ntfs

Documentation

Index

• func GetMFTEntry(ntfsCtx *parser.NTFSContext, filename string) (*parser.MFT_ENTRY, error)
• type NTFS
  • func New(r io.ReaderAt) (*NTFS, error)
  • func (*NTFS) Name() (name string)
  • func (fs *NTFS) Open(name string) (item forensicfs.ForensicItem, err error)
• type NTFSItem
  • func (i *NTFSItem) Attributes() (attrs map[string]interface{})
  • func (i *NTFSItem) IsDir() bool
  • func (i *NTFSItem) Name() (name string)
  • func (i *NTFSItem) Read(p []byte) (n int, err error)
  • func (i *NTFSItem) ReadAt(p []byte, off int64) (n int, err error)
  • func (i *NTFSItem) Readdirnames(n int) (items []string, err error)
  • func (i *NTFSItem) Seek(pos int64, whence int) (offset int64, err error)
  • func (i *NTFSItem) Size() int64

Functions

func GetMFTEntry

func GetMFTEntry(ntfsCtx *parser.NTFSContext, filename string) (*parser.MFT_ENTRY, error)

Types

type NTFS

type NTFS struct {
	// contains filtered or unexported fields
}

func New

func New(r io.ReaderAt) (*NTFS, error)

func (*NTFS) Name

func (*NTFS) Name() (name string)

func (*NTFS) Open

func (fs *NTFS) Open(name string) (item forensicfs.ForensicItem, err error)

type NTFSItem

type NTFSItem struct {
	// contains filtered or unexported fields
}

func (*NTFSItem) Attributes

func (i *NTFSItem) Attributes() (attrs map[string]interface{})

func (*NTFSItem) IsDir

func (i *NTFSItem) IsDir() bool

func (*NTFSItem) Name

func (i *NTFSItem) Name() (name string)

func (*NTFSItem) Read

func (i *NTFSItem) Read(p []byte) (n int, err error)

func (*NTFSItem) ReadAt

func (i *NTFSItem) ReadAt(p []byte, off int64) (n int, err error)

func (*NTFSItem) Readdirnames

func (i *NTFSItem) Readdirnames(n int) (items []string, err error)

func (*NTFSItem) Seek

func (i *NTFSItem) Seek(pos int64, whence int) (offset int64, err error)

func (*NTFSItem) Size

func (i *NTFSItem) Size() int64