The Sleuth Kit: NTFS_INFO Struct Reference

The Sleuth Kit 4.13.0

NTFS_INFO Struct Reference

Public Attributes

int alloc_file_count

ntfs_attrdef * attrdef

size_t attrdef_len

char * bmap_buf

TSK_DADDR_T bmap_buf_off

uint32_t csize_b

ntfs_sb * fs

TSK_FS_INFO fs_info

uint32_t idx_rsize_b

uint8_t loading_the_MFT

tsk_lock_t lock

const TSK_FS_ATTR * mft_data

TSK_FS_FILE * mft_file

uint32_t mft_rsize_b

void * orphan_map

tsk_lock_t orphan_map_lock

TSK_DADDR_T root_mft_addr

NTFS_SXX_BUFFER sds_data

tsk_lock_t sid_lock

NTFS_SXX_BUFFER sii_data

uint16_t ssize_b

NTFS_USNJINFO * usnjinfo

uint8_t ver

The documentation for this struct was generated from the following file: