Enum AnomalyKind 

pub enum AnomalyKind {
    ClearKeyPresent,
    Protector {
        protector_type: u16,
    },
    WeakCipher {
        method: u16,
    },
    ToGo,
}

A classified BitLocker metadata observation.

Variants

ClearKeyPresent

A clear-key protector is present: the VMK is stored unprotected, so the volume can be decrypted with no credential — effectively unencrypted.

Protector

A key protector is present (one per protector).

Fields

protector_type: u16

The raw protection-type value.

WeakCipher

The volume cipher is AES-CBC (with or without the Elephant Diffuser), which is weaker than AES-XTS.

Fields

method: u16

The raw encryption-method value.

ToGo

The volume is a BitLocker To Go removable-media volume.

Implementations

impl AnomalyKind

pub fn severity(&self) -> Severity

Severity — the single source of truth for this kind.

pub fn code(&self) -> &'static str

Stable, scheme-prefixed machine code (published contract).

pub fn category(&self) -> Category

Analytical lens.

pub fn note(&self) -> String

Human-readable note including the offending value.

Trait Implementations

impl Clone for AnomalyKind

fn clone(&self) -> AnomalyKind

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AnomalyKind

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for AnomalyKind

impl PartialEq for AnomalyKind

fn eq(&self, other: &AnomalyKind) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for AnomalyKind