Struct mft::mft::MftParser

pub struct MftParser<T: ReadSeek> { /* fields omitted */ }

Methods

impl MftParser<BufReader<File>>

pub fn from_path(filename: impl AsRef<Path>) -> Result<Self>

Instantiates an instance of the parser from a file path. Does not mutate the file contents in any way.

impl MftParser<Cursor<Vec<u8>>>

pub fn from_buffer(buffer: Vec<u8>) -> Result<Self>

Instantiates an instance of the parser from a buffer containing a full MFT file. Useful for testing.

impl<T: ReadSeek> MftParser<T>

pub fn from_read_seek(data: T, size: Option<u64>) -> Result<Self>

pub fn get_entry_count(&self) -> u64

pub fn get_entry(&mut self, entry_number: u64) -> Result<MftEntry>

Reads an entry from the MFT by entry number.

pub fn iter_entries(&mut self) -> impl Iterator<Item = Result<MftEntry>> + '_

Iterates over all the entries in the MFT.

pub fn get_full_path_for_entry(
    &mut self,
    entry: &MftEntry
) -> Result<Option<PathBuf>>

Gets the full path for an entry. Caches computations.