The Sleuth Kit Framework  4.1
Classes | Public Member Functions | List of all members
TskCarveExtractScalpel Class Reference

The TskCarveExtractScalpel class implements the CarveExtract interface to carve unallocated sectors image files using Scalpel. More...

#include <TskCarveExtractScalpel.h>

Inheritance diagram for TskCarveExtractScalpel:
CarveExtract

Public Member Functions

virtual int processFile (int unallocImgId)
 Carve a specified unallocated sectors image file. More...
 
 TskCarveExtractScalpel (bool createUnusedSectorFiles=false)
 
- Public Member Functions inherited from CarveExtract
virtual ~CarveExtract ()
 Virtual destructor to ensure derived class constructors are called polymorphically.
 

Detailed Description

The TskCarveExtractScalpel class implements the CarveExtract interface to carve unallocated sectors image files using Scalpel.

Member Function Documentation

int TskCarveExtractScalpel::processFile ( int  unallocImgId)
virtual

Carve a specified unallocated sectors image file.

Parameters
unallocImgIdId of the file to carve.
Returns
1 on error.

Implements CarveExtract.

References TskServices::getImgDB(), TskServices::Instance(), LOGERROR, TskException::message(), and TskUtilities::toUTF16().


The documentation for this class was generated from the following files:

Copyright © 2011-2013 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.