Crate browser_forensic_core 

Core types for browser forensic analysis.

Re-exports

pub use finding::Confidence;

pub use finding::EvidenceSource;

pub use finding::EvidenceState;

pub use finding::Finding;

pub use finding::Priority;

pub use finding::Provenance;

pub use finding::TimestampBasis;

pub use finding::UserActionClaim;

Modules

analyze

Browser event analysis utilities.

finding

Court-safe forensic finding model (RFC 0001 — D4 provenance, D5 the Priority/Confidence/Interpretation split, D9 multi-user origin).

reconstruct

Browser-agnostic navigation reconstruction over per-visit BrowserEvents.

sqlite

Read-only, WAL-safe opening of browser SQLite evidence databases.

test_utils

timestamp

Structs

BrowserEvent

A single browser forensic event.

ForensicMeta

Forensic metadata from forensicnomicon for a specific browser artifact.

Enums

ArtifactKind

Kind of browser artifact.

BrowserFamily

Browser engine family.

EvidenceStrength

How strongly an artifact proves a fact in isolation.

Functions

detect_browser

Detect the browser family from a file path.