Skip to content
API Documentation
BastionGuard™
anonymous_namespace{ntfs_recovery.cpp}::NtfsFileRecordInfo Struct Reference

Public Attributes

uint64_t record_number {0}
uint64_t parent_record_number {0}
uint16_t parent_sequence_number {0}
uint16_t own_sequence_number {0}
bool in_use {false}
bool is_directory {false}
std::string name
bool deleted_candidate {false}
bool has_attribute_list {false}
bool has_reparse_point {false}
std::vector< unsigned char > reparse_data
std::map< std::string, NtfsDataStream > streams
std::vector< unsigned char > index_root_data
std::vector< NtfsDataRun > index_allocation_runs
uint32_t index_record_size {0}

Detailed Description

Definition at line 109 of file ntfs_recovery.cpp.

Member Data Documentation

◆ deleted_candidate

bool anonymous_namespace{ntfs_recovery.cpp}::NtfsFileRecordInfo::deleted_candidate {false}

Definition at line 123 of file ntfs_recovery.cpp.

Referenced by NtfsRecoveryImpl::recover().

◆ has_attribute_list

bool anonymous_namespace{ntfs_recovery.cpp}::NtfsFileRecordInfo::has_attribute_list {false}

Definition at line 124 of file ntfs_recovery.cpp.

Referenced by NtfsRecoveryImpl::process_attributes().

◆ has_reparse_point

bool anonymous_namespace{ntfs_recovery.cpp}::NtfsFileRecordInfo::has_reparse_point {false}

Definition at line 125 of file ntfs_recovery.cpp.

Referenced by NtfsRecoveryImpl::export_reparse_sidecar(), and NtfsRecoveryImpl::process_attributes().

◆ in_use

bool anonymous_namespace{ntfs_recovery.cpp}::NtfsFileRecordInfo::in_use {false}

Definition at line 120 of file ntfs_recovery.cpp.

Referenced by NtfsRecoveryImpl::process_attributes(), and NtfsRecoveryImpl::recover().

◆ index_allocation_runs

std::vector<NtfsDataRun> anonymous_namespace{ntfs_recovery.cpp}::NtfsFileRecordInfo::index_allocation_runs

Definition at line 140 of file ntfs_recovery.cpp.

Referenced by NtfsRecoveryImpl::process_attributes(), and NtfsRecoveryImpl::walk_i30().

◆ index_record_size

uint32_t anonymous_namespace{ntfs_recovery.cpp}::NtfsFileRecordInfo::index_record_size {0}

Definition at line 141 of file ntfs_recovery.cpp.

Referenced by NtfsRecoveryImpl::process_attributes(), and NtfsRecoveryImpl::walk_i30().

◆ index_root_data

std::vector<unsigned char> anonymous_namespace{ntfs_recovery.cpp}::NtfsFileRecordInfo::index_root_data

Definition at line 139 of file ntfs_recovery.cpp.

Referenced by NtfsRecoveryImpl::process_attributes(), and NtfsRecoveryImpl::walk_i30().

◆ is_directory

bool anonymous_namespace{ntfs_recovery.cpp}::NtfsFileRecordInfo::is_directory {false}

Definition at line 121 of file ntfs_recovery.cpp.

Referenced by NtfsRecoveryImpl::process_attributes(), and NtfsRecoveryImpl::scan_logfile().

◆ name

std::string anonymous_namespace{ntfs_recovery.cpp}::NtfsFileRecordInfo::name

Definition at line 122 of file ntfs_recovery.cpp.

Referenced by NtfsRecoveryImpl::export_usn_summary_if_needed(), NtfsRecoveryImpl::process_attributes(), NtfsRecoveryImpl::recover(), and NtfsRecoveryImpl::scan_logfile().

◆ own_sequence_number

uint16_t anonymous_namespace{ntfs_recovery.cpp}::NtfsFileRecordInfo::own_sequence_number {0}

Definition at line 119 of file ntfs_recovery.cpp.

Referenced by NtfsRecoveryImpl::process_attributes(), and NtfsRecoveryImpl::recover().

◆ parent_record_number

uint64_t anonymous_namespace{ntfs_recovery.cpp}::NtfsFileRecordInfo::parent_record_number {0}

Definition at line 111 of file ntfs_recovery.cpp.

Referenced by NtfsRecoveryImpl::process_attributes(), and NtfsRecoveryImpl::recover().

◆ parent_sequence_number

uint16_t anonymous_namespace{ntfs_recovery.cpp}::NtfsFileRecordInfo::parent_sequence_number {0}

Definition at line 115 of file ntfs_recovery.cpp.

Referenced by NtfsRecoveryImpl::process_attributes(), and NtfsRecoveryImpl::recover().

◆ record_number

uint64_t anonymous_namespace{ntfs_recovery.cpp}::NtfsFileRecordInfo::record_number {0}

Definition at line 110 of file ntfs_recovery.cpp.

Referenced by NtfsRecoveryImpl::recover(), NtfsRecoveryImpl::scan_logfile(), and NtfsRecoveryImpl::walk_i30().

◆ reparse_data

std::vector<unsigned char> anonymous_namespace{ntfs_recovery.cpp}::NtfsFileRecordInfo::reparse_data

Definition at line 126 of file ntfs_recovery.cpp.

Referenced by NtfsRecoveryImpl::export_reparse_sidecar(), and NtfsRecoveryImpl::process_attributes().

◆ streams

std::map<std::string, NtfsDataStream> anonymous_namespace{ntfs_recovery.cpp}::NtfsFileRecordInfo::streams

Definition at line 127 of file ntfs_recovery.cpp.

Referenced by NtfsRecoveryImpl::export_usn_summary_if_needed(), NtfsRecoveryImpl::parse_file_record(), NtfsRecoveryImpl::recover(), NtfsRecoveryImpl::scan_logfile(), and NtfsRecoveryImpl::stream_for().

The documentation for this struct was generated from the following file: