Sleuth Kit Java Bindings (JNI)  4.11.0
Java bindings for using The Sleuth Kit
org.sleuthkit.datamodel.SleuthkitJNI Class Reference

Classes

class  CaseDbHandle
 

Static Public Member Functions

static Image addImageToDatabase (SleuthkitCase skCase, String[] imagePaths, int sectorSize, String timeZone, String md5fromSettings, String sha1fromSettings, String sha256fromSettings, String deviceId) throws TskCoreException
 
static Image addImageToDatabase (SleuthkitCase skCase, String[] imagePaths, int sectorSize, String timeZone, String md5fromSettings, String sha1fromSettings, String sha256fromSettings, String deviceId, Host host) throws TskCoreException
 
static void addToHashDatabase (String filename, String md5, String sha1, String sha256, String comment, int dbHandle) throws TskCoreException
 
static void addToHashDatabase (List< HashEntry > hashes, int dbHandle) throws TskCoreException
 
static void cancelFinishImage (long imgHandle)
 
static void closeAllHashDatabases () throws TskCoreException
 
static void closeFile (long fileHandle)
 
static void closeFile (long fileHandle, SleuthkitCase skCase)
 
static void closeFs (long fsHandle)
 
static void closeHashDatabase (int dbHandle) throws TskCoreException
 
static void closeImg (long imgHandle)
 
static void closeVs (long vsHandle)
 
static int createHashDatabase (String path) throws TskCoreException
 
static void createLookupIndexForHashDatabase (int dbHandle) throws TskCoreException
 
static long findDeviceSize (String devPath) throws TskCoreException
 
static int finishImageWriter (long imgHandle) throws TskCoreException
 
static List< String > getFileMetaDataText (long fileHandle) throws TskCoreException
 
static int getFinishImageProgress (long imgHandle)
 
static String getHashDatabaseDisplayName (int dbHandle) throws TskCoreException
 
static String getHashDatabaseIndexPath (int dbHandle) throws TskCoreException
 
static String getHashDatabasePath (int dbHandle) throws TskCoreException
 
static String getVersion ()
 
static boolean hashDatabaseCanBeReindexed (int dbHandle) throws TskCoreException
 
static boolean hashDatabaseHasLookupIndex (int dbHandle) throws TskCoreException
 
static boolean hashDatabaseIsIndexOnly (int dbHandle) throws TskCoreException
 
static boolean isImageSupported (String imagePath)
 
static boolean isUpdateableHashDatabase (int dbHandle) throws TskCoreException
 
static boolean lookupInHashDatabase (String hash, int dbHandle) throws TskCoreException
 
static HashHitInfo lookupInHashDatabaseVerbose (String hash, int dbHandle) throws TskCoreException
 
static long openFile (long fsHandle, long fileId, TSK_FS_ATTR_TYPE_ENUM attrType, int attrId, SleuthkitCase skCase) throws TskCoreException
 
static long openFile (long fsHandle, long fileId, TSK_FS_ATTR_TYPE_ENUM attrType, int attrId) throws TskCoreException
 
static long openFs (long imgHandle, long fsOffset, SleuthkitCase skCase) throws TskCoreException
 
static long openFs (long imgHandle, long fsOffset) throws TskCoreException
 
static int openHashDatabase (String path) throws TskCoreException
 
static long openImage (String[] imageFiles, SleuthkitCase skCase) throws TskCoreException
 
static long openImage (String[] imageFiles, int sSize, SleuthkitCase skCase) throws TskCoreException
 
static long openImage (String[] imageFiles) throws TskCoreException
 
static long openImage (String[] imageFiles, int sSize) throws TskCoreException
 
static long openVs (long imgHandle, long vsOffset) throws TskCoreException
 
static long openVsPart (long vsHandle, long volId) throws TskCoreException
 
static int readFile (long fileHandle, byte[] readBuffer, long offset, long len) throws TskCoreException
 
static int readFileSlack (long fileHandle, byte[] readBuffer, long offset, long len) throws TskCoreException
 
static int readFs (long fsHandle, byte[] readBuffer, long offset, long len) throws TskCoreException
 
static int readImg (long imgHandle, byte[] readBuffer, long offset, long len) throws TskCoreException
 
static int readVs (long vsHandle, byte[] readBuffer, long offset, long len) throws TskCoreException
 
static int readVsPart (long volHandle, byte[] readBuffer, long offset, long len) throws TskCoreException
 
static void startVerboseLogging (String logPath)
 

Detailed Description

A utility class that provides a interface to the SleuthKit via JNI. Supports case management, add image process, reading data off content objects Setting up Hash database parameters and updating / reading values

Caches image and filesystem handles and reuses them for the duration of the application

Definition at line 52 of file SleuthkitJNI.java.

Member Function Documentation

static Image org.sleuthkit.datamodel.SleuthkitJNI.addImageToDatabase ( SleuthkitCase  skCase,
String[]  imagePaths,
int  sectorSize,
String  timeZone,
String  md5fromSettings,
String  sha1fromSettings,
String  sha256fromSettings,
String  deviceId 
) throws TskCoreException
static

Add an image to the database and return the open image.

Parameters
skCaseThe current case.
imagePathsThe path(s) to the image (will just be the first for .e01, .001, etc).
sectorSizeThe sector size (0 for auto-detect).
timeZoneThe time zone.
md5fromSettingsMD5 hash (if known).
sha1fromSettingsSHA1 hash (if known).
sha256fromSettingsSHA256 hash (if known).
deviceIdDevice ID.
Returns
The Image object.
Exceptions
TskCoreException

Definition at line 952 of file SleuthkitJNI.java.

Referenced by org.sleuthkit.datamodel.SleuthkitJNI.CaseDbHandle.AddImageProcess.run().

static Image org.sleuthkit.datamodel.SleuthkitJNI.addImageToDatabase ( SleuthkitCase  skCase,
String[]  imagePaths,
int  sectorSize,
String  timeZone,
String  md5fromSettings,
String  sha1fromSettings,
String  sha256fromSettings,
String  deviceId,
Host  host 
) throws TskCoreException
static

Add an image to the database and return the open image.

Parameters
skCaseThe current case.
imagePathsThe path(s) to the image (will just be the first for .e01, .001, etc).
sectorSizeThe sector size (0 for auto-detect).
timeZoneThe time zone.
md5fromSettingsMD5 hash (if known).
sha1fromSettingsSHA1 hash (if known).
sha256fromSettingsSHA256 hash (if known).
deviceIdDevice ID.
hostHost.
Returns
The Image object.
Exceptions
TskCoreException

Definition at line 975 of file SleuthkitJNI.java.

References org.sleuthkit.datamodel.SleuthkitCase.addImage(), org.sleuthkit.datamodel.SleuthkitCase.beginTransaction(), org.sleuthkit.datamodel.SleuthkitCase.CaseDbTransaction.commit(), org.sleuthkit.datamodel.SleuthkitCase.CaseDbTransaction.rollback(), and org.sleuthkit.datamodel.TskData.TSK_IMG_TYPE_ENUM.valueOf().

static void org.sleuthkit.datamodel.SleuthkitJNI.addToHashDatabase ( String  filename,
String  md5,
String  sha1,
String  sha256,
String  comment,
int  dbHandle 
) throws TskCoreException
static

Adds a hash value to a hash database.

Parameters
filenameName of file (can be null)
md5Text of MD5 hash (can be null)
sha1Text of SHA1 hash (can be null)
sha256Text of SHA256 hash (can be null)
commentA comment (can be null)
dbHandleHandle to DB
Exceptions
TskCoreException

Definition at line 1795 of file SleuthkitJNI.java.

static void org.sleuthkit.datamodel.SleuthkitJNI.addToHashDatabase ( List< HashEntry hashes,
int  dbHandle 
) throws TskCoreException
static

Definition at line 1799 of file SleuthkitJNI.java.

static void org.sleuthkit.datamodel.SleuthkitJNI.cancelFinishImage ( long  imgHandle)
static

Cancel the finish image process

Parameters
imgHandle

Definition at line 1907 of file SleuthkitJNI.java.

static void org.sleuthkit.datamodel.SleuthkitJNI.closeAllHashDatabases ( ) throws TskCoreException
static

Close the currently open lookup databases. Resets the handle counting.

Exceptions
TskCoreExceptionexception thrown if critical error occurs within TSK

Definition at line 1724 of file SleuthkitJNI.java.

static void org.sleuthkit.datamodel.SleuthkitJNI.closeFile ( long  fileHandle)
static

frees the fileHandle pointer

Parameters
fileHandlepointer to file structure in sleuthkit

Definition at line 1582 of file SleuthkitJNI.java.

Referenced by org.sleuthkit.datamodel.FsContent.close().

static void org.sleuthkit.datamodel.SleuthkitJNI.closeFile ( long  fileHandle,
SleuthkitCase  skCase 
)
static

frees the fileHandle pointer

Parameters
fileHandlepointer to file structure in sleuthkit
skCasethe case containing the file

Definition at line 1592 of file SleuthkitJNI.java.

static void org.sleuthkit.datamodel.SleuthkitJNI.closeFs ( long  fsHandle)
static

frees the fsHandle pointer Currently does not do anything - fsHandle should only be freed as part of CaseDbHandle.free().

Parameters
fsHandlepointer to file system structure in sleuthkit

Definition at line 2016 of file SleuthkitJNI.java.

static void org.sleuthkit.datamodel.SleuthkitJNI.closeHashDatabase ( int  dbHandle) throws TskCoreException
static

Close a particular open lookup database. Existing handles are not affected.

Parameters
dbHandleHandle of database to close.
Exceptions
TskCoreExceptionexception thrown if critical error occurs within TSK

Definition at line 1737 of file SleuthkitJNI.java.

static void org.sleuthkit.datamodel.SleuthkitJNI.closeImg ( long  imgHandle)
static

frees the imgHandle pointer currently does not close the image - imgHandle should only be freed as part of CaseDbHandle.free().

Parameters
imgHandleto close the image

Definition at line 1995 of file SleuthkitJNI.java.

static void org.sleuthkit.datamodel.SleuthkitJNI.closeVs ( long  vsHandle)
static

frees the vsHandle pointer - currently does nothing

Parameters
vsHandlepointer to volume system structure in sleuthkit

Definition at line 2005 of file SleuthkitJNI.java.

static int org.sleuthkit.datamodel.SleuthkitJNI.createHashDatabase ( String  path) throws TskCoreException
static

Creates a hash database. Will be of the default TSK hash database type.

Parameters
pathThe path to the database
Returns
a handle for that database
Exceptions
TskCoreExceptionif a critical error occurs within TSK core

Definition at line 1714 of file SleuthkitJNI.java.

static void org.sleuthkit.datamodel.SleuthkitJNI.createLookupIndexForHashDatabase ( int  dbHandle) throws TskCoreException
static

Create an index for a hash database.

Parameters
dbHandleA hash database handle.
Exceptions
TskCoreExceptionif a critical error occurs within TSK core

Definition at line 1638 of file SleuthkitJNI.java.

static long org.sleuthkit.datamodel.SleuthkitJNI.findDeviceSize ( String  devPath) throws TskCoreException
static

Get size of a device (physical, logical device, image) pointed to by devPath

Parameters
devPathdevice path pointing to the device
Returns
size of the device in bytes
Exceptions
TskCoreExceptionexception thrown if the device size could not be queried

Definition at line 1929 of file SleuthkitJNI.java.

Referenced by org.sleuthkit.datamodel.Image.getSize().

static int org.sleuthkit.datamodel.SleuthkitJNI.finishImageWriter ( long  imgHandle) throws TskCoreException
static

Fills in any gaps in the image created by image writer.

Parameters
imgHandleThe image handle.
Returns
0 if no errors occurred; 1 otherwise.
Exceptions
TskCoreExceptionexception thrown if critical error occurs within TSK

Definition at line 1870 of file SleuthkitJNI.java.

static List<String> org.sleuthkit.datamodel.SleuthkitJNI.getFileMetaDataText ( long  fileHandle) throws TskCoreException
static

Get human readable (some what) details about a file. This is the same as the 'istat' TSK tool

Parameters
fileHandlepointer to file structure in the sleuthkit
Returns
text
Exceptions
TskCoreExceptionif errors occurred

Definition at line 1542 of file SleuthkitJNI.java.

Referenced by org.sleuthkit.datamodel.FsContent.getMetaDataText().

static int org.sleuthkit.datamodel.SleuthkitJNI.getFinishImageProgress ( long  imgHandle)
static

Get the current progress of the finish image process (0-100)

Parameters
imgHandle
Returns
Percentage of blocks completed (0-100)

Definition at line 1889 of file SleuthkitJNI.java.

static String org.sleuthkit.datamodel.SleuthkitJNI.getHashDatabaseDisplayName ( int  dbHandle) throws TskCoreException
static

Get the name of the database

Parameters
dbHandlePreviously opened hash db handle.
Returns
The display name.
Exceptions
TskCoreExceptionif a critical error occurs within TSK core

Definition at line 1750 of file SleuthkitJNI.java.

static String org.sleuthkit.datamodel.SleuthkitJNI.getHashDatabaseIndexPath ( int  dbHandle) throws TskCoreException
static

getHashDatabaseIndexPath

Parameters
dbHandlepreviously opened hash db handle
Returns
Index file path
Exceptions
TskCoreExceptionif a critical error occurs within TSK core

Definition at line 1691 of file SleuthkitJNI.java.

static String org.sleuthkit.datamodel.SleuthkitJNI.getHashDatabasePath ( int  dbHandle) throws TskCoreException
static

getHashDatabasePath

Parameters
dbHandlepreviously opened hash db handle
Returns
Hash db file path
Exceptions
TskCoreExceptionif a critical error occurs within TSK core

Definition at line 1678 of file SleuthkitJNI.java.

static String org.sleuthkit.datamodel.SleuthkitJNI.getVersion ( )
static

get the Sleuth Kit version string

Returns
the version string

Definition at line 789 of file SleuthkitJNI.java.

static boolean org.sleuthkit.datamodel.SleuthkitJNI.hashDatabaseCanBeReindexed ( int  dbHandle) throws TskCoreException
static

hashDatabaseCanBeReindexed

Parameters
dbHandlepreviously opened hash db handle
Returns
Does this database have a source database that is different than the index?
Exceptions
TskCoreExceptionif a critical error occurs within TSK core

Definition at line 1665 of file SleuthkitJNI.java.

static boolean org.sleuthkit.datamodel.SleuthkitJNI.hashDatabaseHasLookupIndex ( int  dbHandle) throws TskCoreException
static

Check if an index exists for a hash database.

Parameters
dbHandleA hash database handle.
Returns
true if index exists
Exceptions
TskCoreExceptionif a critical error occurs within TSK core

Definition at line 1651 of file SleuthkitJNI.java.

static boolean org.sleuthkit.datamodel.SleuthkitJNI.hashDatabaseIsIndexOnly ( int  dbHandle) throws TskCoreException
static

Definition at line 1821 of file SleuthkitJNI.java.

static boolean org.sleuthkit.datamodel.SleuthkitJNI.isImageSupported ( String  imagePath)
static

Definition at line 1933 of file SleuthkitJNI.java.

static boolean org.sleuthkit.datamodel.SleuthkitJNI.isUpdateableHashDatabase ( int  dbHandle) throws TskCoreException
static

Definition at line 1817 of file SleuthkitJNI.java.

static boolean org.sleuthkit.datamodel.SleuthkitJNI.lookupInHashDatabase ( String  hash,
int  dbHandle 
) throws TskCoreException
static

Lookup the given hash value and get basic answer

Parameters
hashHash value to search for.
dbHandleHandle of database to lookup in.
Returns
True if hash was found in database.
Exceptions
TskCoreException

Definition at line 1764 of file SleuthkitJNI.java.

static HashHitInfo org.sleuthkit.datamodel.SleuthkitJNI.lookupInHashDatabaseVerbose ( String  hash,
int  dbHandle 
) throws TskCoreException
static

Lookup hash value in DB and return details on results (more time consuming than basic lookup)

Parameters
hashHash value to search for
dbHandleHandle of database to lookup in.
Returns
Details on hash if it was in DB or null if it was not found.
Exceptions
TskCoreException

Definition at line 1779 of file SleuthkitJNI.java.

static long org.sleuthkit.datamodel.SleuthkitJNI.openFile ( long  fsHandle,
long  fileId,
TSK_FS_ATTR_TYPE_ENUM  attrType,
int  attrId,
SleuthkitCase  skCase 
) throws TskCoreException
static

Get file Handle

Parameters
fsHandlefsHandle pointer in the sleuthkit
fileIdid of the file
attrTypefile attribute type to open
attrIdfile attribute id to open
skCasethe case associated with this file
Returns
pointer to a file structure in the sleuthkit
Exceptions
TskCoreExceptionexception thrown if critical error occurs within TSK

Definition at line 1231 of file SleuthkitJNI.java.

Referenced by org.sleuthkit.datamodel.SleuthkitJNI.openFile().

static long org.sleuthkit.datamodel.SleuthkitJNI.openFile ( long  fsHandle,
long  fileId,
TSK_FS_ATTR_TYPE_ENUM  attrType,
int  attrId 
) throws TskCoreException
static

Get file Handle

Parameters
fsHandlefsHandle pointer in the sleuthkit
fileIdid of the file
attrTypefile attribute type to open
attrIdfile attribute id to open
Returns
pointer to a file structure in the sleuthkit
Exceptions
TskCoreExceptionexception thrown if critical error occurs within TSK
Deprecated:
Use the version with the SleuthkitCase argument

Definition at line 2089 of file SleuthkitJNI.java.

References org.sleuthkit.datamodel.SleuthkitJNI.openFile().

static long org.sleuthkit.datamodel.SleuthkitJNI.openFs ( long  imgHandle,
long  fsOffset,
SleuthkitCase  skCase 
) throws TskCoreException
static

Get file system Handle Opened handle is cached (transparently) so it does not need be reopened next time for the duration of the application

Parameters
imgHandlepointer to imgHandle in sleuthkit
fsOffsetbyte offset to the file system
skCasethe case containing the file system
Returns
pointer to a fsHandle structure in the sleuthkit
Exceptions
TskCoreExceptionexception thrown if critical error occurs within TSK

Definition at line 1132 of file SleuthkitJNI.java.

Referenced by org.sleuthkit.datamodel.SleuthkitJNI.openFs().

static long org.sleuthkit.datamodel.SleuthkitJNI.openFs ( long  imgHandle,
long  fsOffset 
) throws TskCoreException
static

Get file system Handle Opened handle is cached (transparently) so it does not need be reopened next time for the duration of the application

Parameters
imgHandlepointer to imgHandle in sleuthkit
fsOffsetbyte offset to the file system
Returns
pointer to a fsHandle structure in the sleuthkit
Exceptions
TskCoreExceptionexception thrown if critical error occurs within TSK
Deprecated:
Use the version with the SleuthkitCase argument

Definition at line 2070 of file SleuthkitJNI.java.

References org.sleuthkit.datamodel.SleuthkitJNI.openFs().

static int org.sleuthkit.datamodel.SleuthkitJNI.openHashDatabase ( String  path) throws TskCoreException
static

Open a hash database for lookups

Parameters
pathPath to Hash DB or index file
Returns
Handle open db
Exceptions
TskCoreExceptionif there is an error opening the DB

Definition at line 1701 of file SleuthkitJNI.java.

static long org.sleuthkit.datamodel.SleuthkitJNI.openImage ( String[]  imageFiles,
SleuthkitCase  skCase 
) throws TskCoreException
static

Open the image and return the image info pointer.

Parameters
imageFilesthe paths to the images
skCasethe case this image belongs to
Returns
the image info pointer
Exceptions
TskCoreExceptionexception thrown if critical error occurs within TSK

Definition at line 813 of file SleuthkitJNI.java.

Referenced by org.sleuthkit.datamodel.Image.getImageHandle(), and org.sleuthkit.datamodel.SleuthkitJNI.openImage().

static long org.sleuthkit.datamodel.SleuthkitJNI.openImage ( String[]  imageFiles,
int  sSize,
SleuthkitCase  skCase 
) throws TskCoreException
static

Open the image with a specified sector size and return the image info pointer.

Parameters
imageFilesthe paths to the images
sSizethe sector size (use '0' for autodetect)
skCasethe case this image belongs to
Returns
the image info pointer
Exceptions
TskCoreExceptionexception thrown if critical error occurs within TSK

Definition at line 833 of file SleuthkitJNI.java.

References org.sleuthkit.datamodel.SleuthkitJNI.openImage().

static long org.sleuthkit.datamodel.SleuthkitJNI.openImage ( String[]  imageFiles) throws TskCoreException
static

Open the image and return the image info pointer.

Parameters
imageFilesthe paths to the images
Returns
the image info pointer
Exceptions
TskCoreExceptionexception thrown if critical error occurs within TSK
Deprecated:
Use the version with the SleuthkitCase argument

Definition at line 2032 of file SleuthkitJNI.java.

References org.sleuthkit.datamodel.SleuthkitJNI.openImage().

static long org.sleuthkit.datamodel.SleuthkitJNI.openImage ( String[]  imageFiles,
int  sSize 
) throws TskCoreException
static

Open the image with a specified sector size and return the image info pointer.

Parameters
imageFilesthe paths to the images
sSizethe sector size (use '0' for autodetect)
Returns
the image info pointer
Exceptions
TskCoreExceptionexception thrown if critical error occurs within TSK
Deprecated:
Use the version with the SleuthkitCase argument

Definition at line 2051 of file SleuthkitJNI.java.

References org.sleuthkit.datamodel.SleuthkitJNI.openImage().

static long org.sleuthkit.datamodel.SleuthkitJNI.openVs ( long  imgHandle,
long  vsOffset 
) throws TskCoreException
static

Get volume system Handle

Parameters
imgHandlea handle to previously opened image
vsOffsetbyte offset in the image to the volume system (usually 0)
Returns
pointer to a vsHandle structure in the sleuthkit
Exceptions
TskCoreExceptionexception thrown if critical error occurs within TSK

Definition at line 1037 of file SleuthkitJNI.java.

Referenced by org.sleuthkit.datamodel.VolumeSystem.getVolumeSystemHandle().

static long org.sleuthkit.datamodel.SleuthkitJNI.openVsPart ( long  vsHandle,
long  volId 
) throws TskCoreException
static

Get volume Handle

Parameters
vsHandlepointer to the volume system structure in the sleuthkit
volIdid of the volume
Returns
pointer to a volHandle structure in the sleuthkit
Exceptions
TskCoreExceptionexception thrown if critical error occurs within TSK

Definition at line 1061 of file SleuthkitJNI.java.

Referenced by org.sleuthkit.datamodel.Volume.read().

static int org.sleuthkit.datamodel.SleuthkitJNI.readFile ( long  fileHandle,
byte[]  readBuffer,
long  offset,
long  len 
) throws TskCoreException
static

reads data from an file

Parameters
fileHandlepointer to a file structure in the sleuthkit
readBufferpre-allocated buffer to read to
offsetbyte offset in the image to start at
lenamount of data to read
Returns
the number of characters read, or -1 if the end of the stream has been reached
Exceptions
TskCoreExceptionexception thrown if critical error occurs within TSK

Definition at line 1472 of file SleuthkitJNI.java.

Referenced by org.sleuthkit.datamodel.FsContent.readInt().

static int org.sleuthkit.datamodel.SleuthkitJNI.readFileSlack ( long  fileHandle,
byte[]  readBuffer,
long  offset,
long  len 
) throws TskCoreException
static

reads data from the slack space of a file

Parameters
fileHandlepointer to a file structure in the sleuthkit
readBufferpre-allocated buffer to read to
offsetbyte offset in the slack to start at
lenamount of data to read
Returns
the number of characters read, or -1 if the end of the stream has been reached
Exceptions
TskCoreExceptionexception thrown if critical error occurs within TSK

Definition at line 1519 of file SleuthkitJNI.java.

Referenced by org.sleuthkit.datamodel.SlackFile.readInt().

static int org.sleuthkit.datamodel.SleuthkitJNI.readFs ( long  fsHandle,
byte[]  readBuffer,
long  offset,
long  len 
) throws TskCoreException
static

reads data from an file system

Parameters
fsHandlepointer to a file system structure in the sleuthkit
readBufferbuffer to read to
offsetbyte offset in the image to start at
lenamount of data to read
Returns
the number of characters read, or -1 if the end of the stream has been reached
Exceptions
TskCoreExceptionexception thrown if critical error occurs within TSK

Definition at line 1429 of file SleuthkitJNI.java.

Referenced by org.sleuthkit.datamodel.FileSystem.read().

static int org.sleuthkit.datamodel.SleuthkitJNI.readImg ( long  imgHandle,
byte[]  readBuffer,
long  offset,
long  len 
) throws TskCoreException
static

reads data from an image

Parameters
imgHandle
readBufferbuffer to read to
offsetbyte offset in the image to start at
lenamount of data to read
Returns
the number of characters read, or -1 if the end of the stream has been reached
Exceptions
TskCoreExceptionexception thrown if critical error occurs within TSK

Definition at line 1334 of file SleuthkitJNI.java.

Referenced by org.sleuthkit.datamodel.Image.read().

static int org.sleuthkit.datamodel.SleuthkitJNI.readVs ( long  vsHandle,
byte[]  readBuffer,
long  offset,
long  len 
) throws TskCoreException
static

reads data from an volume system

Parameters
vsHandlepointer to a volume system structure in the sleuthkit
readBufferbuffer to read to
offsetsector offset in the image to start at
lenamount of data to read
Returns
the number of characters read, or -1 if the end of the stream has been reached
Exceptions
TskCoreExceptionexception thrown if critical error occurs within TSK

Definition at line 1361 of file SleuthkitJNI.java.

Referenced by org.sleuthkit.datamodel.VolumeSystem.read().

static int org.sleuthkit.datamodel.SleuthkitJNI.readVsPart ( long  volHandle,
byte[]  readBuffer,
long  offset,
long  len 
) throws TskCoreException
static

reads data from an volume

Parameters
volHandlepointer to a volume structure in the sleuthkit
readBufferbuffer to read to
offsetbyte offset in the image to start at
lenamount of data to read
Returns
the number of characters read, or -1 if the end of the stream has been reached
Exceptions
TskCoreExceptionexception thrown if critical error occurs within TSK

Definition at line 1405 of file SleuthkitJNI.java.

Referenced by org.sleuthkit.datamodel.Volume.read().

static void org.sleuthkit.datamodel.SleuthkitJNI.startVerboseLogging ( String  logPath)
static

Enable verbose logging and redirect stderr to the given log file.

Parameters
logPaththe log file path

Definition at line 798 of file SleuthkitJNI.java.


The documentation for this class was generated from the following file:

Copyright © 2011-2021 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.