The Sleuth Kit
4.11.0
|
Files | |
file | apfs.cpp |
file | apfs_compat.cpp |
file | apfs_fs.cpp |
file | apfs_fs.h |
file | apfs_open.cpp |
file | dcalc_lib.c |
Contains the library API functions used by the TSK blkcalc command line tool. | |
file | dcat_lib.c |
Contains the library API functions used by the TSK blkcat command line tool. | |
file | decmpfs.c |
file | decmpfs.h |
file | dls_lib.c |
Contains the library API functions used by the TSK blkls command line tool. | |
file | dstat_lib.c |
Contains the library API functions used by the TSK blkstat command line tool. | |
file | exfatfs.c |
Contains the internal TSK exFAT file system code to "open" an exFAT file system found in a device image and do the equivalent of a UNIX "stat" call on the file system. | |
file | exfatfs_dent.c |
Contains the internal TSK exFAT file system code to handle name category processing. | |
file | exfatfs_meta.c |
Contains the internal TSK exFAT file system code to access the data in the metadata data category as defined in the book "File System Forensic
Analysis" by Brian Carrier (pp. | |
file | ext2fs.c |
Contains the internal TSK ext2/ext3/ext4 file system functions. | |
file | ext2fs_dent.c |
Contains the internal TSK file name processing code for Ext2 / ext3. | |
file | ext2fs_journal.c |
Contains the internal TSK Ext3 journal walking code. | |
file | fatfs.c |
Contains the internal TSK FAT file system code to handle basic file system processing for opening file system, processing sectors, and directory entries. | |
file | fatfs_dent.cpp |
Contains the internal TSK FAT file name processing code. | |
file | fatfs_meta.c |
Meta data layer support for FAT file systems. | |
file | fatfs_utils.c |
Contains utility functions for processing FAT file systems. | |
file | fatxxfs.c |
Contains the internal TSK FATXX (FAT12, FAT16, FAT32) file system code to handle basic file system processing for opening file system, processing sectors, and directory entries. | |
file | fatxxfs_dent.c |
file | fatxxfs_meta.c |
file | ffind_lib.c |
Contains the library API functions used by the TSK ffind command line tool. | |
file | ffs.c |
Contains the internal TSK UFS / FFS file system functions. | |
file | ffs_dent.c |
Contains the internal TSK UFS/FFS file name (directory entry) processing functions. | |
file | fls_lib.c |
Contains the library code associated with the TSK fls tool to list files in a directory. | |
file | fs_attr.c |
Functions to allocate and add structures to maintain generic file system attributes and run lists. | |
file | fs_attrlist.c |
File that contains functions to process TSK_FS_ATTRLIST structures, which hold a linked list of TSK_FS_ATTR attribute structures. | |
file | fs_block.c |
Contains functions to allocate, free, and read data into a TSK_FS_BLOCK structure. | |
file | fs_dir.c |
Create, manage, etc. | |
file | fs_file.c |
Create, manage, etc. | |
file | fs_inode.c |
Contains functions to allocate, free, and process the generic inode structures. | |
file | fs_io.c |
Contains functions to read data from a disk image and wrapper functions to read file content. | |
file | fs_load.c |
Contains a general file walk callback that can be used to load file content into a buffer. | |
file | fs_name.c |
Code to allocate and free the TSK_FS_NAME structures. | |
file | fs_open.c |
Contains the general code to open a file system – this calls the file system -specific opening routines. | |
file | fs_parse.c |
Contains code to parse specific types of data from the command line. | |
file | fs_types.c |
Contains TSK functions that deal with parsing and printing file system type strings. | |
file | hfs.c |
Contains the general internal TSK HFS metadata and data unit code. | |
file | hfs_dent.c |
Contains the file name layer code for HFS+ file systems – not included in code by default. | |
file | hfs_journal.c |
Contains the internal TSK HFS+ journal code – not included in code by default. | |
file | hfs_unicompare.c |
file | icat_lib.c |
Contains the library API functions used by the TSK icat command line tool. | |
file | ifind_lib.c |
Contains the library API functions used by the TSK ifind command line tool. | |
file | ils_lib.c |
Library functionality of the TSK ils tool. | |
file | iso9660.c |
Contains the internal TSK ISO9660 file system code to handle basic file system processing for opening file system, processing sectors, and directory entries. | |
file | iso9660_dent.c |
Contains the internal TSK ISO9660 file system code to handle the parsing of file names and directory structures. | |
file | lzvn.c |
file | lzvn.h |
file | nofs_misc.c |
Contains internal functions that are common to the "non-file system" file systems, such as raw and swap. | |
file | ntfs.c |
Contains the TSK internal general NTFS processing code. | |
file | ntfs_dent.cpp |
NTFS file name processing internal functions. | |
file | rawfs.c |
Contains internal "raw" specific file system functions. | |
file | swapfs.c |
Contains the internal "swapfs" specific functions. | |
file | tsk_apfs.h |
file | tsk_exfatfs.h |
Contains declarations of structures and functions specific to TSK exFAT file system support. | |
file | tsk_ext2fs.h |
file | tsk_fatfs.h |
Contains the structures and function APIs for TSK FAT (FAT12, FAT16, FAT32, exFAT) file system support. | |
file | tsk_fatxxfs.h |
Contains the structures and function APIs for TSK FATXX (FAT12, FAT16, FAT32) file system support. | |
file | tsk_ffs.h |
file | tsk_fs.h |
External header file for file system support. | |
file | tsk_fs_i.h |
Contains the internal library definitions for the file system functions. | |
file | tsk_hfs.h |
file | tsk_iso9660.h |
file | tsk_ntfs.h |
file | tsk_yaffs.h |
file | unix_misc.c |
Contains code that is common to both UFS1/2 and Ext2/3 file systems. | |
file | usn_journal.c |
Contains the TSK Update Sequence Number journal walking code. | |
file | usnjls_lib.c |
Contains the library code associated with the TSK usnjs tool to list changes within a NTFS File System. | |
file | walk_cpp.cpp |
file | yaffs.cpp |
Contains the internal TSK YAFFS2 file system functions. | |
Copyright © 2007-2020 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.