Elepheye - Source - Filesystem

• Generate records from filesystem entries.

filesystem PATH ...

PATH ...

Full paths to filesystem entries.
The relative path is not allowed.
If the path is a file, also find its streams.
If the path is a directory, also find its streams and directory contents recursively.

filesystem C:\ D:\Dir

Directories.

filesystem C:\File.txt

A file.

filesystem C:\:Stream C:\Dir:Stream C:\File.txt:Stream

Streams.

filesystem \\Server\Shared

A remote directory.

filesystem \\Server\C$

A remote drive.

path

Full path to a filesystem entry in Unicode extended-length format.

attributes

Attributes in hexadecimal format with symbol names.

creation_time

Creation time in UTC, in ISO 8601 format.

last_access_time

Last access time in UTC, in ISO 8601 format. This field is disabled by default.

last_write_time

Last write time in UTC, in ISO 8601 format.

size

Size in bytes.

reparse_tag

Tag name of the reparse point.

reparse_path

Target path of the reparse point.

owner

Owner security information in SDDL format.

group

Group security information in SDDL format.

dacl

DACL security information in SDDL format.

sacl

SACL security information in SDDL format.

md5

MD5 checksum.

sha1

SHA1 checksum.

ignore_children

Stop to find streams and directory contents of the current record.

enable_last_access_time

Enable the last access time of the current record.