Truxton enumeration get scope id

From truxwiki.com
Jump to navigation Jump to search

Retrieves the identifier of the scope of the enumeration.

Syntax

void truxton_enumeration_get_scope_id( uint64_t enumeration_handle, char * destination_string, size_t max_size );

Parameters

enumeration_handle

The handle returned by calling truxton_enumeration_create().

destination_string

The string to be written to.

max_size

The maximum number of characters that can be written to destination_string

Sample

void print_details( uint64_t enumerator )
{
   char uuid[40];

   uint64_t scope = truxton_enumeration_get_scope( enumerator );
   uint64_t target = truxton_enumeration_get_target( enumerator );

   truxton_enumeration_get_scope_id( enumerator, uuid, sizeof( uuid ) );

   printf( "%" PRIu64 " - %s - %" PRIu64 "\n", scope, scope_id, target );
}

void main( void )
{
    char investigation_name[256];

    truxton_start();

    uint64_t truxton = truxton_create();

    uint64_t enumerator = truxton_enumeration_create( truxton );

    truxton_enumeration_set_target( enumerator, Type_Investigation );

    uint64_t investigation_handle = truxton_enumeration_get_next( enumerator );

    uint64_t count = 0;

    print_details( enumerator );

    while( investigation_handle != 0 )
    {
        count++ 
        investigation_handle = truxton_enumeration_get_next( enumerator );
    }

    printf( "%" PRIu64 " investigations\n", count );

    truxton_enumeration_destroy( enumerator );
    truxton_destroy( truxton );
    truxton_stop();
}


The PRIu64 in the sample code above is a standard way of formatting a 64-bit unsigned integer in C. Over the years, different compilers on different operating systems used different format specifiers for things, these PRI macros, along with some tricky string concatenation the compilers perform for you, allow you to maintain a single code base without a bunch of macro magic.