Difference between revisions of "Tsk loaddb"
From SleuthKitWiki
(Created page with "Back to Help Documents tsk_loaddb will save the image, volume, and file metadata to a SQLite database. The database can be used by other programs so that they can access in...") |
(Added link to v2 schema.) |
||
| Line 1: | Line 1: | ||
Back to [[Help Documents]] | Back to [[Help Documents]] | ||
| − | tsk_loaddb will save the image, volume, and file metadata to a SQLite database. The database can be used by other programs so that they can access information about the image without using all of the TSK methods | + | tsk_loaddb will save the image, volume, and file metadata to a SQLite database. The database can be used by other programs so that they can access information about the image without using all of the TSK methods. |
| − | * [http://www.sleuthkit.org/sleuthkit/man/tsk_loaddb.html Automatically Updated man Page] | + | There are two versions of the schema. |
| + | * Version 1 was released with TSK 3.2. Its schema was never officially documented, but you can figure it out by looking at the CREATE statements in [https://github.com/sleuthkit/sleuthkit/blob/sleuthkit-3.2/tsk3/auto/auto_db.cpp tsk3/auto/auto_db.cpp]. | ||
| + | * [[SQLite Database v2 Schema]] | ||
| + | |||
| + | |||
| + | |||
| + | [http://www.sleuthkit.org/sleuthkit/man/tsk_loaddb.html Automatically Updated man Page] | ||
Revision as of 12:47, 11 November 2011
Back to Help Documents
tsk_loaddb will save the image, volume, and file metadata to a SQLite database. The database can be used by other programs so that they can access information about the image without using all of the TSK methods.
There are two versions of the schema.
- Version 1 was released with TSK 3.2. Its schema was never officially documented, but you can figure it out by looking at the CREATE statements in tsk3/auto/auto_db.cpp.
- SQLite Database v2 Schema
