The Sleuth Kit: Member List

addCarvedFile(const int64_t parentObjId, const int64_t fsObjId, const uint64_t size, vector< TSK_DB_FILE_LAYOUT_RANGE > &ranges, int64_t &objId, int64_t dataSourceObjId) TskDbSqlite virtual

addFileLayoutRange(const TSK_DB_FILE_LAYOUT_RANGE &fileLayoutRange) TskDbSqlite virtual

addFileLayoutRange(int64_t a_fileObjId, uint64_t a_byteStart, uint64_t a_byteLen, int a_sequence) TskDbSqlite virtual

addFsFile(TSK_FS_FILE *fs_file, const TSK_FS_ATTR *fs_attr, const char *path, const unsigned char *const md5, const TSK_DB_FILES_KNOWN_ENUM known, int64_t fsObjId, int64_t &objId, int64_t dataSourceObjId) TskDbSqlite virtual

addFsInfo(const TSK_FS_INFO *fs_info, int64_t parObjId, int64_t &objId) TskDbSqlite virtual

addImageInfo(int type, int size, int64_t &objId, const string &timezone) TskDbSqlite virtual

addImageInfo(int type, int size, int64_t &objId, const string &timezone, TSK_OFF_T, const string &md5, const string &sha1, const string &sha256) TskDbSqlite virtual

addImageInfo(int type, TSK_OFF_T ssize, int64_t &objId, const string &timezone, TSK_OFF_T size, const string &md5, const string &sha1, const string &sha256, const string &deviceId, const string &collectionDetails) TskDbSqlite virtual

addImageName(int64_t objId, char const *imgName, int sequence) TskDbSqlite virtual

addPoolInfoAndVS(const TSK_POOL_INFO *pool_info, int64_t parObjId, int64_t &vsObjId) TskDbSqlite virtual

addPoolVolumeInfo(const TSK_POOL_VOLUME_INFO *pool_vol, int64_t parObjId, int64_t &objId) TskDbSqlite virtual

addUnallocatedPoolVolume(int vol_index, int64_t parObjId, int64_t &objId) TskDbSqlite virtual

addUnallocBlockFile(const int64_t parentObjId, const int64_t fsObjId, const uint64_t size, vector< TSK_DB_FILE_LAYOUT_RANGE > &ranges, int64_t &objId, int64_t dataSourceObjId) TskDbSqlite virtual

addUnallocFsBlockFilesParent(const int64_t fsObjId, int64_t &objId, int64_t dataSourceObjId) TskDbSqlite virtual

addUnusedBlockFile(const int64_t parentObjId, const int64_t fsObjId, const uint64_t size, vector< TSK_DB_FILE_LAYOUT_RANGE > &ranges, int64_t &objId, int64_t dataSourceObjId) TskDbSqlite virtual

addVirtualDir(const int64_t fsObjId, const int64_t parentDirId, const char *const name, int64_t &objId, int64_t dataSourceObjId) TskDbSqlite virtual

addVolumeInfo(const TSK_VS_PART_INFO *vs_part, int64_t parObjId, int64_t &objId) TskDbSqlite virtual

addVsInfo(const TSK_VS_INFO *vs_info, int64_t parObjId, int64_t &objId) TskDbSqlite virtual

close() (defined in TskDbSqlite) TskDbSqlite virtual

createSavepoint(const char *name) TskDbSqlite virtual

dbExists() (defined in TskDbSqlite) TskDbSqlite virtual

extractExtension(char *name, char *extension) TskDb inlineprotected

getFileLayouts(vector< TSK_DB_FILE_LAYOUT_RANGE > &fileLayouts) TskDbSqlite virtual

getFsInfos(int64_t imgId, vector< TSK_DB_FS_INFO > &fsInfos) TskDbSqlite virtual

getFsRootDirObjectInfo(const int64_t fsObjId, TSK_DB_OBJECT &rootDirObjInfo) TskDbSqlite virtual

getObjectInfo(int64_t objId, TSK_DB_OBJECT &objectInfo) TskDbSqlite virtual

getParentImageId(const int64_t objId, int64_t &imageId) TskDbSqlite virtual

getParentPathAndName(const char *path, const char **ret_parent_path, const char **ret_name) (defined in TskDb) TskDb virtual

getVsInfo(int64_t objId, TSK_DB_VS_INFO &vsInfo) TskDbSqlite virtual

getVsInfos(int64_t imgId, vector< TSK_DB_VS_INFO > &vsInfos) TskDbSqlite virtual

getVsPartInfos(int64_t imgId, vector< TSK_DB_VS_PART_INFO > &vsPartInfos) TskDbSqlite virtual

inTransaction() (defined in TskDbSqlite) TskDbSqlite virtual

isDbOpen() TskDbSqlite virtual

open(bool) (defined in TskDbSqlite) TskDbSqlite virtual

releaseSavepoint(const char *name) TskDbSqlite virtual

revertSavepoint(const char *name) TskDbSqlite virtual

TskDb(const char *a_dbFilePathUtf8, bool a_blkMapFlag) TskDb

TskDbSqlite(const char *a_dbFilePathUtf8, bool a_blkMapFlag) TskDbSqlite

~TskDb() (defined in TskDb) TskDb inlinevirtual

~TskDbSqlite() (defined in TskDbSqlite) TskDbSqlite