Module logical 

Logical file containers — image formats that hold a file tree, not a raw disk.

Some forensic containers carry captured files rather than a block device: AccessData AD1 (FTK “Custom Content Image”) and AFF4-Logical (aff4:FileImage collections). They have no partition table or filesystem to walk with the partition parsers, so they do not fit crate::container::open (which yields a Read + Seek disk view). open is their home: it lists entries (logical path + metadata) and reads a file’s bytes.

let mut img = disk_forensic::logical::open(std::path::Path::new("evidence.ad1"))?;
for e in img.entries() {
    println!("{} ({} bytes){}", e.path, e.size, if e.is_dir { " [dir]" } else { "" });
}

Structs

LogicalEntry

One entry in a logical container’s file tree.

LogicalImage

An opened logical file container: its entry list plus the backend reader.

Enums

LogicalError

Failure opening or reading a logical container.

Functions

open

Open a logical file container (AD1 or AFF4-Logical) at path.