OrcCommand: NTFSInfo: add column 'ShadowCopyId' to volstats.csv

Author: fabienfl-orc

src/OrcCommand/Command/FatInfo/FatInfoSqlSchema.xml

@@ -78,6 +78,7 @@
     </enum>
     <bool name="Parse" />
     <utf16  name="MountPoint" maxlen="256" />
+    <utf16  name="ShadowCopyId" maxlen="256" />
   </table>
 
 </sqlschema>

src/OrcCommand/Command/GetThis/GetThis_Run.cpp

@@ -533,7 +533,7 @@ CreateSampleFileName(const Main::SampleRef& sample, const PFILE_NAME pFileName,
     const auto FRN = reinterpret_cast<const LARGE_INTEGER*>(&sample.FRN)->QuadPart;
     const auto parentFRN = reinterpret_cast<const LARGE_INTEGER*>(&pFileName->ParentDirectory)->QuadPart;
     const auto contentType = Command::GetThis::ToString(sample.Content.Type);
-    const auto snapshotId = ::ToString(sample.SnapshotID);
+    const auto snapshotId = ToString(sample.SnapshotID);
 
     if (dataName.size())
     {

src/OrcCommand/Command/NTFSInfo/NTFSInfoSqlSchema.xml

@@ -202,6 +202,7 @@
         </enum>
         <bool name="Parse" />
         <utf16  name="MountPoint" maxlen="256" />
+        <utf16  name="ShadowCopyId" maxlen="256" />
     </table>
 </sqlschema>
 

src/OrcCommand/UtilitiesMain.h

@@ -39,6 +39,7 @@
 #include "Log/UtilitiesLoggerConfiguration.h"
 #include "Log/LogTerminationHandler.h"
 #include "Utils/StdStream/StandardOutput.h"
+#include "Text/Guid.h"
 #include "VolumeReader.h"
 
 #include "Utils/EnumFlags.h"
@@ -122,6 +123,7 @@ class UtilitiesMain
                         volStatOutput.WriteString(FSVBR::GetFSName(reader->GetFSType()).c_str());
                         volStatOutput.WriteBool(loc->GetParse());
                         volStatOutput.WriteString(fmt::format(L"{}", fmt::join(loc->GetPaths(), L";")));
+                        volStatOutput.WriteString(loc->GetShadow() ? ToStringW(loc->GetShadow()->guid).c_str() : L"");
                         volStatOutput.WriteEndOfLine();
                     }
                     else