usn-journal-rs 0.3.0

A Rust library for working with the NTFS USN change journal and enumerating the MFT.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

use usn_journal_rs::{errors::UsnError, mft::Mft, path::PathResolver, volume::Volume};

fn main() {
    if let Err(e) = run() {
        eprintln!("Error: {}", e);
    }
}

fn run() -> Result<(), UsnError> {
    let drive_letter = 'C';
    let volume = Volume::from_drive_letter(drive_letter)?;
    let mft = Mft::new(&volume);
    let mut path_resolver = PathResolver::new_with_cache(&volume);

    for entry in mft.iter() {
        let full_path = path_resolver.resolve_path(&entry);
        println!("{}", entry.pretty_format(full_path));
    }

    Ok(())
}