Public Member Functions
short	getFileType ()

String	getName ()

Static Public Member Functions
static TSK_DB_FILES_TYPE_ENUM	valueOf (short fileType)

Public Attributes
	CARVED =(1, "Carved")
	Set of blocks for a file found from carving. Could be on top of a TSK_DB_FILES_TYPE_UNALLOC_BLOCKS range. More...

	DERIVED =(2, "Derived")
	File derived from a parent file (i.e. from ZIP) More...

	FS =(0, "File System")
	File that can be found in file system tree. More...

	LOCAL =(3, "Local")
	Local file that was added (not from a disk image) More...

	SLACK =(7, "Slack")
	Slack space for a single file. More...

	UNALLOC_BLOCKS =(4, "Unallocated Blocks")
	Set of blocks not allocated by file system. Parent should be image, volume, or file system. Many columns in tsk_files will be NULL. Set layout in tsk_file_layout. More...

	UNUSED_BLOCKS =(5, "Unused Blocks")
	Set of blocks that are unallocated AND not used by a carved or other file type. Parent should be UNALLOC_BLOCKS, many columns in tsk_files will be NULL, set layout in tsk_file_layout. More...

	VIRTUAL_DIR =(6, "Virtual Directory")
	Virtual directory (not on fs) with no meta-data entry that can be used to group files of types other than TSK_DB_FILES_TYPE_FS. Its parent is either another TSK_DB_FILES_TYPE_FS or a root directory or type TSK_DB_FILES_TYPE_FS. More...

Private Member Functions
	TSK_DB_FILES_TYPE_ENUM (int fileType, String name)

Private Attributes
final short	fileType

final String	name

Detailed Description

The type of file in a database, such as file system versus local file. This is the type field in the tsk_files table.

Definition at line 654 of file TskData.java.

Constructor & Destructor Documentation

org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.TSK_DB_FILES_TYPE_ENUM	(	int	fileType,
		String	name
	)

private

Definition at line 669 of file TskData.java.

Member Function Documentation

short org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.getFileType ( )

Get short value of the file type

Returns: the long value of the file type

Definition at line 696 of file TskData.java.

String org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.getName ( )

Definition at line 700 of file TskData.java.

static TSK_DB_FILES_TYPE_ENUM org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.valueOf ( short fileType )

static

Convert db files type short value to the enum type

Parameters

fileType long value to convert

Returns: the enum type

Definition at line 681 of file TskData.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.resultSetToAbstractFiles().

Member Data Documentation

org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.CARVED =(1, "Carved")

Set of blocks for a file found from carving. Could be on top of a TSK_DB_FILES_TYPE_UNALLOC_BLOCKS range.

Definition at line 657 of file TskData.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.addCarvedFiles(), and org.sleuthkit.datamodel.SleuthkitCase.resultSetToAbstractFiles().

org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.DERIVED =(2, "Derived")

File derived from a parent file (i.e. from ZIP)

Definition at line 658 of file TskData.java.

final short org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.fileType

private

Definition at line 666 of file TskData.java.

org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.FS =(0, "File System")

File that can be found in file system tree.

Definition at line 656 of file TskData.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.findFilesWhere(), and org.sleuthkit.datamodel.SleuthkitCase.resultSetToAbstractFiles().

org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.LOCAL =(3, "Local")

Local file that was added (not from a disk image)

Definition at line 659 of file TskData.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.addLocalFile(), org.sleuthkit.datamodel.LocalFile.getChildren(), org.sleuthkit.datamodel.LocalFile.getChildrenIds(), org.sleuthkit.datamodel.LocalFile.LocalFile(), and org.sleuthkit.datamodel.SleuthkitCase.resultSetToAbstractFiles().

final String org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.name

private

Definition at line 667 of file TskData.java.

org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.SLACK =(7, "Slack")

Slack space for a single file.

Definition at line 663 of file TskData.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.resultSetToAbstractFiles().

org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.UNALLOC_BLOCKS =(4, "Unallocated Blocks")

Set of blocks not allocated by file system. Parent should be image, volume, or file system. Many columns in tsk_files will be NULL. Set layout in tsk_file_layout.

Definition at line 660 of file TskData.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.addLayoutFiles(), and org.sleuthkit.datamodel.SleuthkitCase.resultSetToAbstractFiles().

org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.UNUSED_BLOCKS =(5, "Unused Blocks")

Set of blocks that are unallocated AND not used by a carved or other file type. Parent should be UNALLOC_BLOCKS, many columns in tsk_files will be NULL, set layout in tsk_file_layout.

Definition at line 661 of file TskData.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.resultSetToAbstractFiles().

org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.VIRTUAL_DIR =(6, "Virtual Directory")

Virtual directory (not on fs) with no meta-data entry that can be used to group files of types other than TSK_DB_FILES_TYPE_FS. Its parent is either another TSK_DB_FILES_TYPE_FS or a root directory or type TSK_DB_FILES_TYPE_FS.

Definition at line 662 of file TskData.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.addLocalFilesDataSource(), org.sleuthkit.datamodel.SleuthkitCase.addVirtualDirectory(), org.sleuthkit.datamodel.SleuthkitCase.getVirtualDirectoryRoots(), org.sleuthkit.datamodel.AbstractFile.isVirtual(), and org.sleuthkit.datamodel.SleuthkitCase.resultSetToAbstractFiles().

The documentation for this enum was generated from the following file:

/home/carriersleuth/repos/sleuthkit/bindings/java/src/org/sleuthkit/datamodel/TskData.java

Public Member Functions

Static Public Member Functions

Public Attributes

Private Member Functions

Private Attributes

Detailed Description

Constructor & Destructor Documentation

Member Function Documentation

Member Data Documentation