Difference between revisions of "Truxton artifact set offset"
Jump to navigation
Jump to search
(Created page with "This records the offset into the object where the artifact was found. This corresponds to the <code>[Offset]</code> column of the <code><nowiki>[</nowiki>Entity Table|Entity...") |
|||
| Line 1: | Line 1: | ||
This records the offset into the object where the artifact was found. | This records the offset into the object where the artifact was found. | ||
| − | + | ||
=Syntax= | =Syntax= | ||
<source lang="C"> | <source lang="C"> | ||
| − | void | + | void truxton_artifact_set_value( uint64_t artifact_handle, char const * value ); |
</source> | </source> | ||
| Line 11: | Line 11: | ||
This handle comes from calling <code>[[truxton_artifact_create]]()</code>. | This handle comes from calling <code>[[truxton_artifact_create]]()</code>. | ||
| − | ==<code> | + | ==<code>value</code>== |
| − | The | + | The string representation of the artifact. |
=Sample= | =Sample= | ||
This sample supposes you are a file expander that knows a user's pin code is optionally stored at a fixed location in the file. | This sample supposes you are a file expander that knows a user's pin code is optionally stored at a fixed location in the file. | ||
| − | <source lang="C" highlight=" | + | <source lang="C" line highlight="26"> |
void expand_file(uint64_t file_handle) | void expand_file(uint64_t file_handle) | ||
{ | { | ||
Revision as of 07:43, 9 November 2020
This records the offset into the object where the artifact was found.
Syntax
void truxton_artifact_set_value( uint64_t artifact_handle, char const * value );
Parameters
artifact_handle
The artifact instance.
This handle comes from calling truxton_artifact_create().
value
The string representation of the artifact.
Sample
This sample supposes you are a file expander that knows a user's pin code is optionally stored at a fixed location in the file.
1 void expand_file(uint64_t file_handle)
2 {
3 char pin_code[5];
4
5 pin_code[0] = ' ';
6 pin_code[1] = ' ';
7 pin_code[2] = ' ';
8 pin_code[3] = ' ';
9 pin_code[4] = 0x00;
10
11 truxton_file_seek( file_handle, 3772, SEEK_SET );
12
13 if ( truxton_file_read( file_handle, pin_code, 4 ) == 4 )
14 {
15 if ( isdigit(pin_code[0]) &&
16 isdigit(pin_code[1]) &&
17 isdigit(pin_code[2]) &&
18 isdigit(pin_code[3]) )
19 {
20 uint64_t artifact = truxton_file_create_artifact(file_handle);
21
22 truxton_artifact_set_name( artifact, "PIN Code" );
23 truxton_artifact_set_data_type( artifact, DATA_TYPE_ASCII );
24 truxton_artifact_set_offset( artifact, 3772 );
25 truxton_artifact_set_length( artifact, 4 );
26 truxton_artifact_set_value( artifact, pin_code );
27 truxton_artifact_set_type( artifact, ENTITY_TYPE_PASSWORD );
28
29 if ( truxton_artifact_save( artifact ) != 0 )
30 {
31 char id[ 50 ];
32
33 truxton_artifact_get_id( artifact, id, sizeof( id ) );
34
35 printf( "Artifact saved as ID %s\n", id );
36 }
37 else
38 {
39 printf( "Could not save artifact\n" );
40 {
41
42 truxton_artifact_destroy( artifact );
43 }
44 }
45 }
