vbr

package module
v1.1.3 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jun 3, 2020 License: MIT Imports: 5 Imported by: 2

README

CircleCI codecov Go Report Card GoDoc contributions welcome

VBR-Parser

This library can parse an NTFS volume boot record byte slice to pull out the necessary information to collect data from an NTFS volume.

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type RawVolumeBootRecord

type RawVolumeBootRecord []byte

RawVolumeBootRecord is a []byte alias containing bytes of a raw volume boot record. Used as a receiver for Parse().

func (RawVolumeBootRecord) Parse

func (rawVolumeBootRecord RawVolumeBootRecord) Parse() (vbr VolumeBootRecord, err error)

Parse parses a byte slice containing an NTFS volume boot record (VBR)

type VolumeBootRecord

type VolumeBootRecord struct {
	VolumeLetter           string
	BytesPerSector         int64
	SectorsPerCluster      int64
	BytesPerCluster        int64
	MftByteOffset          int64
	MftRecordSize          int64
	ClustersPerIndexRecord int64
}

VolumeBootRecord contains relevant data about an NTFS volume

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL