C Volume System Functions
Function Documentation
void tsk_vs_close
void tsk_vs_close ( TSK_VS_INFO * a_vs )
tsk_vs_open
TSK_VS_INFO* tsk_vs_open ( TSK_IMG_INFO * img_info,
TSK_DADDR_T offset,
TSK_VS_TYPE_ENUM type
)
tsk_vs_part_get
const TSK_VS_PART_INFO* tsk_vs_part_get ( const TSK_VS_INFO * a_vs,
TSK_PNUM_T a_idx
)
tsk_vs_part_read
ssize_t tsk_vs_part_read ( const TSK_VS_PART_INFO * a_vs_part,
TSK_OFF_T a_off,
char * a_buf,
size_t a_len
)
)
tsk_vs_part_read_block
ssize_t tsk_vs_part_read_block ( const TSK_VS_PART_INFO * a_vs_part,
TSK_DADDR_T a_addr,
char * a_buf,
size_t a_len
)
tsk_vs_read_block
uint8_t tsk_vs_part_walk ( TSK_VS_INFO * a_vs,
TSK_PNUM_T a_start,
TSK_PNUM_T a_last,
TSK_VS_PART_FLAG_ENUM a_flags,
TSK_VS_PART_WALK_CB a_action,
void * a_ptr
)
tsk_vs_type_print
void tsk_vs_type_print ( FILE * hFile )
tsk_vs_type_supported
TSK_VS_TYPE_ENUM tsk_vs_type_supported ( )
tsk_vs_type_todesc
const char* tsk_vs_type_todesc ( TSK_VS_TYPE_ENUM type )
tsk_vs_type_toid
TSK_VS_TYPE_ENUM tsk_vs_type_toid ( const TSK_TCHAR * str )
tsk_vs_type_toid_utf8
TSK_VS_TYPE_ENUM tsk_vs_type_toid_utf8 ( const char * str )
tsk_vs_type_toname
const char* tsk_vs_type_toname ( TSK_VS_TYPE_ENUM type )
Sleuth Kit中文使用教程
推薦文章: