|
The Sleuth Kit Framework
4.1
|
This is the complete list of members for TskImgDBSqlite, including all inherited members.
| addAllocUnallocMapInfo(int a_volID, int unallocImgID, uint64_t unallocImgStart, uint64_t length, uint64_t origImgStart) | TskImgDBSqlite | virtual |
| addArtifactType(int typeID, string artifactTypeName, string displayName) | TskImgDBSqlite | protectedvirtual |
| addAttributeType(int typeID, string attributeTypeName, string displayName) | TskImgDBSqlite | protectedvirtual |
| addBlackboardAttribute(TskBlackboardAttribute attr) | TskImgDBSqlite | protectedvirtual |
| addCarvedFileInfo(int vol_id, const char *name, uint64_t size, uint64_t *runStarts, uint64_t *runLengths, int numRuns, uint64_t &fileId) | TskImgDBSqlite | virtual |
| addDerivedFileInfo(const std::string &name, const uint64_t parentId, const bool isDirectory, const uint64_t size, const std::string &details, const int ctime, const int crtime, const int atime, const int mtime, uint64_t &fileId, std::string path) | TskImgDBSqlite | virtual |
| addFsBlockInfo(int fsID, uint64_t a_mFileId, int count, uint64_t blk_addr, uint64_t len) | TskImgDBSqlite | virtual |
| addFsFileInfo(int fsId, const TSK_FS_FILE *fs_file, const char *name, int type, int idx, uint64_t &fileId, const char *path) | TskImgDBSqlite | virtual |
| addFsInfo(int volId, int fsId, const TSK_FS_INFO *fs_info) (defined in TskImgDBSqlite) | TskImgDBSqlite | virtual |
| addImageInfo(int type, int sectorSize) (defined in TskImgDBSqlite) | TskImgDBSqlite | virtual |
| addImageName(char const *imgName) | TskImgDBSqlite | virtual |
| addModule(const std::string &name, const std::string &description, int &moduleId) | TskImgDBSqlite | virtual |
| addToolInfo(const char *name, const char *version) (defined in TskImgDBSqlite) | TskImgDBSqlite | virtual |
| addUnallocImg(int &unallocImgId) | TskImgDBSqlite | virtual |
| addUnusedSectors(int unallocImgId, std::vector< TskUnusedSectorsRecord > &unusedSectorsList) | TskImgDBSqlite | virtual |
| addVolumeInfo(const TSK_VS_PART_INFO *vs_part) (defined in TskImgDBSqlite) | TskImgDBSqlite | virtual |
| BB_VALUE_TYPE_BYTE enum value | TskImgDB | |
| BB_VALUE_TYPE_DOUBLE enum value | TskImgDB | |
| BB_VALUE_TYPE_INT32 enum value | TskImgDB | |
| BB_VALUE_TYPE_INT64 enum value | TskImgDB | |
| BB_VALUE_TYPE_STRING enum value | TskImgDB | |
| begin() (defined in TskImgDBSqlite) | TskImgDBSqlite | virtual |
| close() | TskImgDBSqlite | virtual |
| commit() (defined in TskImgDBSqlite) | TskImgDBSqlite | virtual |
| createArtifact(uint64_t artifactID, uint64_t objID, int artifactTypeID) (defined in TskImgDB) | TskImgDB | protected |
| createAttribute(uint64_t artifactID, int attributeTypeID, uint64_t objectID, string moduleName, string context, TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE valueType, int valueInt, uint64_t valueLong, double valueDouble, string valueString, vector< unsigned char > valueBytes) (defined in TskImgDB) | TskImgDB | protected |
| createBlackboardArtifact(uint64_t file_id, int artifactTypeID) | TskImgDBSqlite | protectedvirtual |
| dbExist() const (defined in TskImgDBSqlite) | TskImgDBSqlite | virtual |
| FILE_STATUS enum name | TskImgDB | |
| FILE_TYPES enum name | TskImgDB | |
| findAttributeTypes(int artifactTypeId) (defined in TskImgDBSqlite) | TskImgDBSqlite | protectedvirtual |
| findParObjId(const TSK_FS_FILE *fs_file, const int64_t &fsObjId) | TskImgDB | protected |
| getAllArtifactTypes() (defined in TskImgDB) | TskImgDB | protectedvirtual |
| getAllAttributeTypes() (defined in TskImgDB) | TskImgDB | protectedvirtual |
| getAllUnallocImgStatus(std::vector< TskUnallocImgStatusRecord > &unallocImgStatusList) const | TskImgDBSqlite | virtual |
| getArtifactTypeDisplayName(int artifactTypeID) | TskImgDBSqlite | protectedvirtual |
| getArtifactTypeID(string artifactTypeString) | TskImgDBSqlite | protectedvirtual |
| getArtifactTypeName(int artifactTypeID) | TskImgDBSqlite | protectedvirtual |
| getAttributeTypeDisplayName(int attributeTypeID) | TskImgDBSqlite | protectedvirtual |
| getAttributeTypeID(string attributeTypeString) | TskImgDBSqlite | protectedvirtual |
| getAttributeTypeName(int attributeTypeID) | TskImgDBSqlite | protectedvirtual |
| getCarvedFileIds() const (defined in TskImgDBSqlite) | TskImgDBSqlite | virtual |
| getCfileName(const uint64_t a_file_id) const (defined in TskImgDBSqlite) | TskImgDBSqlite | virtual |
| getFileCount(const std::string &condition) const | TskImgDBSqlite | virtual |
| getFileId(int fsId, uint64_t fs_file_id) const | TskImgDBSqlite | virtual |
| getFileIds(char *a_fileName, uint64_t *a_outBuffer, int a_buffSize) const | TskImgDBSqlite | virtual |
| getFileIds(const std::string &condition) const | TskImgDBSqlite | virtual |
| getFileIds() const (defined in TskImgDBSqlite) | TskImgDBSqlite | virtual |
| getFileInfoSummary(std::list< TskFileTypeRecord > &fileTypeInfoList) const | TskImgDBSqlite | virtual |
| getFileInfoSummary(FILE_TYPES fileType, std::list< TskFileTypeRecord > &fileTypeInfoList) const | TskImgDBSqlite | virtual |
| getFileName(uint64_t file_id) const (defined in TskImgDBSqlite) | TskImgDBSqlite | virtual |
| getFileRecord(const uint64_t fileId, TskFileRecord &fileRecord) const | TskImgDBSqlite | virtual |
| getFileRecords(const std::string &condition) const (defined in TskImgDBSqlite) | TskImgDBSqlite | virtual |
| getFileSectors(uint64_t fileId) const (defined in TskImgDBSqlite) | TskImgDBSqlite | virtual |
| getFileUniqueIdentifiers(uint64_t a_fileId, uint64_t &a_fsOffset, uint64_t &a_fsFileId, int &a_attrType, int &a_attrId) const | TskImgDBSqlite | virtual |
| getFreeSectors() const | TskImgDBSqlite | virtual |
| getFsInfo(std::list< TskFsInfoRecord > &fsInfoList) const | TskImgDBSqlite | virtual |
| getImageBaseName() const | TskImgDBSqlite | virtual |
| getImageInfo(int &type, int §orSize) const | TskImgDBSqlite | virtual |
| getImageNames() const (defined in TskImgDBSqlite) | TskImgDBSqlite | virtual |
| getImageNamesW() const | TskImgDBSqlite | virtual |
| getKnownStatus(const uint64_t fileId) const | TskImgDBSqlite | virtual |
| getMatchingArtifacts(string condition) | TskImgDBSqlite | protectedvirtual |
| getMatchingAttributes(string condition) | TskImgDBSqlite | protectedvirtual |
| getMaxFileIdReadyForAnalysis(uint64_t a_lastFileId, uint64_t &maxFileId) const | TskImgDBSqlite | virtual |
| getMinFileIdReadyForAnalysis(uint64_t &minFileId) const (defined in TskImgDBSqlite) | TskImgDBSqlite | virtual |
| getModuleErrors(std::vector< TskModuleStatus > &moduleStatusList) const | TskImgDBSqlite | virtual |
| getModuleInfo(std::vector< TskModuleInfo > &moduleInfoList) const | TskImgDBSqlite | virtual |
| getNumFiles() const | TskImgDBSqlite | virtual |
| getNumVolumes() const | TskImgDBSqlite | virtual |
| getSessionID() const | TskImgDBSqlite | virtual |
| getUnallocImgStatus(int unallocImgId) const | TskImgDBSqlite | virtual |
| getUnallocRun(int file_id, int file_offset) const | TskImgDBSqlite | virtual |
| getUniqueCarvedFiles(HASH_TYPE hashType) const | TskImgDBSqlite | virtual |
| getUniqueCarvedFilesInfo(HASH_TYPE hashType) const | TskImgDBSqlite | virtual |
| getUniqueFileIds(HASH_TYPE hashType) const (defined in TskImgDBSqlite) | TskImgDBSqlite | virtual |
| getUnusedSector(uint64_t fileId, TskUnusedSectorsRecord &unusedSectorsRecord) const | TskImgDBSqlite | virtual |
| getVolumeInfo(std::list< TskVolumeInfoRecord > &volumeInfoList) const | TskImgDBSqlite | virtual |
| HASH_TYPE enum name | TskImgDB | |
| IMGDB_FILES_KNOWN enum value | TskImgDB | |
| IMGDB_FILES_KNOWN_BAD enum value | TskImgDB | |
| IMGDB_FILES_KNOWN_GOOD enum value | TskImgDB | |
| IMGDB_FILES_STATUS_ANALYSIS_COMPLETE enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_FILES_STATUS_ANALYSIS_FAILED enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_FILES_STATUS_ANALYSIS_IN_PROGRESS enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_FILES_STATUS_ANALYSIS_SKIPPED enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_FILES_STATUS_CREATED enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_FILES_STATUS_READY_FOR_ANALYSIS enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_FILES_TYPE_CARVED enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_FILES_TYPE_DERIVED enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_FILES_TYPE_FS enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_FILES_TYPE_UNUSED enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_FILES_UNKNOWN enum value | TskImgDB | |
| IMGDB_UNALLOC_IMG_STATUS_CARVED_ERR enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_UNALLOC_IMG_STATUS_CARVED_NOT_NEEDED enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_UNALLOC_IMG_STATUS_CARVED_OK enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_UNALLOC_IMG_STATUS_CREATED enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_UNALLOC_IMG_STATUS_SCHEDULE_ERR enum value (defined in TskImgDB) | TskImgDB | |
| IMGDB_UNALLOC_IMG_STATUS_SCHEDULE_OK enum value (defined in TskImgDB) | TskImgDB | |
| initialize() | TskImgDBSqlite | virtual |
| KNOWN_STATUS enum name | TskImgDB | |
| m_parentDirIdCache (defined in TskImgDB) | TskImgDB | protected |
| MD5 enum value | TskImgDB | |
| open() | TskImgDBSqlite | virtual |
| quote(const std::string str) const (defined in TskImgDBSqlite) | TskImgDBSqlite | virtual |
| setHash(const uint64_t a_file_id, const TskImgDB::HASH_TYPE hashType, const std::string &hash) const (defined in TskImgDBSqlite) | TskImgDBSqlite | virtual |
| setModuleStatus(uint64_t file_id, int module_id, int status) | TskImgDBSqlite | virtual |
| setUnallocImgStatus(int unallocImgId, TskImgDB::UNALLOC_IMG_STATUS status) | TskImgDBSqlite | virtual |
| SHA1 enum value | TskImgDB | |
| SHA2_256 enum value | TskImgDB | |
| SHA2_512 enum value | TskImgDB | |
| storeParObjId(const int64_t &fsObjId, const TSK_FS_FILE *fs_file, const int64_t &objId) | TskImgDB | protected |
| TskDBBlackboard (defined in TskImgDBSqlite) | TskImgDBSqlite | friend |
| TskImgDB() | TskImgDB | |
| TskImgDBSqlite(const char *a_outpath) | TskImgDBSqlite | |
| UNALLOC_IMG_STATUS enum name | TskImgDB | |
| updateFileStatus(uint64_t a_file_id, FILE_STATUS a_status) | TskImgDBSqlite | virtual |
| updateKnownStatus(uint64_t a_file_id, KNOWN_STATUS a_status) | TskImgDBSqlite | virtual |
| VALUE_TYPE enum name | TskImgDB | |
| ~TskImgDB() | TskImgDB | virtual |
| ~TskImgDBSqlite() (defined in TskImgDBSqlite) | TskImgDBSqlite | virtual |
Copyright © 2011-2013 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.