Sleuth Kit Java Bindings (JNI)
4.11.1
Java bindings for using The Sleuth Kit
|
Public Member Functions | |
short | getValue () |
String | toString () |
Static Public Member Functions | |
static short | toInt (Set< TSK_FS_META_FLAG_ENUM > metaFlags) |
static Set< TSK_FS_META_FLAG_ENUM > | valuesOf (short metaFlags) |
Public Attributes | |
ALLOC =(1, bundle.getString("TskData.tskFsMetaFlagEnum.allocated")) | |
Metadata structure is currently in an allocated state. More... | |
COMP =(16, bundle.getString("TskData.tskFsMetaFlagEnum.compressed")) | |
The file contents are compressed. More... | |
ORPHAN =(32, bundle.getString("TskData.tskFsMetaFlagEnum.orphan")) | |
Return only metadata structures that have no file name pointing to the (inode_walk flag only) More... | |
UNALLOC =(2, bundle.getString("TskData.tskFsMetaFlagEnum.unallocated")) | |
Metadata structure is currently in an unallocated state. More... | |
UNUSED =(8, bundle.getString("TskData.tskFsMetaFlagEnum.unused")) | |
Metadata structure has never been allocated. More... | |
USED =(4, bundle.getString("TskData.tskFsMetaFlagEnum.used")) | |
Metadata structure has been allocated at least once. More... | |
The allocated status of the file system file, as reported in the metadata structure of the file system. This is the meta_flags column in the tsk_files table.
Definition at line 204 of file TskData.java.
short org.sleuthkit.datamodel.TskData.TSK_FS_META_FLAG_ENUM.getValue | ( | ) |
Get meta flags short value
Definition at line 226 of file TskData.java.
|
static |
Definition at line 261 of file TskData.java.
Referenced by org.sleuthkit.datamodel.SleuthkitCase.setFileUnalloc().
String org.sleuthkit.datamodel.TskData.TSK_FS_META_FLAG_ENUM.toString | ( | ) |
Get string label of the metal flags
Definition at line 236 of file TskData.java.
|
static |
Returns all the enum elements that match the flags in metaFlag
metaFlags | Flags to convert to Enums. |
Definition at line 247 of file TskData.java.
Referenced by org.sleuthkit.datamodel.SleuthkitCase.setFileUnalloc().
org.sleuthkit.datamodel.TskData.TSK_FS_META_FLAG_ENUM.ALLOC =(1, bundle.getString("TskData.tskFsMetaFlagEnum.allocated")) |
Metadata structure is currently in an allocated state.
Definition at line 206 of file TskData.java.
Referenced by org.sleuthkit.datamodel.SleuthkitCase.addDerivedFile(), org.sleuthkit.datamodel.SleuthkitCase.addLocalDirectory(), org.sleuthkit.datamodel.SleuthkitCase.addLocalFile(), org.sleuthkit.datamodel.SleuthkitCase.addLocalFilesDataSource(), org.sleuthkit.datamodel.SleuthkitCase.addVirtualDirectory(), org.sleuthkit.datamodel.SleuthkitCase.getDataSource(), org.sleuthkit.datamodel.SleuthkitCase.getDataSources(), org.sleuthkit.datamodel.AbstractFile.getMetaFlagsAsString(), org.sleuthkit.datamodel.SleuthkitCase.setFileUnalloc(), and org.sleuthkit.datamodel.SleuthkitCase.updateDerivedFile().
org.sleuthkit.datamodel.TskData.TSK_FS_META_FLAG_ENUM.COMP =(16, bundle.getString("TskData.tskFsMetaFlagEnum.compressed")) |
The file contents are compressed.
Definition at line 210 of file TskData.java.
org.sleuthkit.datamodel.TskData.TSK_FS_META_FLAG_ENUM.ORPHAN =(32, bundle.getString("TskData.tskFsMetaFlagEnum.orphan")) |
Return only metadata structures that have no file name pointing to the (inode_walk flag only)
Definition at line 211 of file TskData.java.
org.sleuthkit.datamodel.TskData.TSK_FS_META_FLAG_ENUM.UNALLOC =(2, bundle.getString("TskData.tskFsMetaFlagEnum.unallocated")) |
Metadata structure is currently in an unallocated state.
Definition at line 207 of file TskData.java.
Referenced by org.sleuthkit.datamodel.SleuthkitCase.addCarvedFiles(), org.sleuthkit.datamodel.SleuthkitCase.addLayoutFiles(), org.sleuthkit.datamodel.AbstractFile.getMetaFlagsAsString(), and org.sleuthkit.datamodel.SleuthkitCase.setFileUnalloc().
org.sleuthkit.datamodel.TskData.TSK_FS_META_FLAG_ENUM.UNUSED =(8, bundle.getString("TskData.tskFsMetaFlagEnum.unused")) |
Metadata structure has never been allocated.
Definition at line 209 of file TskData.java.
org.sleuthkit.datamodel.TskData.TSK_FS_META_FLAG_ENUM.USED =(4, bundle.getString("TskData.tskFsMetaFlagEnum.used")) |
Metadata structure has been allocated at least once.
Definition at line 208 of file TskData.java.
Referenced by org.sleuthkit.datamodel.SleuthkitCase.addDerivedFile(), org.sleuthkit.datamodel.SleuthkitCase.addLocalDirectory(), org.sleuthkit.datamodel.SleuthkitCase.addLocalFile(), org.sleuthkit.datamodel.SleuthkitCase.addLocalFilesDataSource(), org.sleuthkit.datamodel.SleuthkitCase.addVirtualDirectory(), org.sleuthkit.datamodel.SleuthkitCase.getDataSource(), org.sleuthkit.datamodel.SleuthkitCase.getDataSources(), and org.sleuthkit.datamodel.SleuthkitCase.updateDerivedFile().
Copyright © 2011-2021 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.