The Sleuth Kit: Class Members - Variables

The Sleuth Kit 4.0

- a -

addr : TSK_FS_BLOCK , TSK_FS_ATTR_RUN , TSK_FS_DIR , TSK_VS_PART_INFO , TSK_FS_META
allocsize : TSK_FS_ATTR
atime : TSK_FS_META
atime_nano : TSK_FS_META
attr : TSK_FS_META
attr_state : TSK_FS_META

- b -

bkup_time : TSK_FS_META
bkup_time_nano : TSK_FS_META
blk_l : iso9660_susp_ce
block_count : TSK_FS_INFO
block_post_size : TSK_FS_INFO
block_pre_size : TSK_FS_INFO
block_size : TSK_VS_INFO , TSK_FS_INFO
block_walk : TSK_FS_INFO
blockmap_cache : HFS_INFO
blockmap_cache_len : HFS_INFO
blockmap_cache_start : HFS_INFO
buf : TSK_FS_BLOCK , TSK_FS_ATTR
buf_size : TSK_FS_ATTR
buffer : NTFS_SXX_BUFFER

- c -

cache : TSK_IMG_INFO
cache_age : TSK_IMG_INFO
cache_len : TSK_IMG_INFO
cache_lock : TSK_IMG_INFO
cache_off : TSK_IMG_INFO
celen_l : iso9660_susp_ce
close : TSK_FS_INFO
compsize : TSK_FS_ATTR
content_len : TSK_FS_META
content_ptr : TSK_FS_META
crtime : TSK_FS_META
crtime_nano : TSK_FS_META
ctime : TSK_FS_META
ctime_nano : TSK_FS_META

- d -

db_fname : TSK_HDB_INFO
db_name : TSK_HDB_INFO
db_type : TSK_HDB_INFO
desc : TSK_VS_PART_INFO
dev_bsize : TSK_FS_INFO
dtime : TSK_FS_META
dtime_nano : TSK_FS_META
duname : TSK_FS_INFO

- e -

endian : TSK_FS_INFO , TSK_VS_INFO
ext_id : iso9660_susp_er
ext_ver : iso9660_susp_er

- f -

fileObjId : _TSK_DB_FILE_LAYOUT_RANGE
first_block : TSK_FS_INFO
first_inum : TSK_FS_INFO
flags : TSK_FS_ATTR_RUN , TSK_FS_INFO , TSK_VS_PART_INFO , TSK_FS_ATTR , TSK_FS_META , TSK_FS_NAME
fs_file : TSK_FS_ATTR , TSK_FS_DIR
fs_id : TSK_FS_INFO
fs_id_used : TSK_FS_INFO
fs_info : TSK_FS_DIR , TSK_FS_BLOCK , TSK_FS_FILE
ftype : TSK_FS_INFO

- g -

gid : TSK_FS_META
grp_addr : FFS_INFO
grp_buf : FFS_INFO
grp_num : FFS_INFO

- h -

hash_len : TSK_HDB_INFO
hash_type : TSK_HDB_INFO
hDb : TSK_HDB_INFO
hIdx : TSK_HDB_INFO
hIdxTmp : TSK_HDB_INFO

- i -

id : TSK_FS_ATTR
idx_fname : TSK_HDB_INFO
idx_lbuf : TSK_HDB_INFO
idx_llen : TSK_HDB_INFO
idx_off : TSK_HDB_INFO
idx_size : TSK_HDB_INFO
img_info : TSK_VS_INFO , TSK_FS_INFO
imgstat : TSK_IMG_INFO
initsize : TSK_FS_ATTR
inode_walk : TSK_FS_INFO
inum_count : TSK_FS_INFO
istat : TSK_FS_INFO
itbl_addr : FFS_INFO
itbl_buf : FFS_INFO
itype : TSK_IMG_INFO

- j -

journ_inum : TSK_FS_INFO

- k -

key : TSK_LIST

- l -

last_block : TSK_FS_INFO
last_block_act : TSK_FS_INFO
last_inum : TSK_FS_INFO
len : TSK_LIST , TSK_STACK , TSK_FS_ATTR_RUN , TSK_VS_PART_INFO
len_des : iso9660_susp_er
len_id : iso9660_susp_er
len_src : iso9660_susp_er
link : TSK_FS_META
list_inum_named : TSK_FS_INFO
lock : TSK_HDB_INFO

- m -

m_internalOpen : TskAuto
m_stopAllProcessing : TskAuto
magic : iso9660_gvd
meta : TSK_FS_FILE
meta_addr : TSK_FS_NAME
meta_seq : TSK_FS_NAME
mode : TSK_FS_META
mtime : TSK_FS_META
mtime_nano : TSK_FS_META

- n -

name : TSK_FS_ATTR , TSK_FS_META_NAME_LIST , TSK_FS_FILE , TSK_FS_NAME
name2 : TSK_FS_META
name_size : TSK_FS_ATTR , TSK_FS_NAME
names : TSK_FS_DIR
names_alloc : TSK_FS_DIR
names_used : TSK_FS_DIR
next : TSK_FS_ATTR_RUN , TSK_FS_META_NAME_LIST , TSK_FS_ATTR , TSK_VS_PART_INFO , TSK_LIST
nlink : TSK_FS_META

- o -

objId : _TSK_DB_OBJECT , _TSK_DB_FS_INFO , _TSK_DB_VS_PART_INFO , _TSK_DB_VS_INFO
offset : TSK_FS_INFO , TSK_VS_INFO , TSK_FS_ATTR_RUN , TSK_FS_ATTR
offset_l : iso9660_susp_ce
orphan_dir : TSK_FS_INFO

- p -

par_addr : TSK_FS_NAME
par_inode : TSK_FS_META_NAME_LIST
par_seq : TSK_FS_META_NAME_LIST
part_count : TSK_VS_INFO
part_list : TSK_VS_INFO
prev : TSK_VS_PART_INFO
pvd : ISO_INFO

- r -

root_inum : TSK_FS_INFO
run : TSK_FS_ATTR
run_end : TSK_FS_ATTR

- s -

sector_size : TSK_IMG_INFO
seq : TSK_FS_META
shrt_name : TSK_FS_NAME
shrt_name_size : TSK_FS_NAME
size : TSK_IMG_INFO , TSK_FS_ATTR , TSK_FS_META , NTFS_SXX_BUFFER
skiplen : TSK_FS_ATTR
slot_num : TSK_VS_PART_INFO
start : TSK_VS_PART_INFO
susp_len : iso9660_inode
susp_off : iso9660_inode
svd : ISO_INFO

- t -

table_num : TSK_VS_PART_INFO
tag : TSK_IMG_INFO
top : TSK_STACK
type : TSK_FS_META , TSK_FS_ATTR , TSK_FS_NAME , iso9660_gvd

- u -

uid : TSK_FS_META
uns_fname : TSK_HDB_INFO
used : NTFS_SXX_BUFFER

- v -

vals : TSK_STACK
ver : iso9660_gvd
vs : TSK_VS_PART_INFO
vstype : TSK_VS_INFO

- x -

x : iso9660_gvd

Copyright © 2007-2013 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.