forensicnomicon-data 0.1.0

Detection knowledge for the ForensicNomicon: the artifact descriptor catalog (the global CATALOG) and evidence/volatility lookups. The fast-moving data layer atop forensicnomicon-core.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

#![cfg_attr(
    test,
    allow(clippy::unwrap_used, clippy::expect_used, clippy::float_cmp)
)]
//! # forensicnomicon-data
//!
//! The fast-moving **detection knowledge** layer of the ForensicNomicon, split out
//! from the stable engine in `forensicnomicon-core` so it can release frequently
//! and independently. It carries the assembled artifact catalog and the lookups
//! built over it:
//!
//! - [`catalog`] — the ~6.5k assembled artifact descriptors and the global
//!   [`catalog::CATALOG`]. The descriptor *types* and the lookup *engine* live in
//!   `forensicnomicon-core`; this crate supplies the data and wires it into a
//!   compile-time `CATALOG` via `ForensicCatalog::new`. The engine surface is
//!   re-exported, so `forensicnomicon_data::catalog::*` mirrors the core API.
//! - [`evidence`] / [`volatility`] — the `EvidenceStrength` / `VolatilityClass`
//!   rating enums (re-exported from core) plus the catalog-querying helpers
//!   (`evidence_for`, `volatility_for`, `acquisition_order`, …).
//!
//! The umbrella `forensicnomicon` crate re-exports this crate, so existing
//! `forensicnomicon::catalog::CATALOG` / `forensicnomicon::evidence::evidence_for`
//! paths resolve unchanged.

pub mod catalog;
pub mod evidence;
pub mod volatility;