mbr-partition-forensic 0.5.0

Forensic MBR analyzer — structural anomaly detection, gap analysis, slack-space carving, wipe and bootkit detection, and filesystem fingerprinting as graded forensicnomicon report::Finding, built on mbr-partition-core
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22

#![allow(
    clippy::unwrap_used,
    clippy::expect_used,
    clippy::float_cmp,
    clippy::redundant_closure_for_method_calls
)]
//! TypeCode names sourced from the forensicnomicon knowledge base, including
//! codes beyond the original hardcoded table.
use mbr_partition_forensic::partition::TypeCode;

#[test]
fn expanded_codes_resolve_via_knowledge_base() {
    assert_eq!(TypeCode(0x0A).name(), "OS/2 Boot Manager");
    assert_eq!(TypeCode(0x39).name(), "Plan 9");
}

#[test]
fn original_names_preserved() {
    assert_eq!(TypeCode(0x83).name(), "Linux");
    assert_eq!(TypeCode(0x07).name(), "NTFS / exFAT / IFS");
    assert_eq!(TypeCode(0xCC).name(), "Unknown");
}