TskCarvedFileInfo Struct Reference

Contains data derived from joining carved file records from multiple tables in the image database. More...

#include <TskImgDB.h>

Public Attributes
std::string	cFileName
	A "cfile" name for the carved file of the form: cfile_[vol_id]_[start_sector]_[file_id]. More...
uint64_t	fileID
	The unique ID of the carved file.
std::string	hash
	A hash of the carved file. More...

Detailed Description

Contains data derived from joining carved file records from multiple tables in the image database.

Member Data Documentation

std::string TskCarvedFileInfo::cFileName

A "cfile" name for the carved file of the form: cfile_[vol_id]_[start_sector]_[file_id].

[ext].

std::string TskCarvedFileInfo::hash

A hash of the carved file.

The type of the hash is a parameter to the function that returns objects of this type and is not included in the struct to reduce object size, since this struct is used to satisfy potentially high-volume data requests. The hash member may be an empty string if the requested hash is unavailable.

---

The documentation for this struct was generated from the following file:

• framework/tsk/framework/services/TskImgDB.h