Enum dfir_toolkit::registry::types::KeyValueDataType

pub enum KeyValueDataType {
    RegNone = 0,
    RegSZ = 1,
    RegExpandSZ = 2,
    RegBinary = 3,
    RegDWord = 4,
    RegDWordBigEndian = 5,
    RegLink = 6,
    RegMultiSZ = 7,
    RegResourceList = 8,
    RegFullResourceDescriptor = 9,
    RegResourceRequirementsList = 10,
    RegQWord = 11,
    RegFileTime = 16,
}

Possible data types of the data belonging to a [KeyValue]. https://docs.microsoft.com/en-us/windows/win32/sysinfo/registry-value-types

Variants

RegNone = 0

Data with no particular type

RegSZ = 1

A null-terminated string. This will be either a Unicode or an ANSI string, depending on whether you use the Unicode or ANSI functions.

RegExpandSZ = 2

A null-terminated Unicode string, containing unexpanded references to environment variables, such as “%PATH%”

RegBinary = 3

Binary data in any form

RegDWord = 4

A 4-byte numerical value

RegDWordBigEndian = 5

A 4-byte numerical value whose least significant byte is at the highest address

RegLink = 6

A Unicode string naming a symbolic link. This type is irrelevant to device and intermediate drivers

RegMultiSZ = 7

An array of null-terminated strings, terminated by another zero

RegResourceList = 8

A device driver’s list of hardware resources, used by the driver or one of the physical devices it controls, in the \ResourceMap tree

RegFullResourceDescriptor = 9

A list of hardware resources that a physical device is using, detected and written into the \HardwareDescription tree by the system

RegResourceRequirementsList = 10

A device driver’s list of possible hardware resources it or one of the physical devices it controls can use, from which the system writes a subset into the \ResourceMap tree

RegQWord = 11

A 64-bit number.

RegFileTime = 16

FILETIME data

Trait Implementations

impl BinRead for KeyValueDataType

type Args = ()

The type of arguments needed to be supplied in order to read this type, usually a tuple.

fn read_options<R: Read + Seek>( __binread_generated_var_reader: &mut R, __binread_generated_var_options: &ReadOptions, __binread_generated_var_arguments: Self::Args ) -> BinResult<Self>

Read the type from the reader

fn read<R>(reader: &mut R) -> Result<Self, Error>where R: Read + Seek,

Read the type from the reader while assuming no arguments have been passed

fn read_args<R>(reader: &mut R, args: Self::Args) -> Result<Self, Error>where R: Read + Seek,

Read the type from the reader using the specified arguments

fn after_parse<R>( &mut self, _: &mut R, _: &ReadOptions, _: Self::Args ) -> Result<(), Error>where R: Read + Seek,

fn args_default() -> Option<Self::Args>

The default arguments to be used when using the read shortcut method. Override this for any type that optionally requries arguments

impl Clone for KeyValueDataType

fn clone(&self) -> KeyValueDataType

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Serialize for KeyValueDataType

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Copy for KeyValueDataType