The Sleuth Kit: HFS_INFO Struct Reference

The Sleuth Kit 4.13.0

HFS_INFO Struct Reference

Public Attributes

const TSK_FS_ATTR * blockmap_attr

char blockmap_cache [4096]

Cache for blockmap (r/w shared - lock)

Length of cache that is being used (r/w shared - lock)

Byte offset of blockmap where cache starts (r/w shared - lock)

TSK_FS_FILE * blockmap_file

const TSK_FS_ATTR * catalog_attr

TSK_FS_FILE * catalog_file

TSK_FS_DIR * dir_meta_dir

const TSK_FS_ATTR * extents_attr

TSK_FS_FILE * extents_file

TSK_FS_INFO fs_info

unsigned char has_attributes_file

unsigned char has_extents_file

unsigned char has_meta_crtime

unsigned char has_meta_dir_crtime

unsigned char has_root_crtime

unsigned char has_startup_file

TSK_OFF_T hfs_wrapper_offset

char is_case_sensitive

tsk_lock_t lock

time_t meta_crtime

TSK_FS_DIR * meta_dir

TSK_INUM_T meta_dir_inum

TSK_INUM_T meta_inum

tsk_lock_t metadata_dir_cache_lock

time_t metadir_crtime

time_t root_crtime

The documentation for this struct was generated from the following file: