[package]
edition = "2021"
rust-version = "1.75"
name = "forensicnomicon"
version = "0.3.1"
build = false
autolib = false
autobins = false
autoexamples = false
autotests = false
autobenches = false
description = "The ForensicNomicon — comprehensive DFIR artifact catalog: UserAssist, Shimcache, Amcache, Prefetch, $MFT, ShellBags, EVTX, NTDS.dit, SAM, SRUM, LNK, Jump Lists + KAPE/Velociraptor/Sigma/MITRE. Zero deps."
homepage = "https://github.com/SecurityRonin/forensicnomicon"
documentation = "https://docs.rs/forensicnomicon"
readme = "README.md"
keywords = [
"forensics",
"dfir",
"incident-response",
"mitre",
"artifacts",
]
categories = [
"science",
"data-structures",
]
license = "Apache-2.0"
repository = "https://github.com/SecurityRonin/forensicnomicon"
[features]
default = ["std"]
serde = ["dep:serde"]
std = []
[lib]
name = "forensicnomicon"
path = "src/lib.rs"
[[example]]
name = "dump_lol"
path = "examples/dump_lol.rs"
required-features = ["serde"]
[[test]]
name = "bootkit_heuristics_tests"
path = "tests/bootkit_heuristics_tests.rs"
[[test]]
name = "dump_lol_test"
path = "tests/dump_lol_test.rs"
[[test]]
name = "evtx_events"
path = "tests/evtx_events.rs"
[[test]]
name = "partition_schemes_tests"
path = "tests/partition_schemes_tests.rs"
[[test]]
name = "report_model_tests"
path = "tests/report_model_tests.rs"
[dependencies.serde]
version = "1"
features = ["derive"]
optional = true
[dev-dependencies.serde_json]
version = "1"