Content Status - Revision history

Sam at 01:35, 18 November 2020

2020-11-18T01:35:08Z

Sam at 20:34, 18 June 2020

2020-06-18T20:34:46Z

Sam at 18:48, 20 May 2020

2020-05-20T18:48:40Z

Admin: Created page with "When Truxton processes the contents of a file, several things can happen. These defined constants represent the states of the contents of a file in Truxton. {| class="wikitab..."

2020-05-18T20:28:56Z

Created page with "When Truxton processes the contents of a file, several things can happen. These defined constants represent the states of the contents of a file in Truxton. {| class="wikitab..."

New page

When Truxton processes the contents of a file, several things can happen.
These defined constants represent the states of the contents of a file in Truxton.

{| class="wikitable"
! Name
! Value
! Meaning
|-
| <code>CONTENT_STATUS_UNKNOWN</code>
| style="text-align:center;" | 0
| We don't know what the status of the contents is.
|-
| <code>CONTENT_STATUS_ORIGINAL</code>
| style="text-align:center;" | 1
| The contents came from the source media.
|-
| <code>CONTENT_STATUS_VALID_DATA_LENGTH</code>
| style="text-align:center;" | 2
| In [https://en.wikipedia.org/wiki/NTFS NTFS], space for a file can be allocated on the filesystem but not yet written to. The [https://docs.microsoft.com/en-us/windows-hardware/drivers/ddi/content/ntddk/ns-ntddk-_file_valid_data_length_information Valid Data Length] is the offset into the file where the last byte was written.
|-
| <code>CONTENT_STATUS_SPARSE_COLLAPSED</code>
| style="text-align:center;" | 3
| The contents are the non-spare regions of the file.
|-
| <code>CONTENT_STATUS_ELIMINATED_BY_HASH</code>
| style="text-align:center;" | 4
| The contents were eliminated because the hash of the contents was found in a [[Hash Set|hash set]].
|-
| <code>CONTENT_STATUS_COPY_ELIMINATED</code>
| style="text-align:center;" | 5
| The contents are a copy of another file and therefore not stored.
|-
| <code>CONTENT_STATUS_NOT_EXPORTED</code>
| style="text-align:center;" | 6
| When importing media from another Truxton instance, the contents were not exported by that other instance of Truxton.
|-
| <code>CONTENT_STATUS_ELIMINATED_EMPTY</code>
| style="text-align:center;" | 7
| The file had an entropy of zero. Since it contains no information, the bytes were eliminated.
|-
| <code>CONTENT_STATUS_LENGTH_NEEDS_RECALCULATING</code>
| style="text-align:center;" | 99
| This value is used during carving to calculate file lengths that span freespace regions.
|}

@@ Line 2: / Line 2: @@
 These defined constants represent the state of the contents of a file in Truxton.
-This information is also kept in the <code>ContentStatus</code> database table.
+This information is also kept in the <code>[ContentStatus]</code> database table.
-It is used to set the <code>ContentStatusID</code> column of the <code>[[File Table | File]]</code> table.
+It is used to set the <code>[ContentStatusID]</code> column of the <code><nowiki>[</nowiki>[[File Table|File]]<nowiki>]</nowiki></code> table.
 {| class="wikitable"

@@ Line 1: / Line 1: @@
 When Truxton processes the contents of a file, several things can happen.
 These defined constants represent the states of the contents of a file in Truxton.
 {| class="wikitable"