virtual |
getFileId(int fsId, uint64_t fs_file_id) const | TskImgDBPostgreSQL | virtual |
getFileIds(char *a_fileName, uint64_t *a_outBuffer, int a_buffSize) const | TskImgDBPostgreSQL | virtual |
getFileIds(const std::string &condition) const | TskImgDBPostgreSQL | virtual |
getFileIds() const (defined in TskImgDBPostgreSQL) | TskImgDBPostgreSQL | virtual |
getFileInfoSummary(std::list< TskFileTypeRecord > &fileTypeInfoList) const | TskImgDBPostgreSQL | virtual |
getFileInfoSummary(FILE_TYPES fileType, std::list< TskFileTypeRecord > &fileTypeInfoList) const | TskImgDBPostgreSQL | virtual |
getFileName(uint64_t file_id) const (defined in TskImgDBPostgreSQL) | TskImgDBPostgreSQL | virtual |
getFileRecord(const uint64_t fileId, TskFileRecord &fileRecord) const | TskImgDBPostgreSQL | virtual |
getFileRecords(const std::string &condition) const | TskImgDBPostgreSQL | virtual |
getFileSectors(uint64_t fileId) const (defined in TskImgDBPostgreSQL) | TskImgDBPostgreSQL | virtual |
getFileUniqueIdentifiers(uint64_t a_fileId, uint64_t &a_fsOffset, uint64_t &a_fsFileId, int &a_attrType, int &a_attrId) const | TskImgDBPostgreSQL | virtual |
getFreeSectors() const | TskImgDBPostgreSQL | virtual |
getFsInfo(std::list< TskFsInfoRecord > &FsInfoList) const | TskImgDBPostgreSQL | virtual |
getImageBaseName() const | TskImgDBPostgreSQL | virtual |
getImageInfo(int &type, int §orSize) const | TskImgDBPostgreSQL | virtual |
getImageNames() const (defined in TskImgDBPostgreSQL) | TskImgDBPostgreSQL | virtual |
getImageNamesW() const | TskImgDBPostgreSQL | virtual |
getKnownStatus(const uint64_t fileId) const | TskImgDBPostgreSQL | virtual |
getMatchingArtifacts(string condition) | TskImgDBPostgreSQL | protectedvirtual |
getMatchingAttributes(string condition) | TskImgDBPostgreSQL | protectedvirtual |
getMaxFileIdReadyForAnalysis(uint64_t a_lastFileId, uint64_t &maxFileId) const | TskImgDBPostgreSQL | virtual |
getMinFileIdReadyForAnalysis(uint64_t &minFileId) const (defined in TskImgDBPostgreSQL) | TskImgDBPostgreSQL | virtual |
getModuleErrors(std::vector< TskModuleStatus > &moduleStatusList) const | TskImgDBPostgreSQL | virtual |
getModuleInfo(std::vector< TskModuleInfo > &moduleInfoList) const | TskImgDBPostgreSQL | virtual |
getNumFiles() const | TskImgDBPostgreSQL | virtual |
getNumVolumes() const | TskImgDBPostgreSQL | virtual |
getSessionID() const | TskImgDBPostgreSQL | virtual |
getUnallocImgStatus(int unallocImgId) const | TskImgDBPostgreSQL | virtual |
getUnallocRun(int file_id, int file_offset) const | TskImgDBPostgreSQL | virtual |
getUniqueCarvedFiles(HASH_TYPE hashType) const | TskImgDBPostgreSQL | virtual |
getUniqueCarvedFilesInfo(HASH_TYPE hashType) const | TskImgDBPostgreSQL | virtual |
getUniqueFileIds(HASH_TYPE hashType) const (defined in TskImgDBPostgreSQL) | TskImgDBPostgreSQL | virtual |
getUnusedSector(uint64_t fileId, TskUnusedSectorsRecord &unusedSectorsRecord) const | TskImgDBPostgreSQL | virtual |
getVolumeInfo(std::list< TskVolumeInfoRecord > &volumeInfoList) const | TskImgDBPostgreSQL | virtual |
HASH_TYPE enum name | TskImgDB | |
IMGDB_FILES_KNOWN enum value | TskImgDB | |
IMGDB_FILES_KNOWN_BAD enum value | TskImgDB | |
IMGDB_FILES_KNOWN_GOOD enum value | TskImgDB | |
IMGDB_FILES_STATUS_ANALYSIS_COMPLETE enum value (defined in TskImgDB) | TskImgDB | |
IMGDB_FILES_STATUS_ANALYSIS_FAILED enum value (defined in TskImgDB) | TskImgDB | |
IMGDB_FILES_STATUS_ANALYSIS_IN_PROGRESS enum value (defined in TskImgDB) | TskImgDB | |
IMGDB_FILES_STATUS_ANALYSIS_SKIPPED enum value (defined in TskImgDB) | TskImgDB | |
IMGDB_FILES_STATUS_CREATED enum value (defined in TskImgDB) | TskImgDB | |
IMGDB_FILES_STATUS_READY_FOR_ANALYSIS enum value (defined in TskImgDB) | TskImgDB | |
IMGDB_FILES_TYPE_CARVED enum value (defined in TskImgDB) | TskImgDB | |
IMGDB_FILES_TYPE_DERIVED enum value (defined in TskImgDB) | TskImgDB | |
IMGDB_FILES_TYPE_FS enum value (defined in TskImgDB) | TskImgDB | |
IMGDB_FILES_TYPE_UNUSED enum value (defined in TskImgDB) | TskImgDB | |
IMGDB_FILES_UNKNOWN enum value | TskImgDB | |
IMGDB_UNALLOC_IMG_STATUS_CARVED_ERR enum value (defined in TskImgDB) | TskImgDB | |
IMGDB_UNALLOC_IMG_STATUS_CARVED_NOT_NEEDED enum value (defined in TskImgDB) | TskImgDB | |
IMGDB_UNALLOC_IMG_STATUS_CARVED_OK enum value (defined in TskImgDB) | TskImgDB | |
IMGDB_UNALLOC_IMG_STATUS_CREATED enum value (defined in TskImgDB) | TskImgDB | |
IMGDB_UNALLOC_IMG_STATUS_SCHEDULE_ERR enum value (defined in TskImgDB) | TskImgDB | |
IMGDB_UNALLOC_IMG_STATUS_SCHEDULE_OK enum value (defined in TskImgDB) | TskImgDB | |
initialize() | TskImgDBPostgreSQL | virtual |
initializePreparedStatements() | TskImgDBPostgreSQL | virtual |
KNOWN_STATUS enum name | TskImgDB | |
m_parentDirIdCache (defined in TskImgDB) | TskImgDB | protected |
MD5 enum value | TskImgDB | |
open() | TskImgDBPostgreSQL | virtual |
quote(const std::string str) const (defined in TskImgDBPostgreSQL) | TskImgDBPostgreSQL | protectedvirtual |
setHash(const uint64_t a_file_id, const TskImgDB::HASH_TYPE hashType, const std::string &hash) const (defined in TskImgDBPostgreSQL) | TskImgDBPostgreSQL | virtual |
setModuleStatus(uint64_t file_id, int module_id, int status) | TskImgDBPostgreSQL | virtual |
setUnallocImgStatus(int unallocImgId, TskImgDB::UNALLOC_IMG_STATUS status) | TskImgDBPostgreSQL | virtual |
SHA1 enum value | TskImgDB | |
SHA2_256 enum value | TskImgDB | |
SHA2_512 enum value | TskImgDB | |
storeParObjId(const int64_t &fsObjId, const TSK_FS_FILE *fs_file, const int64_t &objId) | TskImgDB | protected |
TskDBBlackboard (defined in TskImgDBPostgreSQL) | TskImgDBPostgreSQL | friend |
TskImgDB() | TskImgDB | |
TskImgDBPostgreSQL(const std::string dbName) (defined in TskImgDBPostgreSQL) | TskImgDBPostgreSQL | |
UNALLOC_IMG_STATUS enum name | TskImgDB | |
updateFileStatus(uint64_t a_file_id, TskImgDB::FILE_STATUS a_status) | TskImgDBPostgreSQL | virtual |
updateKnownStatus(uint64_t a_file_id, TskImgDB::KNOWN_STATUS a_status) | TskImgDBPostgreSQL | virtual |
VALUE_TYPE enum name | TskImgDB | |
~TskImgDB() | TskImgDB | virtual |
~TskImgDBPostgreSQL() (defined in TskImgDBPostgreSQL) | TskImgDBPostgreSQL | virtual |
Copyright © 2011-2013 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.