Interface NtfsFileMetadataOrBuilder (0.3.0)

public interface NtfsFileMetadataOrBuilder extends MessageOrBuilder

Implements

MessageOrBuilder

Methods

getChangeTime()

public abstract Timestamp getChangeTime()

NTFS MFT entry changed timestamp.

.google.protobuf.Timestamp change_time = 1;

Returns
Type Description
Timestamp

The changeTime.

getChangeTimeOrBuilder()

public abstract TimestampOrBuilder getChangeTimeOrBuilder()

NTFS MFT entry changed timestamp.

.google.protobuf.Timestamp change_time = 1;

Returns
Type Description
TimestampOrBuilder

getFilenameAccessTime()

public abstract Timestamp getFilenameAccessTime()

NTFS $FILE_NAME attribute accessed timestamp.

.google.protobuf.Timestamp filename_access_time = 4;

Returns
Type Description
Timestamp

The filenameAccessTime.

getFilenameAccessTimeOrBuilder()

public abstract TimestampOrBuilder getFilenameAccessTimeOrBuilder()

NTFS $FILE_NAME attribute accessed timestamp.

.google.protobuf.Timestamp filename_access_time = 4;

Returns
Type Description
TimestampOrBuilder

getFilenameChangeTime()

public abstract Timestamp getFilenameChangeTime()

NTFS $FILE_NAME attribute changed timestamp.

.google.protobuf.Timestamp filename_change_time = 5;

Returns
Type Description
Timestamp

The filenameChangeTime.

getFilenameChangeTimeOrBuilder()

public abstract TimestampOrBuilder getFilenameChangeTimeOrBuilder()

NTFS $FILE_NAME attribute changed timestamp.

.google.protobuf.Timestamp filename_change_time = 5;

Returns
Type Description
TimestampOrBuilder

getFilenameCreateTime()

public abstract Timestamp getFilenameCreateTime()

NTFS $FILE_NAME attribute created timestamp.

.google.protobuf.Timestamp filename_create_time = 2;

Returns
Type Description
Timestamp

The filenameCreateTime.

getFilenameCreateTimeOrBuilder()

public abstract TimestampOrBuilder getFilenameCreateTimeOrBuilder()

NTFS $FILE_NAME attribute created timestamp.

.google.protobuf.Timestamp filename_create_time = 2;

Returns
Type Description
TimestampOrBuilder

getFilenameModifyTime()

public abstract Timestamp getFilenameModifyTime()

NTFS $FILE_NAME attribute modified timestamp.

.google.protobuf.Timestamp filename_modify_time = 3;

Returns
Type Description
Timestamp

The filenameModifyTime.

getFilenameModifyTimeOrBuilder()

public abstract TimestampOrBuilder getFilenameModifyTimeOrBuilder()

NTFS $FILE_NAME attribute modified timestamp.

.google.protobuf.Timestamp filename_modify_time = 3;

Returns
Type Description
TimestampOrBuilder

getUsnJournal(int index)

public abstract UsnJournal getUsnJournal(int index)

NTFS USN journal.

repeated .google.backstory.UsnJournal usn_journal = 6;

Parameter
Name Description
index int
Returns
Type Description
UsnJournal

getUsnJournalCount()

public abstract int getUsnJournalCount()

NTFS USN journal.

repeated .google.backstory.UsnJournal usn_journal = 6;

Returns
Type Description
int

getUsnJournalList()

public abstract List<UsnJournal> getUsnJournalList()

NTFS USN journal.

repeated .google.backstory.UsnJournal usn_journal = 6;

Returns
Type Description
List<UsnJournal>

getUsnJournalOrBuilder(int index)

public abstract UsnJournalOrBuilder getUsnJournalOrBuilder(int index)

NTFS USN journal.

repeated .google.backstory.UsnJournal usn_journal = 6;

Parameter
Name Description
index int
Returns
Type Description
UsnJournalOrBuilder

getUsnJournalOrBuilderList()

public abstract List<? extends UsnJournalOrBuilder> getUsnJournalOrBuilderList()

NTFS USN journal.

repeated .google.backstory.UsnJournal usn_journal = 6;

Returns
Type Description
List<? extends com.google.backstory.UsnJournalOrBuilder>

hasChangeTime()

public abstract boolean hasChangeTime()

NTFS MFT entry changed timestamp.

.google.protobuf.Timestamp change_time = 1;

Returns
Type Description
boolean

Whether the changeTime field is set.

hasFilenameAccessTime()

public abstract boolean hasFilenameAccessTime()

NTFS $FILE_NAME attribute accessed timestamp.

.google.protobuf.Timestamp filename_access_time = 4;

Returns
Type Description
boolean

Whether the filenameAccessTime field is set.

hasFilenameChangeTime()

public abstract boolean hasFilenameChangeTime()

NTFS $FILE_NAME attribute changed timestamp.

.google.protobuf.Timestamp filename_change_time = 5;

Returns
Type Description
boolean

Whether the filenameChangeTime field is set.

hasFilenameCreateTime()

public abstract boolean hasFilenameCreateTime()

NTFS $FILE_NAME attribute created timestamp.

.google.protobuf.Timestamp filename_create_time = 2;

Returns
Type Description
boolean

Whether the filenameCreateTime field is set.

hasFilenameModifyTime()

public abstract boolean hasFilenameModifyTime()

NTFS $FILE_NAME attribute modified timestamp.

.google.protobuf.Timestamp filename_modify_time = 3;

Returns
Type Description
boolean

Whether the filenameModifyTime field is set.