Skip to content
API Documentation
BastionGuard™
carving.cpp File Reference

Go to the source code of this file.

Classes

struct  carving::anonymous_namespace{carving.cpp}::DetectResult
struct  carving::anonymous_namespace{carving.cpp}::CarverFormat

Namespaces

namespace  carving
namespace  carving::anonymous_namespace{carving.cpp}

Typedefs

using carving::anonymous_namespace{carving.cpp}::PeekMore

Functions

uint16_t carving::anonymous_namespace{carving.cpp}::le16 (const unsigned char *p)
uint32_t carving::anonymous_namespace{carving.cpp}::le32 (const unsigned char *p)
uint32_t carving::anonymous_namespace{carving.cpp}::be32 (const unsigned char *p)
uint64_t carving::anonymous_namespace{carving.cpp}::be64 (const unsigned char *p)
size_t carving::anonymous_namespace{carving.cpp}::find_pattern (const unsigned char *buf, size_t buf_len, const unsigned char *pat, size_t pat_len, size_t start=0)
DetectResult carving::anonymous_namespace{carving.cpp}::detect_jpeg (const unsigned char *window, size_t window_len, uint64_t file_disk_off, uint64_t max_file_size, PeekMore &peek_more)
DetectResult carving::anonymous_namespace{carving.cpp}::detect_png (const unsigned char *window, size_t window_len, uint64_t file_disk_off, uint64_t max_file_size, PeekMore &peek_more)
DetectResult carving::anonymous_namespace{carving.cpp}::detect_gif (const unsigned char *window, size_t window_len, uint64_t file_disk_off, uint64_t max_file_size, PeekMore &peek_more)
DetectResult carving::anonymous_namespace{carving.cpp}::detect_pdf (const unsigned char *window, size_t window_len, uint64_t file_disk_off, uint64_t max_file_size, PeekMore &peek_more)
DetectResult carving::anonymous_namespace{carving.cpp}::detect_zip (const unsigned char *window, size_t window_len, uint64_t file_disk_off, uint64_t max_file_size, PeekMore &peek_more)
DetectResult carving::anonymous_namespace{carving.cpp}::detect_bmp (const unsigned char *window, size_t window_len, uint64_t, uint64_t max_file_size, PeekMore &)
DetectResult carving::anonymous_namespace{carving.cpp}::detect_mp4 (const unsigned char *window, size_t window_len, uint64_t file_disk_off, uint64_t max_file_size, PeekMore &peek_more)
DetectResult carving::anonymous_namespace{carving.cpp}::detect_mp3_id3 (const unsigned char *window, size_t window_len, uint64_t, uint64_t max_file_size, PeekMore &)
DetectResult carving::anonymous_namespace{carving.cpp}::detect_mp3_frame (const unsigned char *window, size_t window_len, uint64_t, uint64_t max_file_size, PeekMore &)
DetectResult carving::anonymous_namespace{carving.cpp}::detect_ogg (const unsigned char *window, size_t window_len, uint64_t file_disk_off, uint64_t max_file_size, PeekMore &peek_more)
DetectResult carving::anonymous_namespace{carving.cpp}::detect_tiff (const unsigned char *window, size_t window_len, uint64_t, uint64_t max_file_size, PeekMore &)
DetectResult carving::anonymous_namespace{carving.cpp}::detect_ole (const unsigned char *window, size_t window_len, uint64_t, uint64_t max_file_size, PeekMore &)
DetectResult carving::anonymous_namespace{carving.cpp}::detect_riff (const unsigned char *window, size_t window_len, uint64_t, uint64_t max_file_size, PeekMore &)
DetectResult carving::anonymous_namespace{carving.cpp}::detect_mkv (const unsigned char *window, size_t window_len, uint64_t, uint64_t max_file_size, PeekMore &)
DetectResult carving::anonymous_namespace{carving.cpp}::detect_sqlite (const unsigned char *window, size_t window_len, uint64_t, uint64_t max_file_size, PeekMore &)
std::vector< CarverFormat > carving::anonymous_namespace{carving.cpp}::build_formats ()
bool carving::run_carving (DiskReader &reader, const std::string &output_dir, const CarvingOptions &opts, std::vector< RecoveredFileRecord > &recovered, std::vector< std::string > &logs, std::string &error)