The Sleuth Kit  4.10.2
fs Directory Reference

Files

file  apfs.cpp
 
file  apfs_compat.cpp
 
file  apfs_fs.cpp
 
file  apfs_fs.h
 
file  apfs_open.cpp
 
file  dcalc_lib.c
 Contains the library API functions used by the TSK blkcalc command line tool.
 
file  dcat_lib.c
 Contains the library API functions used by the TSK blkcat command line tool.
 
file  decmpfs.c
 
file  decmpfs.h
 
file  dls_lib.c
 Contains the library API functions used by the TSK blkls command line tool.
 
file  dstat_lib.c
 Contains the library API functions used by the TSK blkstat command line tool.
 
file  exfatfs.c
 Contains the internal TSK exFAT file system code to "open" an exFAT file system found in a device image and do the equivalent of a UNIX "stat" call on the file system.
 
file  exfatfs_dent.c
 Contains the internal TSK exFAT file system code to handle name category processing.
 
file  exfatfs_meta.c
 Contains the internal TSK exFAT file system code to access the data in the metadata data category as defined in the book "File System Forensic Analysis" by Brian Carrier (pp.
 
file  ext2fs.c
 Contains the internal TSK ext2/ext3/ext4 file system functions.
 
file  ext2fs_dent.c
 Contains the internal TSK file name processing code for Ext2 / ext3.
 
file  ext2fs_journal.c
 Contains the internal TSK Ext3 journal walking code.
 
file  fatfs.c
 Contains the internal TSK FAT file system code to handle basic file system processing for opening file system, processing sectors, and directory entries.
 
file  fatfs_dent.cpp
 Contains the internal TSK FAT file name processing code.
 
file  fatfs_meta.c
 Meta data layer support for FAT file systems.
 
file  fatfs_utils.c
 Contains utility functions for processing FAT file systems.
 
file  fatxxfs.c
 Contains the internal TSK FATXX (FAT12, FAT16, FAT32) file system code to handle basic file system processing for opening file system, processing sectors, and directory entries.
 
file  fatxxfs_dent.c
 
file  fatxxfs_meta.c
 
file  ffind_lib.c
 Contains the library API functions used by the TSK ffind command line tool.
 
file  ffs.c
 Contains the internal TSK UFS / FFS file system functions.
 
file  ffs_dent.c
 Contains the internal TSK UFS/FFS file name (directory entry) processing functions.
 
file  fls_lib.c
 Contains the library code associated with the TSK fls tool to list files in a directory.
 
file  fs_attr.c
 Functions to allocate and add structures to maintain generic file system attributes and run lists.
 
file  fs_attrlist.c
 File that contains functions to process TSK_FS_ATTRLIST structures, which hold a linked list of TSK_FS_ATTR attribute structures.
 
file  fs_block.c
 Contains functions to allocate, free, and read data into a TSK_FS_BLOCK structure.
 
file  fs_dir.c
 Create, manage, etc.
 
file  fs_file.c
 Create, manage, etc.
 
file  fs_inode.c
 Contains functions to allocate, free, and process the generic inode structures.
 
file  fs_io.c
 Contains functions to read data from a disk image and wrapper functions to read file content.
 
file  fs_load.c
 Contains a general file walk callback that can be used to load file content into a buffer.
 
file  fs_name.c
 Code to allocate and free the TSK_FS_NAME structures.
 
file  fs_open.c
 Contains the general code to open a file system – this calls the file system -specific opening routines.
 
file  fs_parse.c
 Contains code to parse specific types of data from the command line.
 
file  fs_types.c
 Contains TSK functions that deal with parsing and printing file system type strings.
 
file  hfs.c
 Contains the general internal TSK HFS metadata and data unit code.
 
file  hfs_dent.c
 Contains the file name layer code for HFS+ file systems – not included in code by default.
 
file  hfs_journal.c
 Contains the internal TSK HFS+ journal code – not included in code by default.
 
file  hfs_unicompare.c
 
file  icat_lib.c
 Contains the library API functions used by the TSK icat command line tool.
 
file  ifind_lib.c
 Contains the library API functions used by the TSK ifind command line tool.
 
file  ils_lib.c
 Library functionality of the TSK ils tool.
 
file  iso9660.c
 Contains the internal TSK ISO9660 file system code to handle basic file system processing for opening file system, processing sectors, and directory entries.
 
file  iso9660_dent.c
 Contains the internal TSK ISO9660 file system code to handle the parsing of file names and directory structures.
 
file  lzvn.c
 
file  lzvn.h
 
file  nofs_misc.c
 Contains internal functions that are common to the "non-file system" file systems, such as raw and swap.
 
file  ntfs.c
 Contains the TSK internal general NTFS processing code.
 
file  ntfs_dent.cpp
 NTFS file name processing internal functions.
 
file  rawfs.c
 Contains internal "raw" specific file system functions.
 
file  swapfs.c
 Contains the internal "swapfs" specific functions.
 
file  tsk_apfs.h
 
file  tsk_exfatfs.h
 Contains declarations of structures and functions specific to TSK exFAT file system support.
 
file  tsk_ext2fs.h
 
file  tsk_fatfs.h
 Contains the structures and function APIs for TSK FAT (FAT12, FAT16, FAT32, exFAT) file system support.
 
file  tsk_fatxxfs.h
 Contains the structures and function APIs for TSK FATXX (FAT12, FAT16, FAT32) file system support.
 
file  tsk_ffs.h
 
file  tsk_fs.h
 External header file for file system support.
 
file  tsk_fs_i.h
 Contains the internal library definitions for the file system functions.
 
file  tsk_hfs.h
 
file  tsk_iso9660.h
 
file  tsk_ntfs.h
 
file  tsk_yaffs.h
 
file  unix_misc.c
 Contains code that is common to both UFS1/2 and Ext2/3 file systems.
 
file  usn_journal.c
 Contains the TSK Update Sequence Number journal walking code.
 
file  usnjls_lib.c
 Contains the library code associated with the TSK usnjs tool to list changes within a NTFS File System.
 
file  walk_cpp.cpp
 
file  yaffs.cpp
 Contains the internal TSK YAFFS2 file system functions.
 

Copyright © 2007-2020 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.