vhdx-forensic 0.2.0

Forensic integrity analyzer for VHDX (Hyper-V) virtual disks — tamper/anomaly findings and in-memory repair, built on vhdx-core
Documentation
//! VHDX forensic integrity analyser and in-memory repair tool.
//!
//! Depends on the `vhdx` crate for container parsing. Exports `VhdxIntegrity`,
//! `VhdxRepair`, and all anomaly/severity types.
//!
//! # Layer
//! FORENSIC AUDIT — equivalent role to `ewf-forensic` for E01 images.

pub mod integrity;
pub mod repair;

// Re-export the reader so callers don't need two crates for basic use.
pub use vhdx::{header::crc32c, Result, VhdxError, VhdxReader, FILE_MAGIC};
pub use integrity::{AnalysisSummary, Severity, VhdxIntegrity, VhdxIntegrityAnomaly};

/// Return references to all anomalies whose severity is at or above `min`.
pub fn anomalies_at_least<'a>(
    anomalies: &'a [VhdxIntegrityAnomaly],
    min: Severity,
) -> Vec<&'a VhdxIntegrityAnomaly> {
    anomalies.iter().filter(|a| a.severity() >= min).collect()
}
pub use repair::{CannotRepair, RepairAction, RepairReport, VhdxRepair};