Module normalize 

Normalize each scheme’s native analysis into the shared forensicnomicon::report model, so disk4n6 (and a future GUI) render one uniform Report instead of N bespoke XxxAnalysis types.

Functions

apm_findings

Normalize an Apple Partition Map analysis.

apm_provenance

Provenance breadcrumbs from an APM analysis.

gpt_findings

Normalize a GPT analysis.

gpt_provenance

Provenance breadcrumbs from a GPT analysis.

mbr_findings

Normalize an MBR analysis. Findings carry their byte offset as evidence.

mbr_provenance

Provenance breadcrumbs from an MBR analysis.

report

Build the unified Report from a DiskReport. A GPT disk contributes both its protective-MBR and parsed-GPT findings and provenance.