Code
Hub
Workspaces
Following
Trending
Connect
MCP
copy
Create free account
hub
/
github.com/DFIR-ORC/dfir-orc
/ functions
Functions
5,324 in github.com/DFIR-ORC/dfir-orc
⨍
Functions
5,324
◇
Types & classes
1,348
↓ 11 callers
Method
use
src/OrcLib/Buffer.h:770
↓ 10 callers
Method
CreationTime
src/OrcCommand/Command/WolfLauncher/WolfTask.h:63
↓ 10 callers
Method
DataSize
src/OrcLib/MftRecordAttribute.cpp:176
↓ 10 callers
Function
GetArchitectureName
src/OrcCapsule/Cmd/Architecture.cpp:28
↓ 10 callers
Method
GetRawPointer
Get a valid LPCWSTR pointer for Windows API calls
src/OrcCapsule/Cmd/CmdResource.cpp:619
↓ 10 callers
Method
HasPEHeader
src/OrcLib/PEInfo.cpp:72
↓ 10 callers
Function
HasValue
src/OrcCommand/Log/UtilitiesLoggerConfiguration.cpp:82
↓ 10 callers
Method
IsFAT32
src/OrcLib/Partition.cpp:54
↓ 10 callers
Method
MaxComponentLength
src/OrcLib/VolumeReader.h:36
↓ 10 callers
Method
ReadConfig
src/OrcLib/Configuration/ConfigFileReader.cpp:332
↓ 10 callers
Function
ReplaceInvalidChars
src/OrcLib/Unicode.h:40
↓ 10 callers
Function
RoR
src/OrcCapsule/Utilities/Crypto.cpp:28
↓ 10 callers
Method
SetBacktraceTrigger
src/OrcLib/Log/SpdlogLogger.h:46
↓ 10 callers
Method
SetSchema
src/OrcLib/CsvFileWriter.cpp:137
↓ 10 callers
Method
SizeOfCursor
src/OrcLib/CircularStorage.h:227
↓ 10 callers
Function
StartsWith
src/OrcCommand/Command/WolfLauncher/ConsoleConfiguration.cpp:114
↓ 10 callers
Function
ToolName
src/OrcCommand/Command/WolfLauncher/WolfLauncher.h:138
↓ 10 callers
Method
WriteFileSize
src/OrcLib/CsvFileWriter.cpp:564
↓ 10 callers
Method
view_of
src/OrcLib/Buffer.h:581
↓ 9 callers
Method
AddOnCompleteAction
src/OrcLib/CommandExecute.h:170
↓ 9 callers
Method
Description
src/OrcCommand/Command/FastFind/FastFind.h:129
↓ 9 callers
Method
DiskFreeSpaceRequirement
src/OrcCommand/Command/WolfLauncher/WolfExecution.h:169
↓ 9 callers
Function
ExpandEnvironmentStringsApi
src/OrcLib/Utils/WinApi.cpp:764
↓ 9 callers
Method
Find
src/OrcLib/RegFind.cpp:1892
↓ 9 callers
Method
Flags
src/OrcLib/Filesystem/Ntfs/ShadowCopy/DiffAreaTableEntry.h:41
↓ 9 callers
Method
GetDirectoryName
src/OrcLib/UnitTestHelper.cpp:28
↓ 9 callers
Method
GetMD5
src/OrcLib/BinaryBuffer.cpp:279
↓ 9 callers
Function
HasAnyFlag
src/OrcLib/Utils/EnumFlags.h:106
↓ 9 callers
Method
IsRecordInUse
src/OrcLib/MFTRecord.h:54
↓ 9 callers
Method
Read
tests/OrcLibTest/DiskExtentTest.cpp:28
↓ 9 callers
Function
ToHex
src/OrcLib/Text/Hex.h:154
↓ 9 callers
Function
ToOptional
src/OrcLib/Utils/Uri.cpp:39
↓ 9 callers
Function
ToStringIso8601
src/OrcLib/Utils/Time.cpp:80
↓ 9 callers
Method
Type
src/OrcLib/Filesystem/Ntfs/ShadowCopy/Node.h:43
↓ 9 callers
Method
WriteNamedFileTime
src/OrcLib/XmlOutputWriter.cpp:568
↓ 9 callers
Method
flush
src/OrcLib/Text/StdoutContainerAdapter.h:29
↓ 8 callers
Method
AddAttributeMatch
src/OrcLib/FileFind.cpp:187
↓ 8 callers
Method
AddLocationsFromConfigItem
src/OrcLib/LocationSet.cpp:1058
↓ 8 callers
Method
AttributeName
src/OrcLib/AttributeList.h:98
↓ 8 callers
Method
CloseAll
src/OrcCommand/UtilitiesMain.h:437
↓ 8 callers
Function
CreateScopeGuard
src/OrcLib/Utils/Guard.h:63
↓ 8 callers
Method
Detach
src/OrcLib/PropVariant.cpp:192
↓ 8 callers
Method
EnumerateLocations
src/OrcLib/LocationSet.cpp:713
↓ 8 callers
Method
FileSize
src/OrcLib/UploadNotification.h:80
↓ 8 callers
Method
GetCompressionLevel
src/OrcLib/ZipCreate.cpp:137
↓ 8 callers
Function
GetSubFormat
src/OrcLib/ParameterCheck.cpp:1462
↓ 8 callers
Method
GetType
src/OrcCommand/Command/WolfLauncher/Outcome.h:190
↓ 8 callers
Method
GrabBuffer
src/OrcLib/MemoryStream.cpp:462
↓ 8 callers
Method
IsParsed
src/OrcLib/MFTRecord.h:53
↓ 8 callers
Method
Match
src/OrcLib/RegFind.h:293
↓ 8 callers
Method
Offset
src/OrcLib/Filesystem/Ntfs/ShadowCopy/Node.h:45
↓ 8 callers
Method
OpenToRead
src/OrcLib/FuzzyHashStream.cpp:53
↓ 8 callers
Function
ParseHexByte
src/OrcLib/Text/Guid.h:92
↓ 8 callers
Method
Read
src/OrcLib/Stream/VolumeStreamReader.cpp:22
↓ 8 callers
Method
SetDataStream
src/OrcLib/DataDetails.h:58
↓ 8 callers
Method
SetMandatory
src/OrcCommand/Command/WolfLauncher/WolfExecution.h:240
↓ 8 callers
Method
SetOptional
src/OrcCommand/Command/WolfLauncher/WolfExecution.h:239
↓ 8 callers
Method
Sid
src/OrcLib/Utils/WinApi.cpp:36
↓ 8 callers
Method
WriteEnum
src/OrcLib/CsvFileWriter.cpp:612
↓ 7 callers
Method
AddArgument
src/OrcLib/CommandExecute.cpp:204
↓ 7 callers
Method
AddKnownLocations
src/OrcLib/LocationSet.cpp:1181
↓ 7 callers
Method
AddLocations
src/OrcLib/LocationSet.cpp:750
↓ 7 callers
Method
ArchiveTarget
src/OrcLib/CommandExecute.h:126
↓ 7 callers
Method
CanSeek
src/OrcLib/DiskChunkStream.cpp:178
↓ 7 callers
Method
DependsOnValueOrData
src/OrcLib/RegFind.h:169
↓ 7 callers
Function
FromFileTime
src/OrcLib/Utils/Time.cpp:33
↓ 7 callers
Function
GetCurrentProcessExecutable
src/OrcCapsule/Utilities/Process.cpp:183
↓ 7 callers
Method
GetHResult
src/OrcLib/UploadNotification.h:69
↓ 7 callers
Method
HasExtendedAttr
src/OrcLib/MFTRecord.h:69
↓ 7 callers
Method
IsFolder
src/OrcLib/FatFileEntry.h:37
↓ 7 callers
Method
IsOptional
src/OrcCommand/Command/WolfLauncher/WolfExecution.h:241
↓ 7 callers
Method
IsValid
src/OrcLib/Utils/Guard.h:181
↓ 7 callers
Function
LoadNtdll
src/OrcLib/Filesystem/Ntfs/Compression/Engine/Nt/NtApi.cpp:22
↓ 7 callers
Function
Print
src/OrcCommand/Text/Print/Recipient.cpp:19
↓ 7 callers
Method
ProcessHandle
src/OrcLib/CommandMessage.h:217
↓ 7 callers
Method
Put
Write a character.
src/OrcLib/JSONOutputWriter.h:36
↓ 7 callers
Method
Query
src/OrcLib/WMIUtil.cpp:209
↓ 7 callers
Method
Reset
src/OrcLib/LocationSet.cpp:2384
↓ 7 callers
Method
SerialNumber
src/OrcLib/Location.cpp:896
↓ 7 callers
Function
SetZstdParam
src/OrcCapsule/Utilities/Compression.cpp:39
↓ 7 callers
Function
ToString
src/OrcCommand/Command/WolfLauncher/Outcome.cpp:22
↓ 7 callers
Function
ToStringW
src/OrcLib/Text/Guid.cpp:123
↓ 7 callers
Function
TryParseGlobalOption
src/OrcCapsule/OrcCapsuleCli.cpp:152
↓ 7 callers
Method
Walk
src/OrcLib/MFTWalker.cpp:1868
↓ 6 callers
Method
Accept
src/OrcLib/SubStream.h:30
↓ 6 callers
Method
AddFile
src/OrcLib/DownloadTask.cpp:149
↓ 6 callers
Method
ChunkCount
src/OrcLib/Filesystem/Ntfs/Compression/WofChunks.h:42
↓ 6 callers
Method
Close
src/OrcLib/TemporaryStream.cpp:273
↓ 6 callers
Method
CloseOne
src/OrcCommand/UtilitiesMain.h:422
↓ 6 callers
Method
DataOffset
src/OrcLib/Filesystem/Ntfs/ShadowCopy/DiffAreaTableEntry.h:38
↓ 6 callers
Method
FillClusterChain
src/OrcLib/FatTable.h:59
↓ 6 callers
Method
Flush
src/OrcCommand/Console.h:87
↓ 6 callers
Method
GetAction
src/OrcLib/CommandExecute.h:110
↓ 6 callers
Function
GetBinaryBufferHeap
src/OrcLib/BinaryBuffer.cpp:25
↓ 6 callers
Method
GetDescription
src/OrcLib/FileFind.cpp:1027
↓ 6 callers
Method
GetDevice
src/OrcLib/EnumDisk.cpp:113
↓ 6 callers
Method
GetLength
src/OrcLib/DiskExtent.h:63
↓ 6 callers
Method
GetSHA256
src/OrcLib/CryptoHashStream.h:47
↓ 6 callers
Method
HashAvailable
src/OrcLib/DataDetails.h:152
↓ 6 callers
Method
IsUsed
src/OrcLib/FatTableEntry.h:49
← previous
next →
201–300 of 5,324, ranked by callers