Enum dfir_toolkit::registry::types::KeyValueDataType

pub enum KeyValueDataType {
    RegNone,
    RegSZ,
    RegExpandSZ,
    RegBinary,
    RegDWord,
    RegDWordBigEndian,
    RegLink,
    RegMultiSZ,
    RegResourceList,
    RegFullResourceDescriptor,
    RegResourceRequirementsList,
    RegQWord,
    RegFileTime,
}

Possible data types of the data belonging to a [KeyValue]. https://docs.microsoft.com/en-us/windows/win32/sysinfo/registry-value-types

Variants

RegNone

Data with no particular type

RegSZ

A null-terminated string. This will be either a Unicode or an ANSI string, depending on whether you use the Unicode or ANSI functions.

RegExpandSZ

A null-terminated Unicode string, containing unexpanded references to environment variables, such as “%PATH%”

RegBinary

Binary data in any form

RegDWord

A 4-byte numerical value

RegDWordBigEndian

A 4-byte numerical value whose least significant byte is at the highest address

RegLink

A Unicode string naming a symbolic link. This type is irrelevant to device and intermediate drivers

RegMultiSZ

An array of null-terminated strings, terminated by another zero

RegResourceList

A device driver’s list of hardware resources, used by the driver or one of the physical devices it controls, in the \ResourceMap tree

RegFullResourceDescriptor

A list of hardware resources that a physical device is using, detected and written into the \HardwareDescription tree by the system

RegResourceRequirementsList

A device driver’s list of possible hardware resources it or one of the physical devices it controls can use, from which the system writes a subset into the \ResourceMap tree

RegQWord

A 64-bit number.

RegFileTime

FILETIME data

Trait Implementations

impl BinRead for KeyValueDataType

type Args = ()

The type of arguments needed to be supplied in order to read this type, usually a tuple.

fn read_options<R: Read + Seek>( __binread_generated_var_reader: &mut R, __binread_generated_var_options: &ReadOptions, __binread_generated_var_arguments: Self::Args ) -> BinResult<Self>

Read the type from the reader

fn read<R>(reader: &mut R) -> Result<Self, Error>where R: Read + Seek,

Read the type from the reader while assuming no arguments have been passed

fn read_args<R>(reader: &mut R, args: Self::Args) -> Result<Self, Error>where R: Read + Seek,

Read the type from the reader using the specified arguments

fn after_parse<R>( &mut self, _: &mut R, _: &ReadOptions, _: Self::Args ) -> Result<(), Error>where R: Read + Seek,

fn args_default() -> Option<Self::Args>

The default arguments to be used when using the read shortcut method. Override this for any type that optionally requries arguments

impl Clone for KeyValueDataType

fn clone(&self) -> KeyValueDataType

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Serialize for KeyValueDataType

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Copy for KeyValueDataType