Difference between revisions of "Truxton child file set accessed"
Jump to navigation
Jump to search
| Line 12: | Line 12: | ||
==<code>ticks</code>== | ==<code>ticks</code>== | ||
| − | The date in [https://docs.microsoft.com/en-us/windows/win32/api/minwinbase/ns-minwinbase-filetime FILETIME] ticks. | + | The date and time in [https://docs.microsoft.com/en-us/windows/win32/api/minwinbase/ns-minwinbase-filetime FILETIME] ticks. |
=Sample= | =Sample= | ||
Revision as of 18:48, 18 January 2021
Sets the last accessed date of the file.
This corresponds to the [LastAccess] column of the [File] table.
Syntax
void truxton_child_file_set_accessed( uint64_t child_handle, uint64_t ticks );
Parameters
child_handle
The handle created by the truxton_child_file_create or truxton_file_create_child call.
ticks
The date and time in FILETIME ticks.
Sample
void add_folder(uint64_t truxton, uint64_t parent_file)
{
truxton_start_adding_files(truxton);
uint64_t child = truxton_child_file_create(truxton);
char id[40];
truxton_file_get_id(parent_file, id, sizeof(id));
truxton_child_file_set_parent_id(child, id);
truxton_child_file_set_type(child, Type_Directory);
truxton_child_file_set_name(child, "Custom Exploits Folder");
FILETIME now;
GetSystemTimePreciseAsFileTime(&now);
ULARGE_INTEGER ticks;
ticks.LowPart = now.dwLowDateTime;
ticks.HighPart = now.dwHighDateTime;
truxton_child_file_set_created(child, ticks.QuadPart);
truxton_child_file_set_accessed(child, ticks.QuadPart);
truxton_child_file_set_modified(child, ticks.QuadPart);
truxton_child_file_set_origin(child, ORIGIN_GENERATED);
truxton_child_file_set_path(child, "Files/This File" );
if ( truxton_child_file_save(child) == 0 )
{
printf( "Failed to add child to Truxton\n" );
}
truxton_child_file_destroy(child);
}