Skip to main content

Crate forensic_mount

Crate forensic_mount 

Source

Re-exports§

pub use engine_fs::open_image;
pub use engine_fs::open_image_all;
pub use engine_fs::EngineFs;
pub use engine_fs::MultiPartitionFs;
pub use types::*;

Modules§

detect
engine_fs
The disk-image ForensicFs backend: an adapter over the forensic-vfs engine’s read-only [FileSystem] contract.
filter
fuse_unix
fusefs
inode_map
marking
Platform-agnostic recovered-deleted marking schema (ADR-0008 v2).
session
types
The filesystem-agnostic value types the FUSE/Dokan mount layer speaks.
win_map
Pure mapping helpers from the platform-agnostic ForensicFs model onto Windows filesystem semantics (path components, file attributes, timestamps).

Structs§

MountOptions
Mount options for the FUSE filesystem.

Enums§

DeletedMode
How the deleted/ view surfaces recovered deleted files.
MountLayout
How the FUSE mount renders a ForensicFs.

Traits§

ForensicFs
One mounted, browsable forensic filesystem, in 4n6mount’s own u64-inode vocabulary. A backend (the memory VFS, or EngineFs over a disk image) converts its native model into these calls; the FUSE/Dokan mount layer consumes them directly.

Functions§

mount
Mount a forensic filesystem via FUSE (or Dokan on Windows).