GoFor_VBR_Parser

package module
v1.0.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Oct 9, 2019 License: MPL-2.0 Imports: 5 Imported by: 0

README

CircleCI codecov GoDoc contributions welcome

GoFor-VBR-Parser

This library can parse an NTFS volume boot record byte slice to pull out the necessary information to collect data from an NTFS volume.

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type RawVolumeBootRecord

type RawVolumeBootRecord []byte

[]byte alias containing bytes of a raw volume boot record. Used as a receiver for Parse().

func (RawVolumeBootRecord) Parse

func (rawVolumeBootRecord RawVolumeBootRecord) Parse() (vbr VolumeBootRecord, err error)

Parses a byte slice containing an NTFS volume boot record (VBR)

type VolumeBootRecord

type VolumeBootRecord struct {
	VolumeLetter           string
	BytesPerSector         int64
	SectorsPerCluster      int64
	BytesPerCluster        int64
	MftByteOffset          int64
	MftRecordSize          int64
	ClustersPerIndexRecord int64
}

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL