Class UsnJournal

Information from the NTFS USN Journal.

Inheritance

object

UsnJournal

Implements

IMessage<UsnJournal>

IEquatable<UsnJournal>

IDeepCloneable<UsnJournal>

IBufferMessage

IMessage

Inherited Members

object.GetHashCode()

object.GetType()

object.ToString()

Namespace: Google.Backstory

Assembly: Google.Backstory.dll

Syntax

public sealed class UsnJournal : IMessage<UsnJournal>, IEquatable<UsnJournal>, IDeepCloneable<UsnJournal>, IBufferMessage, IMessage

Constructors

UsnJournal()

Declaration

public UsnJournal()

UsnJournal(UsnJournal)

Declaration

public UsnJournal(UsnJournal other)

Parameters

Type	Name	Description
UsnJournal	other

Properties

Allocated

Indicates whether the file is allocated in the Master File Table (MFT).

Declaration

public bool Allocated { get; set; }

Property Value

Type	Description
bool

Attributes

Deprecated: Use file_attributes instead. File attributes from the USN record.

Declaration

[Obsolete]
public UsnJournal.Types.Attribute Attributes { get; set; }

Property Value

Type	Description
UsnJournal.Types.Attribute

AttributesFlag

File attributes flags from the USN record (e.g., "0x20").

Declaration

public string AttributesFlag { get; set; }

Property Value

Type	Description
string

FileAttributes

File attributes from the USN record.

Declaration

public RepeatedField<UsnJournal.Types.Attribute> FileAttributes { get; }

Property Value

Type	Description
RepeatedField<UsnJournal.Types.Attribute>

Reason

Deprecated: Use reasons instead. Human-readable string describing the reason for the USN journal entry. (e.g., "USN_REASON_FILE_CREATE").

Declaration

[Obsolete]
public UsnJournal.Types.Reason Reason { get; set; }

Property Value

Type	Description
UsnJournal.Types.Reason

Reasons

Human-readable string describing the reasons for the USN journal entry (e.g., "USN_REASON_FILE_CREATE").

Declaration

public RepeatedField<UsnJournal.Types.Reason> Reasons { get; }

Property Value

Type	Description
RepeatedField<UsnJournal.Types.Reason>