File: DriveUtil.h

package info (click to toggle)
sleuthkit 4.12.1%2Bdfsg-3
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid, trixie
  • size: 18,608 kB
  • sloc: ansic: 143,795; cpp: 52,225; java: 37,892; xml: 2,416; python: 1,076; perl: 874; makefile: 439; sh: 184
file content (34 lines) | stat: -rw-r--r-- 1,001 bytes parent folder | download | duplicates (2)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
/*
** The Sleuth Kit
**
** Brian Carrier [carrier <at> sleuthkit [dot] org]
** Copyright (c) 2010-2019 Brian Carrier.  All Rights reserved
**
** This software is distributed under the Common Public License 1.0
**
*/

#pragma once

#include <string>

#include "tsk/libtsk.h"

/**
* Defines the Drive Utilities
*
*/
class DriveUtil {
public:
    static bool cwdIsFAT(std::wstring &cwd);
    static int isDriveLocked(const std::string &driveLetter);
    static bool hasBitLockerOrLDM(const std::string &systemDriveLetter);
    static BOOL getPhysicalDrives(std::vector<std::wstring> &phyiscalDrives);

private:
    static bool driveIsFAT(wchar_t *drive);
    static long wmi_init(const std::wstring& wmiNamespace, IWbemLocator **ppWbemLocator, IWbemServices **ppWbemServices);
    static int wmi_close(IWbemLocator **ppWbemLocator, IWbemServices **ppWbemServices);
    static int checkDriveForBitlocker(const std::string &driveLetter);
    static int checkDriveForLDM(const std::string &driveLetter);
};