Enum RecoveryMethod 

#[non_exhaustive]
pub enum RecoveryMethod {
    Tombstone,
    FileInternalCarve,
    UnallocatedCarve,
    MemoryCarve,
}

How (and how broadly) an artifact was recovered — the fleet-wide provenance vocabulary (ADR 0001 §3). Carving is a recovery method, so this general concept owns the plain name; the SQLite-record substrate detail lives in browser-forensic-carve as SqliteRecoveryMethod.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Tombstone

A deletion the filesystem itself recorded (an $MFT record with IN_USE cleared, an ext4 orphan inode). The --deleted flag.

FileInternalCarve

Tier-1 recovery from within a located artifact’s own slack (freelist / WAL / ElfChnk). Default-on in the parser.

UnallocatedCarve

Tier-2 whole-image carving of unallocated space. The --unallocated flag.

MemoryCarve

Recovered from a memory image (a process VA region or a physical frame).

Implementations

impl RecoveryMethod

pub const fn as_str(self) -> &'static str

A stable serialization token, used when translating provenance onto the report model’s Evidence/tags at orchestration (ADR 0001 §2). Never change a shipped token.

Trait Implementations

impl Clone for RecoveryMethod

fn clone(&self) -> RecoveryMethod

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for RecoveryMethod

impl Debug for RecoveryMethod

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for RecoveryMethod

impl Hash for RecoveryMethod

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for RecoveryMethod

fn eq(&self, other: &RecoveryMethod) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for RecoveryMethod