Add an image to the database.

This method does not allow you to customize any of the settings for ingest (such as hash calculation, and block map population). Use TskCaseDb::initAddImage() to set these values.

Parameters

numImg Number of images to add

imagePaths Paths to the image splits to open.

imgType TYpe of image format

sSize Sector size of image

Returns

1 on error and 0 on success

References TskAutoDb::commitAddImage(), TskAutoDb::revertAddImage(), and TskAutoDb::startAddImage().

Prepares the process to add an image to the database.

This method allows the caller to specify options to be used during the ingest.

Returns

TskAutDb object that can be used to add the image.

Creates a new single-user case with a new database and initializes its tables.

Fails if there's already a file at the given path.

Parameters

path Full path to create new database at.

Returns

Pointer to a new TskCaseDb object, NULL on error

References PRIttocTSK, tsk_error_reset(), tsk_error_set_errno(), and tsk_error_set_errstr().

Opens a single-user case from an existing database.

Parameters

path Full path to open database from.

Returns

Pointer to a new TskCaseDb object, NULL on error

References PRIttocTSK, tsk_error_reset(), tsk_error_set_errno(), and tsk_error_set_errstr().