Example #1
0
 def mft_altered_time(self):
     return reverse_hexlify_int(self.mft_altered_time_raw)
Example #2
0
 def file_reference_sequence_number(self):
     return reverse_hexlify_int(self.file_reference_number_raw[6:8])
Example #3
0
 def creation_time(self):
     return reverse_hexlify_int(self.creation_time_raw)
Example #4
0
 def __init__(self, data=None, offset_bytes=None):
     record_length = reverse_hexlify_int(data[0:4])
     self.data = data[0:record_length]
     self.offset_bytes = offset_bytes
     self.file_attributes_object = FileAttributesFlag(self.file_attributes)
Example #5
0
 def file_reference_mft_entry(self):
     return reverse_hexlify_int(self.file_reference_number_raw[0:6])
Example #6
0
 def maximum_number_of_versions(self):
     return reverse_hexlify_int(self.maximum_number_of_versions_raw)
Example #7
0
 def class_id(self):
     return reverse_hexlify_int(self.class_id_raw)
Example #8
0
 def source_info(self):
     return reverse_hexlify_int(self.source_info_raw)
Example #9
0
 def security_id(self):
     return reverse_hexlify_int(self.security_id_raw)
Example #10
0
 def timestamp(self):
     return reverse_hexlify_int(self.timestamp_raw)
Example #11
0
 def reason(self):
     return reverse_hexlify_int(self.reason_raw)
Example #12
0
 def usn(self):
     return reverse_hexlify_int(self.usn_raw)
Example #13
0
 def minor_version(self):
     return reverse_hexlify_int(self.minor_version_raw)
Example #14
0
 def record_length(self):
     return reverse_hexlify_int(self.record_length_raw)
Example #15
0
 def file_accessed_time(self):
     return reverse_hexlify_int(self.file_accessed_time_raw)
Example #16
0
 def file_attributes(self):
     return reverse_hexlify_int(self.file_attributes_raw)
Example #17
0
 def flags(self):
     return reverse_hexlify_int(self.flags_raw)
Example #18
0
 def file_name_length(self):
     return reverse_hexlify_int(self.file_name_length_raw)
Example #19
0
 def version_number(self):
     return reverse_hexlify_int(self.version_number_raw)
Example #20
0
 def file_name_offset(self):
     return reverse_hexlify_int(self.file_name_offset_raw)
Example #21
0
 def owner_id(self):
     return reverse_hexlify_int(self.owner_id_raw)
Example #22
0
 def __new__(cls, data, offset_bytes):
     major_version = reverse_hexlify_int(data[4:6])
     if major_version == 2:
         return UsnRecordV2(data, offset_bytes)