# The Sleuth Kit (Incomplete) File List

Here is a list of all documented files with brief descriptions:

src/auxtools/aux_tools.h [code] |
src/auxtools/data_buf.c | Contains functions to allocate and maintain the tsk_data_buf structures
src/auxtools/tsk_os.h [code] |
src/auxtools/tsk_parse.c | Contains code to parse specific types of data from the command line
src/auxtools/XGetopt.h [code] |
src/fstools/dcat_lib.c | Contains the library API functions used by the dcat command line tool
src/fstools/ext2fs.c | General ext2/ext3 file system functions
src/fstools/ext2fs.h [code] |
src/fstools/ext2fs_dent.c | File name walking / processing code for Ext2 / ext3
src/fstools/fatfs.c | FAT file system code to handle basic file system processing for opening file system, processing sectors, and directory entries
src/fstools/fatfs.h [code] |
src/fstools/fatfs_dent.c | FAT file name walking code
src/fstools/ffs.c | General UFS / FFS file system functions
src/fstools/ffs.h [code] |
src/fstools/ffs_dent.c | UFS/FFS file name (directory entry) processing / walking functions
src/fstools/fs_data.c | Functions to allocate and add structures to maintain generic file system attributes and run lists
src/fstools/fs_inode.c | Contains functions to allocate, free, and process the generic inode structures
src/fstools/fs_io.c | Contains functions to read data from a disk image and wrapper functions to read file content
src/fstools/fs_open.c | Contains the general code to open a file system -- this calls the file system -specific opening routines
src/fstools/fs_tools.h [code] |
src/fstools/fs_tools_i.h [code] |
src/fstools/hfs.h [code] |
src/fstools/iso9660.h [code] |
src/fstools/ntfs.c | Contains the general NTFS processing code
src/fstools/ntfs.h [code] |
src/fstools/ntfs_dent.c | NTFS file name walking / processing functions
src/hashtools/hashdb_tools.h [code] | Header file that defines internal data structures and functions
src/hashtools/hashdb_tools_i.h [code] | Header file that defines internal data structures and functions that are not exported for library use
src/hashtools/hfind.c | Command line tool to index and lookup values in a hash database
src/hashtools/hk_index.c | Contains functions to read and process hash keeper database files
src/hashtools/idxonly_index.c | Contains the dummy functions that are used when only an index is used for lookups and the original database is gone
src/hashtools/md5sum_index.c | Contains the MD5sum hash database specific extraction and printing routines
src/hashtools/nsrl_index.c | NSRL specific functions to read the database
src/hashtools/tm_lookup.c | Contains the generic hash database creation and lookup code
src/imgtools/aff.c | Code to interface with afflib to read and open AFF image files
src/imgtools/aff.h [code] |
src/imgtools/ewf.c | Code to interface with libewf to read / open EWF disk images
src/imgtools/ewf.h [code] |
src/imgtools/img_open.c | Contains the basic img_open function call, that interfaces with the format specific _open calls
src/imgtools/img_tools.h [code] | Contains the definitions for the disk image functions
src/imgtools/raw.c | Code to open and read single raw disk images
src/imgtools/raw.h [code] |
src/imgtools/split.c | Code to handle opening and reading of split raw disk images
src/imgtools/split.h [code] |
src/mmtools/bsd.h [code] |
src/mmtools/dos.h [code] |
src/mmtools/gpt.h [code] |
src/mmtools/mac.h [code] |
src/mmtools/mm_open.c | Contains general code to open media management systems
src/mmtools/mm_tools.h [code] | External header file for media management (volume system) support
src/mmtools/sun.h [code] |