Skip to content
API Documentation
BastionGuard™
NtfsRecoveryImpl Member List

This is the complete list of members for NtfsRecoveryImpl, including all inherited members.

apply_fixup(std::vector< unsigned char > &record, std::string &error)NtfsRecoveryImplinlineprivate
build_relative_path(uint64_t record_number, const std::map< uint64_t, NtfsFileRecordInfo > &records)NtfsRecoveryImplinlineprivate
cluster_to_offset(uint64_t cluster) constNtfsRecoveryImplinlineprivate
decode_compressed_stream(const NtfsDataStream &stream, std::vector< unsigned char > &out, std::string &error)NtfsRecoveryImplinlineprivate
export_reparse_sidecar(const NtfsFileRecordInfo &info, const fs::path &base_path, std::vector< RecoveredFileRecord > &recovered, std::vector< std::string > &logs)NtfsRecoveryImplinlineprivate
export_stream(const NtfsDataStream &stream, const fs::path &out_path, std::string &error)NtfsRecoveryImplinlineprivate
export_usn_summary_if_needed(const NtfsFileRecordInfo &info, const fs::path &base_path, std::vector< RecoveredFileRecord > &recovered, std::vector< std::string > &logs)NtfsRecoveryImplinlineprivate
kLogPageMagicRCRDNtfsRecoveryImplprivatestatic
kLogPageMagicRSTRNtfsRecoveryImplprivatestatic
kRedoOpInitFileRecordNtfsRecoveryImplprivatestatic
load_attribute_list_extensions(uint64_t base_record_number, NtfsFileRecordInfo &info, const std::vector< NtfsAttributeListEntry > &attr_list, std::string &error)NtfsRecoveryImplinlineprivate
merge_runs(std::vector< NtfsDataRun > &dst, const std::vector< NtfsDataRun > &src)NtfsRecoveryImplinlineprivatestatic
mft_ranges_NtfsRecoveryImplprivate
mftmirr_ranges_NtfsRecoveryImplprivate
NtfsRecoveryImpl(DiskReader &reader)NtfsRecoveryImplinlineexplicit
output_path_for_stream(const fs::path &base, const std::string &stream_name)NtfsRecoveryImplinlineprivate
parse_attribute_list_entries(const unsigned char *value, uint32_t value_len, std::vector< NtfsAttributeListEntry > &out)NtfsRecoveryImplinlineprivate
parse_file_record(uint64_t record_number, const std::vector< unsigned char > &record, NtfsFileRecordInfo &info, std::string &error)NtfsRecoveryImplinlineprivate
parse_index_entries(const unsigned char *entries_data, size_t total_size, std::vector< I30Entry > &out)NtfsRecoveryImplinlineprivate
parse_runlist(const unsigned char *runlist, size_t max_len, uint64_t start_vcn, bool &has_sparse, bool &malformed)NtfsRecoveryImplinlineprivate
process_attributes(uint64_t base_record_number, const std::vector< unsigned char > &record, NtfsFileRecordInfo &info, std::vector< NtfsAttributeListEntry > &attr_list, std::string &error)NtfsRecoveryImplinlineprivate
read_boot_sector(uint64_t volume_offset, std::string &error)NtfsRecoveryImplinlineprivate
read_indx_block(const std::vector< NtfsDataRun > &runs, uint64_t vcn, uint32_t irs, std::vector< unsigned char > &out, std::string &error)NtfsRecoveryImplinlineprivate
read_mft_record(uint64_t record_number, std::vector< unsigned char > &out, std::string &error)NtfsRecoveryImplinlineprivate
read_mft_record_from_mirror(uint64_t record_number, std::vector< unsigned char > &out, std::string &error)NtfsRecoveryImplinlineprivate
read_raw_record(uint64_t record_number, std::vector< unsigned char > &out, std::string &error)NtfsRecoveryImplinlineprivate
read_runs_to_buffer(const std::vector< NtfsDataRun > &runs, uint64_t expected_size, std::vector< unsigned char > &out, std::string &error)NtfsRecoveryImplinlineprivate
read_stream_data(const NtfsDataStream &stream, std::vector< unsigned char > &data, std::string &error)NtfsRecoveryImplinlineprivate
reader_NtfsRecoveryImplprivate
recover(uint64_t volume_offset, const std::string &output_dir, std::vector< RecoveredFileRecord > &recovered, std::vector< std::string > &logs, std::string &error)NtfsRecoveryImplinline
scan_logfile(const fs::path &out_root, const std::map< uint64_t, NtfsFileRecordInfo > &live_records, std::vector< RecoveredFileRecord > &recovered, std::vector< std::string > &logs)NtfsRecoveryImplinlineprivate
stream_exportable(const NtfsDataStream &stream) constNtfsRecoveryImplinlineprivate
stream_for(NtfsFileRecordInfo &info, const std::string &name)NtfsRecoveryImplinlineprivate
unique_path(const fs::path &candidate)NtfsRecoveryImplinlineprivate
volume_NtfsRecoveryImplprivate
walk_i30(const NtfsFileRecordInfo &dir_info, std::vector< I30Entry > &out_entries, std::vector< std::string > &logs)NtfsRecoveryImplinlineprivate
write_usn_reason_flags(std::ostream &out, uint32_t reason)NtfsRecoveryImplinlineprivate