org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM Enum Reference

Public Member Functions
short	getFileType ()
String	getName ()

Static Public Member Functions
static TSK_DB_FILES_TYPE_ENUM	valueOf (short fileType)

Public Attributes
	CARVED =(1, "Carved")
	Set of blocks for a file found from carving. Could be on top of a TSK_DB_FILES_TYPE_UNALLOC_BLOCKS range. More...
	DERIVED =(2, "Derived")
	File derived from a parent file (i.e. from ZIP) More...
	FS =(0, "File System")
	File that can be found in file system tree. More...
	LAYOUT_FILE =(9, "Layout File")
	Set of blocks from an image that have been designated as a file. More...
	LOCAL =(3, "Local")
	Local file that was added (not from a disk image) More...
	LOCAL_DIR =(8, "Local Directory")
	Local directory that was added (not from a disk image) More...
	SLACK =(7, "Slack")
	Slack space for a single file. More...
	UNALLOC_BLOCKS =(4, "Unallocated Blocks")
	Set of blocks not allocated by file system. Parent should be image, volume, or file system. Many columns in tsk_files will be NULL. Set layout in tsk_file_layout. More...
	UNUSED_BLOCKS =(5, "Unused Blocks")
	Set of blocks that are unallocated AND not used by a carved or other file type. Parent should be UNALLOC_BLOCKS, many columns in tsk_files will be NULL, set layout in tsk_file_layout. More...
	VIRTUAL_DIR =(6, "Virtual Directory")
	Virtual directory (not on fs) with no meta-data entry that can be used to group files of types other than TSK_DB_FILES_TYPE_FS. Its parent is either another TSK_DB_FILES_TYPE_FS or a root directory or type TSK_DB_FILES_TYPE_FS. More...

Detailed Description

The type of file in a database, such as file system versus local file. This is the type field in the tsk_files table.

Definition at line 685 of file TskData.java.

Member Function Documentation

short org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.getFileType

(

)

Get short value of the file type

Returns

the long value of the file type

Definition at line 729 of file TskData.java.

String org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.getName

(

)

Definition at line 733 of file TskData.java.

static TSK_DB_FILES_TYPE_ENUM org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.valueOf ( short  fileType )

static

Convert db files type short value to the enum type

Parameters

fileType

long value to convert

Returns

the enum type

Definition at line 714 of file TskData.java.

Member Data Documentation

org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.CARVED =(1, "Carved")

Set of blocks for a file found from carving. Could be on top of a TSK_DB_FILES_TYPE_UNALLOC_BLOCKS range.

Definition at line 688 of file TskData.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.addCarvedFiles().

org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.DERIVED =(2, "Derived")

File derived from a parent file (i.e. from ZIP)

Definition at line 689 of file TskData.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.addDerivedFile(), and org.sleuthkit.datamodel.SleuthkitCase.updateDerivedFile().

org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.FS =(0, "File System")

File that can be found in file system tree.

Definition at line 687 of file TskData.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.addFileSystemFile(), and org.sleuthkit.datamodel.SleuthkitCase.findFilesWhere().

org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.LAYOUT_FILE =(9, "Layout File")

Set of blocks from an image that have been designated as a file.

Definition at line 696 of file TskData.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.addLayoutFile().

org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.LOCAL =(3, "Local")

Local file that was added (not from a disk image)

Definition at line 690 of file TskData.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.addLocalFile(), and org.sleuthkit.datamodel.LocalFile.LocalFile().

org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.LOCAL_DIR =(8, "Local Directory")

Local directory that was added (not from a disk image)

Definition at line 695 of file TskData.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.addLocalDirectory().

org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.SLACK =(7, "Slack")

Slack space for a single file.

Definition at line 694 of file TskData.java.

org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.UNALLOC_BLOCKS =(4, "Unallocated Blocks")

Set of blocks not allocated by file system. Parent should be image, volume, or file system. Many columns in tsk_files will be NULL. Set layout in tsk_file_layout.

Definition at line 691 of file TskData.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.addLayoutFiles().

org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.UNUSED_BLOCKS =(5, "Unused Blocks")

Set of blocks that are unallocated AND not used by a carved or other file type. Parent should be UNALLOC_BLOCKS, many columns in tsk_files will be NULL, set layout in tsk_file_layout.

Definition at line 692 of file TskData.java.

org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.VIRTUAL_DIR =(6, "Virtual Directory")

Virtual directory (not on fs) with no meta-data entry that can be used to group files of types other than TSK_DB_FILES_TYPE_FS. Its parent is either another TSK_DB_FILES_TYPE_FS or a root directory or type TSK_DB_FILES_TYPE_FS.

Definition at line 693 of file TskData.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.addLocalFilesDataSource(), org.sleuthkit.datamodel.SleuthkitCase.addVirtualDirectory(), org.sleuthkit.datamodel.SleuthkitCase.getVirtualDirectoryRoots(), and org.sleuthkit.datamodel.AbstractFile.isVirtual().

---

The documentation for this enum was generated from the following file:

• /home/carriersleuth/repos/sleuthkit/bindings/java/src/org/sleuthkit/datamodel/TskData.java