TskCarveExtractScalpel Class Reference

The TskCarveExtractScalpel class implements the CarveExtract interface to carve unallocated sectors image files using Scalpel. More...

#include <TskCarveExtractScalpel.h>

Inheritance diagram for TskCarveExtractScalpel:

Public Member Functions
virtual int	processFile (int unallocImgId)
	Carve a specified unallocated sectors image file. More...
	TskCarveExtractScalpel (bool createUnusedSectorFiles=false)
Public Member Functions inherited from CarveExtract
virtual	~CarveExtract ()
	Virtual destructor to ensure derived class constructors are called polymorphically.

Detailed Description

The TskCarveExtractScalpel class implements the CarveExtract interface to carve unallocated sectors image files using Scalpel.

Member Function Documentation

int TskCarveExtractScalpel::processFile ( int  unallocImgId)

virtual

Carve a specified unallocated sectors image file.

Parameters

unallocImgId

Id of the file to carve.

Returns

1 on error.

Implements CarveExtract.

References TskServices::getImgDB(), TskServices::Instance(), LOGERROR, TskException::message(), and TskUtilities::toUTF16().

---

The documentation for this class was generated from the following files:

• framework/tsk/framework/extraction/TskCarveExtractScalpel.h
• framework/tsk/framework/extraction/TskCarveExtractScalpel.cpp