The Sleuth Kit 4.15.0-develop
TskFsName Class Reference

Stores the file name information that is stored in a directory. More...

#include <tsk_fs.h>

Public Member Functions

TSK_FS_NAME_FLAG_ENUM getFlags () const
TSK_INUM_T getMetaAddr () const
uint32_t getMetaSeq () const
const char * getName () const
 Return the name of the file (in UTF-8).
TSK_INUM_T getParentAddr () const
const char * getShortName () const
TSK_FS_NAME_TYPE_ENUM getType () const
 TskFsName (TSK_FS_NAME *a_fsName)
 construct a TskFsName object

Friends

class TskFsInfo

Detailed Description

Stores the file name information that is stored in a directory.

Most file systems separate the file name from the metadata, but some do not (such as FAT). This structure contains the file name and the address of the metadata. See TSK_FS_NAME for more details.

Constructor & Destructor Documentation

◆ TskFsName()

TskFsName::TskFsName ( TSK_FS_NAME * a_fsName)
inline

construct a TskFsName object

Parameters
a_fsNamea pointer of TSK_FS_NAME. If NULL, the getX() return values are undefined.

Member Function Documentation

◆ getFlags()

TSK_FS_NAME_FLAG_ENUM TskFsName::getFlags ( ) const
inline
Return flags that describe allocation status etc.
Returns
flags that describe allocation status

◆ getMetaAddr()

TSK_INUM_T TskFsName::getMetaAddr ( ) const
inline
Return the address of the metadata structure that the name points to.
Returns
address of the metadata structure that the name points to

◆ getMetaSeq()

uint32_t TskFsName::getMetaSeq ( ) const
inline
Return the sequence number for metadata structure (NTFS only)
Returns
sequence number for metadata structure

◆ getName()

const char * TskFsName::getName ( ) const
inline

Return the name of the file (in UTF-8).

Returns
the name of the file

◆ getParentAddr()

TSK_INUM_T TskFsName::getParentAddr ( ) const
inline
Return the metadata address of the parent directory (equal to meta_addr if this entry is for root directory).
Returns
metadata address of parent directory

◆ getShortName()

const char * TskFsName::getShortName ( ) const
inline
Return the short name of the file or null (in UTF-8)
Returns
the short name of the file

◆ getType()

TSK_FS_NAME_TYPE_ENUM TskFsName::getType ( ) const
inline
Return the file type information (directory, file, etc.)
Returns
file type information

The documentation for this class was generated from the following file:

Copyright © 2007-2020 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.