Reference documentation and code samples for the Chronicle V1 API class Google::Backstory::UsnJournal.
Information from the NTFS USN Journal.
Inherits
- Object
Extended By
- Google::Protobuf::MessageExts::ClassMethods
Includes
- Google::Protobuf::MessageExts
Methods
#allocated
def allocated() -> ::Boolean
Returns
- (::Boolean) — Indicates whether the file is allocated in the Master File Table (MFT).
#allocated=
def allocated=(value) -> ::Boolean
Parameter
- value (::Boolean) — Indicates whether the file is allocated in the Master File Table (MFT).
Returns
- (::Boolean) — Indicates whether the file is allocated in the Master File Table (MFT).
#attributes
def attributes() -> ::Google::Backstory::UsnJournal::Attribute
Returns
- (::Google::Backstory::UsnJournal::Attribute) — Deprecated: Use file_attributes instead. File attributes from the USN record.
#attributes=
def attributes=(value) -> ::Google::Backstory::UsnJournal::Attribute
Parameter
- value (::Google::Backstory::UsnJournal::Attribute) — Deprecated: Use file_attributes instead. File attributes from the USN record.
Returns
- (::Google::Backstory::UsnJournal::Attribute) — Deprecated: Use file_attributes instead. File attributes from the USN record.
#attributes_flag
def attributes_flag() -> ::String
Returns
- (::String) — File attributes flags from the USN record (e.g., "0x20").
#attributes_flag=
def attributes_flag=(value) -> ::String
Parameter
- value (::String) — File attributes flags from the USN record (e.g., "0x20").
Returns
- (::String) — File attributes flags from the USN record (e.g., "0x20").
#file_attributes
def file_attributes() -> ::Array<::Google::Backstory::UsnJournal::Attribute>
Returns
- (::Array<::Google::Backstory::UsnJournal::Attribute>) — File attributes from the USN record.
#file_attributes=
def file_attributes=(value) -> ::Array<::Google::Backstory::UsnJournal::Attribute>
Parameter
- value (::Array<::Google::Backstory::UsnJournal::Attribute>) — File attributes from the USN record.
Returns
- (::Array<::Google::Backstory::UsnJournal::Attribute>) — File attributes from the USN record.
#reason
def reason() -> ::Google::Backstory::UsnJournal::Reason
Returns
- (::Google::Backstory::UsnJournal::Reason) — Deprecated: Use reasons instead. Human-readable string describing the reason for the USN journal entry. (e.g., "USN_REASON_FILE_CREATE").
#reason=
def reason=(value) -> ::Google::Backstory::UsnJournal::Reason
Parameter
- value (::Google::Backstory::UsnJournal::Reason) — Deprecated: Use reasons instead. Human-readable string describing the reason for the USN journal entry. (e.g., "USN_REASON_FILE_CREATE").
Returns
- (::Google::Backstory::UsnJournal::Reason) — Deprecated: Use reasons instead. Human-readable string describing the reason for the USN journal entry. (e.g., "USN_REASON_FILE_CREATE").
#reasons
def reasons() -> ::Array<::Google::Backstory::UsnJournal::Reason>
Returns
- (::Array<::Google::Backstory::UsnJournal::Reason>) — Human-readable string describing the reasons for the USN journal entry (e.g., "USN_REASON_FILE_CREATE").
#reasons=
def reasons=(value) -> ::Array<::Google::Backstory::UsnJournal::Reason>
Parameter
- value (::Array<::Google::Backstory::UsnJournal::Reason>) — Human-readable string describing the reasons for the USN journal entry (e.g., "USN_REASON_FILE_CREATE").
Returns
- (::Array<::Google::Backstory::UsnJournal::Reason>) — Human-readable string describing the reasons for the USN journal entry (e.g., "USN_REASON_FILE_CREATE").