The Sleuth Kit  4.0
Class Hierarchy
This inheritance list is sorted roughly, but not completely, alphabetically:
[detail level 12]
oC_TSK_DB_FILE_LAYOUT_RANGEStructure wrapping a single file_layout db entry
oC_TSK_DB_FS_INFOStructure wrapping a single fs info db entry
oC_TSK_DB_OBJECTStructure wrapping a single tsk objects db entry
oC_TSK_DB_VS_INFOStructure wrapping a single vs info db entry
oC_TSK_DB_VS_PART_INFO
oC_YaffsCacheChunk
oC_YaffsCacheChunkGroup
oC_YaffsCacheObject
oC_YaffsCacheVersion
oC_YaffsChunk
oCbsd_disklabel
oCcm_t
oCdate_time
oCDECMPFS_DISK_HEADER
oCdos_part
oCdos_sect
oCTskAuto::error_record
oCext2fs_dentry1
oCext2fs_dentry2
oCext2fs_ea_entry
oCext2fs_ea_header
oCext2fs_extent
oCext2fs_extent_header
oCext2fs_extent_idx
oCext2fs_gd
oCEXT2FS_INFO
oCext2fs_inode
oCEXT2FS_JINFO
oCext2fs_journ_dentry
oCext2fs_journ_head
oCext2fs_journ_sb
oCext2fs_pos_acl_entry_lo
oCext2fs_pos_acl_entry_sh
oCext2fs_pos_acl_head
oCext2fs_sb
oCext4fs_gd
oCext4fs_journ_commit_head
oCext_attr_rec
oCfatfs_dentry
oCfatfs_dentry_lfn
oCfatfs_fsinfo
oCFATFS_INFO
oCfatfs_sb
oCffs_cgd
oCffs_cgd2
oCffs_csum1
oCffs_csum2
oCffs_dentry1
oCffs_dentry2
oCffs_extattr
oCFFS_INFO
oCffs_inode
oCffs_inode1
oCffs_inode1b
oCffs_inode2
oCffs_sb1
oCffs_sb2
oCgpt_entry
oCgpt_head
oChfs_access_perm
oChfs_attr_data
oChfs_btree_header_record
oChfs_btree_index_record
oChfs_btree_key_attr
oChfs_btree_key_cat
oChfs_btree_key_ext
oChfs_btree_node
oCHFS_ENTRY
oChfs_ext_desc
oChfs_extendedfileinfo
oChfs_extents
oChfs_file
oChfs_file_fold_std
oChfs_file_folder
oChfs_fileinfo
oChfs_folder
oChfs_fork
oCHFS_INFO
oChfs_journ_sb
oChfs_mdb
oChfs_plus_vh
oChfs_point
oChfs_resource
oChfs_resource_fork_header
oChfs_resource_fork_map_header
oChfs_resource_refListItem
oChfs_resource_type_list
oChfs_resource_type_list_item
oChfs_thread
oChfs_uni_str
oCIMG_RAW_INFO
oCIMG_SPLIT_CACHE
oCiso9660_dentry
oCiso9660_gvd
oCiso9660_inode
oCiso9660_inode_node
oCiso9660_pvd
oCiso9660_pvd_node
oCiso9660_root_dentry
oCiso9660_rr_cl_entry
oCiso9660_rr_nm_entry
oCiso9660_rr_pn_entry
oCiso9660_rr_px_entry
oCiso9660_rr_re_entry
oCiso9660_rr_sf_entry
oCiso9660_rr_sl_entry
oCiso9660_rr_tf_entry
oCiso9660_susp_ce
oCiso9660_susp_er
oCiso9660_susp_head
oCiso9660_susp_sp
oCiso9660_svd
oCiso9660_svd_node
oCiso_bootrec
oCISO_INFO
oCmac_part
oCntfs_attr
oCntfs_attr_fname
oCntfs_attr_objid
oCntfs_attr_sdh
oCntfs_attr_sds
oCntfs_attr_si
oCntfs_attr_sii
oCntfs_attr_vinfo
oCntfs_attrdef
oCntfs_attrlist
oCntfs_idxelist
oCntfs_idxentry
oCntfs_idxrec
oCntfs_idxroot
oCNTFS_INFO
oCntfs_mft
oCntfs_runlist
oCntfs_sb
oCntfs_self_relative_security_descriptor
oCntfs_sid
oCNTFS_SXX_BUFFER
oCntfs_upd
oCext2fs_sb::pad_or_gdt
oCpath_table_rec
oCrecord_data
oCrockridge_ext
oCrr_sys_use
oCSHA256_CTX
oCSHA512_CTX
oCsun_dlabel_i386
oCsun_dlabel_sparc
oCTSK_ERROR_INFO
oCTSK_FS_ATTRHolds information about the location of file content (or a file attribute)
oCTSK_FS_ATTR_RUNHolds information about a single data run, which has a starting address and length
oCTSK_FS_ATTRLISTStructure used as the head of an attribute list
oCTSK_FS_BLOCKGeneric data strcture to hold block data with metadata
oCTSK_FS_BLOCK_WALK_CPP_DATA
oCTSK_FS_DIRA handle to a directory so that its files can be individually accessed
oCTSK_FS_DIR_WALK_CPP_DATA
oCTSK_FS_FILEGeneric structure used to refer to files in the file system
oCTSK_FS_FILE_WALK_CPP_DATA
oCTSK_FS_INFOStores state information for an open file system
oCTSK_FS_JBLK_WALK_CPP_DATA
oCTSK_FS_JENTRY
oCTSK_FS_JENTRY_WALK_CPP_DATA
oCTSK_FS_LOAD_FILE
oCTSK_FS_METATSK data structure to store general file and directory metadata
oCTSK_FS_META_NAME_LISTRelatively generic structure to hold file names that are stored with the file metadata
oCTSK_FS_META_WALK_CPP_DATA
oCTSK_FS_NAMEGeneric structure to store the file name information that is stored in a directory
oCTSK_HDB_INFOHolds information about an open hash database
oCTSK_IMG_INFOCreated when a disk image has been opened and stores general information and handles
oCTSK_LISTLinked list structure that holds a 'key' and optional 'length'
oCtsk_lock_t
oCTSK_MD5_CTX
oCTSK_SHA_CTX
oCTSK_STACKBasic stack structure to push and pop (used for finding loops in recursion)
oCTSK_VS_INFOData structure used to store state and basic information for open volume systems
oCTSK_VS_PART_INFOLinked list entry that describes a volume in a generic way
oCTSK_VS_PART_WALK_CPP_DATA
oCTskAutoC++ class that automatically analyzes a disk image to extract files from it
oCTskCaseDbStores case-level information in a database on one or more disk images
oCTskDbSqlite
oCTskErrorAllows access to most recent error message and code in the thread
oCTskFsAttributeStores information about a file attribute
oCTskFsAttrRunContains information about a single data run, which has a starting address and length
oCTskFsBlockStores information about a file system block
oCTskFsDirStores information about a directory in the file system
oCTskFsFileClass that represents an allocated or deleted file
oCTskFsInfoStores information about an open file system
oCTskFsJEntry
oCTskFsMetaStores metadata about a file
oCTskFsMetaNameStores information about names that are located in metadata structures
oCTskFsNameStores the file name information that is stored in a directory
oCTskHdbInfoStores information about an open hash database
oCTskImgInfoStores information about an image that is open and being analyzed
oCTskVsInfoStores information about an open volume system
oCTskVsPartInfoStores information about a volume / partition inside of an open volume system
oCYAFFSFS_INFO
oCyaffsObj_header
\CyaffsObj_spare

Copyright © 2007-2013 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.