Chronicle V1 API - Module Google::Backstory::UsnJournal::Attribute (v1.4.0)

Reference documentation and code samples for the Chronicle V1 API module Google::Backstory::UsnJournal::Attribute.

File attributes from the USN record (e.g., "READ_ONLY, HIDDEN"). See https://learn.microsoft.com/en-us/windows/win32/fileio/file-attribute-constants for more information about the attributes.

Constants

ATTRIBUTE_UNSPECIFIED

value: 0
Unspecified attribute.

READ_ONLY

value: 1
A file that is read-only.

HIDDEN

value: 2
The file or directory is hidden.

SYSTEM

value: 3
A file or directory that the operating system uses.

ARCHIVE

value: 4
Archive file or directory.

COMPRESSED

value: 5
A file or directory that is compressed.

ENCRYPTED

value: 6
A file or directory that is encrypted.

DIRECTORY

value: 7
The handle that identifies the directory.

DEVICE

value: 8
Reserved for system use.

NORMAL

value: 9
A file that does not have other attributes set.

TEMPORARY

value: 10
A file that is being used for temporary storage.

SPARSE_FILE

value: 11
A file that is a sparse file.

REPARSE_POINT

value: 12
A file or directory that has an associated reparse point.

OFFLINE

value: 13
The data of a file is not available immediately.

NOT_CONTENT_INDEXED

value: 14
The file or directory is not to be indexed.

NON_CONTENT_INDEXED

value: 14
Deprecated: Use NOT_CONTENT_INDEXED instead.

INTEGRITY_STREAM

value: 15
The directory or user data stream is configured with integrity.

VIRTUAL

value: 16
Reserved for system use.

NO_SCRUB_DATA

value: 17
The user data stream not to be read by the background data integrity scanner.

EA

value: 18
A file or directory with extended attributes.

PINNED

value: 19
The file or directory should be kept fully present locally.

UNPINNED

value: 20
The file or directory should not be kept fully present locally.

RECALL_ON_OPEN

value: 21
The file or directory has no physical representation on the local system.

RECALL_ON_DATA_ACCESS

value: 22
The file or directory is not fully present locally.