File Name,
Size,
Hash,
Full Path
ETC.............
BookmarkClass
Name | Return Type | Declaration |
---|---|---|
BookmarkClass | void | BookmarkClass (BookmarkClass parent=null, const String &Name="", uint Options=0) |
- BookmarkClass -
parent - The parent folder for this node
Name - Name
Options - 32-bit unsigned integer
ItemIteratorClass
Name | Return Type | Declaration |
---|---|---|
ItemIteratorClass | ItemIteratorClass | ItemIteratorClass () |
ItemIteratorClass | ItemIteratorClass | ItemIteratorClass (CaseClass _case, uint Options=0, IterateModes mode=ItemIteratorClass::ALL, const String &Name="") |
ItemIteratorClass | ItemIteratorClass | ItemIteratorClass (DeviceClass Device, uint Options=0) |
- ItemIteratorClass -
_case - Contains global case data
Options - NORECURSE | OMITROOT | PROMPT | NOPROXY | NOEPRECORDS
mode -
Name - Name
Device - A sector device. Use this to access the device attributes
Options - NORECURSE | OMITROOT | PROMPT | NOPROXY | NOEPRECORDS
EntryClass
Name | Return Type | Declaration |
---|---|---|
Compare | int | const Compare (const String &Text, uint Options=0) |
Contains | bool | const Contains (const String &Expression) |
Name | string | static File Name (const String & Name) |
- Compare -
Returns < 0 if value is lexically less than, 0 if equal, > 0 if greater
Arguments:
Text - Input string
Options - CASE
- Contain -
Returns true if text is contained in this string
Arguments:
Expression - Search Expression
- Name -
Format string with argument
Arguments:
Format - File Name string
When you test this code, you must select items as picture.
I brought it from EnCase Help page.
########################### Code and Result ###########################
Black : Code
Picture : Result
#######################################################################
//Recurse all entries and bookmark entries named 'win.ini' class MainClass; class MainClass { bool good; void Main(CaseClass c) { BookmarkClass folder(c.BookmarkRoot(), "EntryClass Example 1", NodeClass::FOLDER); for(ItemIteratorClass i(c); EntryClass e = i.GetNextEntry();) { if (e.Name() == "win.ini") { BookmarkClass newMark(folder); newMark.CopyItemData(e); newMark.SetComment("Bookmarked win.ini"); good = true; } } if (good) Console.WriteLine("Worked"); else Console.WriteLine("Does not work"); } } |
No comments:
Post a Comment