#include "hashdb_tools_i.h"
Defines | |
#define | is_valid_nsrl(x) |
Perform a basic check on a string to see if it starts with quotes and contains a possible SHA-1 value. | |
Typedefs | |
typedef enum TSK_HDB_NSRL_FORM_ENUM | TSK_HDB_NSRL_FORM_ENUM |
Enumerations | |
enum | TSK_HDB_NSRL_FORM_ENUM { TSK_HDB_NSRL_FORM1 = (1 << 0), TSK_HDB_NSRL_FORM2 = (1 << 1) } |
Version of NSRL Database. More... | |
Functions | |
uint8_t | nsrl_test (FILE *hFile) |
Test the file to see if it is an NSRL database. | |
uint8_t | nsrl_makeindex (TSK_HDB_INFO *hdb_info, TSK_TCHAR *dbtype) |
Process the database to create a sorted index of it. | |
uint8_t | nsrl_getentry (TSK_HDB_INFO *hdb_info, char *hash, OFF_T offset, TSK_HDB_FLAG_ENUM flags, TSK_HDB_LOOKUP_FN action, void *cb_ptr) |
Find the corresponding name at a given offset. |
|
Value: ( (strlen((x)) > TSK_HDB_HTYPE_SHA1_LEN + 4) && \ ((x)[0] == '"') && ((x)[TSK_HDB_HTYPE_SHA1_LEN + 1] == '"') && \ ((x)[TSK_HDB_HTYPE_SHA1_LEN + 2] == ',') && ((x)[TSK_HDB_HTYPE_SHA1_LEN + 3] == '"') )
|
|
Version of NSRL Database.
|
|
Find the corresponding name at a given offset. The offset was likely determined from the index. The entries in the DB following the one specified are also processed if they have the same hash value and their name is different. The callback is called for each entry.
|
|
Process the database to create a sorted index of it. Consecutive entries with the same hash value are not added to the index, but will be found during lookup.
|
|
Test the file to see if it is an NSRL database.
|