The Sleuth Kit (Incomplete Docs) File List

Here is a list of all documented files with brief descriptions:
tsk/base/data_buf.cContains functions to allocate and maintain the tsk_data_buf structures
tsk/base/md5c.cLocal copy of RSA Data Security, Inc
tsk/base/mymalloc.cThese functions allocate and realocate memory and set the error handling functions when an error occurs
tsk/base/sha1c.cLocal copy of the public domain SHA-1 library code by David Ireland
tsk/base/tsk_base.hContains the type and function definitions that are needed by external programs to use the TSK library
tsk/base/tsk_base_i.hContains the general internal TSK type and function definitions
tsk/base/tsk_endian.cContains the routines to read data in different endian orderings
tsk/base/tsk_error.cContains the error handling code and variables
tsk/base/tsk_list.cTsk_lists are a linked list of buckets that store a key in REVERSE sorted order
tsk/base/tsk_os.hContains some OS-specific type settings
tsk/base/tsk_parse.cContains code to parse specific types of data from the command line
tsk/base/tsk_printf.cThese are printf wrappers that are needed so that we can easily print in both Unix and Windows
tsk/base/tsk_unicode.cA local copy of the Unicode conversion routines from unicode.org
tsk/base/tsk_version.cContains functions to print and obtain the library version
tsk/base/XGetopt.cParses arguments for win32 programs -- written by Hans Dietrich
tsk/base/XGetopt.hHeader info to parse arguments for win32 programs -- written by Hans Dietrich
tsk/fs/dcalc_lib.cContains the library API functions used by the dcalc command line tool
tsk/fs/dcat_lib.cContains the library API functions used by the dcat command line tool
tsk/fs/dls_lib.cContains the library API functions used by the dls command line tool
tsk/fs/dstat_lib.cContains the library API functions used by the dstat command line tool
tsk/fs/ext2fs.cGeneral ext2/ext3 file system functions
tsk/fs/ext2fs_dent.cFile name walking / processing code for Ext2 / ext3
tsk/fs/ext2fs_journal.cExt3 journal walking code
tsk/fs/fatfs.cFAT file system code to handle basic file system processing for opening file system, processing sectors, and directory entries
tsk/fs/fatfs_dent.cFAT file name walking code
tsk/fs/ffind_lib.cContains the library API functions used by the ffind command line tool
tsk/fs/ffs.cGeneral UFS / FFS file system functions
tsk/fs/ffs_dent.cUFS/FFS file name (directory entry) processing / walking functions
tsk/fs/fls_lib.cContains the library code associated with the 'fls' functionality of listing files in a directory
tsk/fs/fs_data.cFunctions to allocate and add structures to maintain generic file system attributes and run lists
tsk/fs/fs_dent.cCode to allocate and free the TSK_FS_DENT structures
tsk/fs/fs_inode.cContains functions to allocate, free, and process the generic inode structures
tsk/fs/fs_io.cContains functions to read data from a disk image and wrapper functions to read file content
tsk/fs/fs_load.cContains a general file walk callback that can be used to load file content into a buffer
tsk/fs/fs_open.cContains the general code to open a file system -- this calls the file system -specific opening routines
tsk/fs/fs_types.cContains functions that deal with parsing and printing file system type strings
tsk/fs/hfs.cContains the general HFS metadata and data unit code -- Not included in code by default
tsk/fs/hfs_dent.cContains the file name layer code for HFS+ file systems -- not included in code by default
tsk/fs/hfs_journal.cContains the HFS+ journal code -- not included in code by default
tsk/fs/icat_lib.cContains the library API functions used by the icat command line tool
tsk/fs/ifind_lib.cContains the library API functions used by the ifind command line tool
tsk/fs/ils_lib.cLibrary functionality of the ils tool
tsk/fs/iso9660.cISO9660 file system code to handle basic file system processing for opening file system, processing sectors, and directory entries
tsk/fs/iso9660_dent.cISO9660 file system code to handle the parsing of file names and directory structures
tsk/fs/ntfs.cContains the general NTFS processing code
tsk/fs/ntfs_dent.cNTFS file name walking / processing functions
tsk/fs/rawfs.cGeneral "raw" file system functions
tsk/fs/swapfs.cGeneral "swapfs" file system functions
tsk/fs/tsk_ext2fs.hContains the structures and function APIs for EXT2FS file system support
tsk/fs/tsk_fatfs.hContains the structures and function APIs for FATFS file system support
tsk/fs/tsk_ffs.hContains the structures and function APIs for FFS file system support
tsk/fs/tsk_fs.hExternal header file for file system support
tsk/fs/tsk_fs_i.hContains the internal library definitions for the file system functions
tsk/fs/tsk_hfs.hContains the structures and function APIs for HFS+ file system support
tsk/fs/tsk_iso9660.hContains the structures and function APIs for ISO9660 file system support
tsk/fs/tsk_ntfs.hContains the structures and function APIs for NTFS file system support
tsk/hashdb/hk_index.cContains functions to read and process hash keeper database files
tsk/hashdb/idxonly_index.cContains the dummy functions that are used when only an index is used for lookups and the original database is gone
tsk/hashdb/md5sum_index.cContains the MD5sum hash database specific extraction and printing routines
tsk/hashdb/nsrl_index.cNSRL specific functions to read the database
tsk/hashdb/tm_lookup.cContains the generic hash database creation and lookup code
tsk/hashdb/tsk_hashdb.hExternal header file for hash database support
tsk/hashdb/tsk_hashdb_i.hContains the internal library definitions for the hash database functions
tsk/img/aff.cCode to interface with afflib to read and open AFF image files
tsk/img/aff.hHeader files for AFF-specific data structures and functions
tsk/img/ewf.cContains the functions for TSK to interface with libewf
tsk/img/ewf.hHeader files for EWF-specific data structures and functions
tsk/img/img_open.cContains the basic img_open function call, that interfaces with the format specific _open calls
tsk/img/img_types.cContains basic functions to parse and print the names of the supported disk image types
tsk/img/raw.cCode to open and read single raw disk images
tsk/img/raw.hContains the single raw data file-specific functions and structures
tsk/img/split.cCode to handle opening and reading of split raw disk images
tsk/img/split.hContains the split raw data file-specific functions and structures
tsk/img/tsk_img.hContains the external library definitions for the disk image functions
tsk/img/tsk_img_i.hContains the internal library definitions for the disk image functions
tsk/vs/bsd.cContains the functions required to process BSD disk labels
tsk/vs/dos.cContains the functions to process DOS Partition tables
tsk/vs/gpt.cThe functions required to process the GPT GUID Partiition Table
tsk/vs/mac.cContains the functions to process and load a Mac partition table
tsk/vs/mm_io.cContains the wrapper code that allows one to read sectors from a MM_INFO structure
tsk/vs/mm_open.cContains general code to open volume systems
tsk/vs/mm_part.cContins the functions need to create and maintain the linked list of partitions in a volume
tsk/vs/mm_types.cContains the code to parse and print the strings for the supported volume system types
tsk/vs/sun.cContains the SUN VTOC volume system processing code
tsk/vs/tsk_bsd.hC header file with BSD and internal data structures
tsk/vs/tsk_dos.hC header file with DOS and internal data structures
tsk/vs/tsk_gpt.hC header file with GPT and internal data structures
tsk/vs/tsk_mac.hC header file with Mac and internal data structures
tsk/vs/tsk_sun.hC header file with Sun and internal data structures
tsk/vs/tsk_vs.hExternal header file for media management (volume system) support
tsk/vs/tsk_vs_i.hContains the internal library definitions for the volume system functions

Generated on Tue Jan 29 00:26:15 2008 for The Sleuth Kit (Incomplete Docs) by  doxygen 1.5.1