FilesystemProbes Class Reference

#include <filesystem_probes.hpp>

Static Public Member Functions
static std::vector< ScanResult >	analyze (DiskReader &reader, const std::vector< ScanResult > &seed_results, std::vector< std::string > &logs)

Detailed Description

Definition at line 9 of file filesystem_probes.hpp.

Member Function Documentation

analyze()

std::vector< ScanResult > FilesystemProbes::analyze ( DiskReader & reader, const std::vector< ScanResult > & seed_results, std::vector< std::string > & logs )

static

Definition at line 333 of file filesystem_probes.cpp.

                                                                              {
    std::vector<ScanResult> out;
    std::set<uint64_t> seen_offsets;
    logs.push_back(trs("Filesystem probes: analysis started."));
 
    for (const auto& seed : seed_results) {
        const bool interesting_seed =
            seed.kind == ResultKind::Partition ||
            seed.kind == ResultKind::LostPartitionCandidate ||
            seed.kind == ResultKind::FilesystemCandidate ||
            seed.kind == ResultKind::NtfsVolume;
        if (!interesting_seed || seen_offsets.count(seed.offset_bytes) != 0) {
            continue;
        }
        seen_offsets.insert(seed.offset_bytes);
 
        if (auto r = fat32_probe(reader, seed.offset_bytes); !r.type.empty()) out.push_back(r);
        if (auto r = exfat_probe(reader, seed.offset_bytes); !r.type.empty()) out.push_back(r);
        if (auto r = ext4_probe(reader, seed.offset_bytes); !r.type.empty()) out.push_back(r);
        if (auto r = btrfs_probe(reader, seed.offset_bytes); !r.type.empty()) out.push_back(r);
        if (auto r = xfs_probe(reader, seed.offset_bytes);   !r.type.empty()) out.push_back(r);
        if (auto r = hfs_probe(reader, seed.offset_bytes);   !r.type.empty()) out.push_back(r);
    }
 
    logs.push_back(trs("Filesystem probes: analysis completed."));
    return out;
}

References FilesystemCandidate, LostPartitionCandidate, NtfsVolume, Partition, and trs().

Referenced by ScannerEngine::run_scan().

---

The documentation for this class was generated from the following files:

• BastionGuard/thirdparty/bastionguard-recovery-data/src/filesystem_probes.hpp
• BastionGuard/thirdparty/bastionguard-recovery-data/src/filesystem_probes.cpp