The Sleuth Kit 4.15.0-develop
ntfs_attr Struct Reference

Public Attributes

union { 
   struct { 
      uint8_t   alen [8] 
      uint8_t   compusize [2] 
      uint8_t   f1 [4] 
      uint8_t   initsize [8] 
      uint8_t   last_vcn [8] 
      uint8_t   run_off [2] 
      uint8_t   ssize [8] 
      uint8_t   start_vcn [8] 
   }   nr
   struct { 
      uint8_t   idxflag [2] 
      uint8_t   soff [2] 
      uint8_t   ssize [4] 
   }   r
c
uint8_t flags [2]
uint8_t id [2]
uint8_t len [4]
uint8_t name_off [2]
uint8_t nlen
uint8_t res
uint8_t type [4]

The documentation for this struct was generated from the following file:

Copyright © 2007-2020 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.