forensicnomicon-data 1.4.0

Detection knowledge for the ForensicNomicon: the artifact descriptor catalog (the global CATALOG) and evidence/volatility lookups. The fast-moving data layer atop forensicnomicon-core.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30

//! Auto-generated artifact descriptor modules from the mass-import ingest pipeline.
//!
//! Each module was produced by `cargo run -p ingest -- --source <name>` and contains
//! `ArtifactDescriptor` statics ready for inclusion in `CATALOG_ENTRIES`.
//!
//! Descriptor statics per module. Every one of them is wired into
//! `CATALOG_ENTRIES` — `catalog_integrity::every_generated_descriptor_is_reachable_from_the_catalog`
//! enforces it, so these counts are also the number of catalog entries each
//! module contributes.
//!
//! | Source      | Count |
//! |-------------|-------|
//! | browsers    |    33 |
//! | dfir_scripts|   374 |
//! | evtx        |   989 |
//! | fa          |  2486 |
//! | kape        |  2153 |
//! | nirsoft     |    13 |
//! | regedit     |    17 |
//! | velociraptor|   108 |
//! | **Total**   |**6173**|

pub(super) mod browsers_generated;
pub(super) mod dfir_scripts_generated;
pub(super) mod evtx_generated;
pub(super) mod fa_generated;
pub(super) mod kape_generated;
pub(super) mod nirsoft_generated;
pub(super) mod regedit_generated;
pub(super) mod velociraptor_generated;