List of all items

Structs

• activity::ForensicActivity
• activity::ProgramExecution
• artifact::ArtifactVisitor
• artifact::OtherOS
• channel::Receiver
• channel::RecvError
• channel::SendError
• channel::Sender
• context::ForensicContext
• core::fs::chroot::ChRootFileSystem
• core::fs::stdfs::StdVirtualFS
• core::fs::stdfs::StdVirtualFile
• data::EventFieldIter
• data::EventIter
• data::EventIterMut
• data::ForensicData
• data::ForensicDataInspector
• data::ForensicDataInspectorMut
• err::BadFormatError
• err::MissingError
• logging::Logger
• logging::Message
• notifications::Notification
• notifications::Notifier
• traits::forensic::TimelineData
• traits::registry::RegistryKeyInfo
• traits::vfs::VMetadata
• traits::vfs::VPath
• utils::testing::MountedCell
• utils::testing::TestingRegistry
• utils::time::Filetime
• utils::time::UnixTimestamp
• utils::time::WinFiletime

Enums

• activity::ActivityType
• activity::FileSystemActivity
• activity::SessionId
• artifact::Artifact
• artifact::CommonArtifact
• artifact::LinuxArtifacts
• artifact::LinuxService
• artifact::MacArtifacts
• artifact::RegistryArtifacts
• artifact::WebBrowsingArtifact
• artifact::WindowsArtifacts
• artifact::WindowsEvents
• channel::InnerSender
• channel::RecvTimeoutError
• channel::TryRecvError
• channel::TrySendError
• err::ForensicError
• field::Field
• field::ip::Ip
• logging::Level
• notifications::NotificationType
• notifications::Priority
• traits::forensic::TimeContext
• traits::registry::RegHiveKey
• traits::registry::RegValue
• traits::sql::ColumnType
• traits::sql::ColumnValue
• traits::vfs::VDirEntry
• traits::vfs::VFileType

Traits

• traits::forensic::ArtifactParser
• traits::forensic::IntoActivity
• traits::forensic::IntoTimeline
• traits::forensic::RegistryParser
• traits::registry::RegistryReader
• traits::sql::SqlDb
• traits::sql::SqlStatement
• traits::sql::SqlValueInto
• traits::vfs::VirtualFile
• traits::vfs::VirtualFileSystem

Macros

• debug
• error
• info
• log
• notify
• notify_critical
• notify_high
• notify_info
• notify_informational
• notify_low
• notify_medium
• prelude::debug
• prelude::error
• prelude::info
• prelude::log
• prelude::notify
• prelude::notify_critical
• prelude::notify_high
• prelude::notify_info
• prelude::notify_informational
• prelude::notify_low
• prelude::notify_medium
• prelude::trace
• prelude::warn
• trace
• warn

Functions

• artifact::artifact_from_str
• artifact::common_artifact_from_str
• artifact::linux_artifacts_from_str
• artifact::linux_service_from_str
• artifact::mac_artifact_from_str
• artifact::other_artifact_from_str
• artifact::registry_artifacts_from_str
• artifact::webbrowsing_artifact_from_str
• artifact::windows_artifacts_from_str
• artifact::winevt_artifacts_from_str
• channel::channel
• channel::sync_channel
• context::context
• context::initialize_context
• context::set_artifact
• context::set_host
• context::set_tenant
• core::interpolate_env_vars
• field::utils::ipv4_from_str
• field::utils::ipv4_to_str
• field::utils::ipv4_to_u32_bytes
• field::utils::ipv6_from_str
• field::utils::ipv6_to_str
• field::utils::is_ipv4
• field::utils::is_ipv4_port
• field::utils::is_ipv6
• field::utils::is_local_ipv4
• field::utils::is_local_ipv6
• field::utils::parse_ipv4_port
• field::utils::port_to_u16
• logging::enabled_level
• logging::initialize_logger
• logging::max_level
• logging::set_max_level
• logging::testing_logger_dummy
• notifications::initialize_notifier
• notifications::testing_notifier_dummy
• traits::registry::auto_close_key
• traits::registry::extra::env_vars::get_env_vars_of_users
• utils::testing::init_testing_logger
• utils::time::filetime_to_system_time
• utils::time::filetime_to_unix_timestamp
• utils::unpack::u16_at_pos
• utils::unpack::u16_at_pos_safe
• utils::unpack::u16b_at_pos
• utils::unpack::u16b_at_pos_safe
• utils::unpack::u32_at_pos
• utils::unpack::u32_at_pos_safe
• utils::unpack::u32b_at_pos
• utils::unpack::u32b_at_pos_safe
• utils::unpack::u64_at_pos
• utils::unpack::u64_at_pos_safe
• utils::unpack::u64b_at_pos
• utils::unpack::u64b_at_pos_safe
• utils::win::csidl::csidl_value
• utils::win::csidl::interpolate_csidl_path
• utils::win::sid::to_string_sid

Type Aliases

• core::UserEnvVars
• core::UsersEnvVars
• err::ForensicResult
• field::Text

Constants

• dictionary::ARTIFACT_HOST
• dictionary::ARTIFACT_NAME
• dictionary::ARTIFACT_PATH
• dictionary::ARTIFACT_TENANT
• dictionary::DESTINATION_BYTES
• dictionary::DESTINATION_IP
• dictionary::DESTINATION_PORT
• dictionary::DHCP_RECORD_TYPE
• dictionary::DNS_ANSWER_CLASS
• dictionary::DNS_ANSWER_DATA
• dictionary::DNS_ANSWER_NAME
• dictionary::DNS_ANSWER_TTL
• dictionary::DNS_ANSWER_TYPE
• dictionary::DNS_OP_CODE
• dictionary::DNS_QUESTION_CLASS
• dictionary::DNS_QUESTION_NAME
• dictionary::DNS_QUESTION_TYPE
• dictionary::DNS_RESOLVED_IP
• dictionary::EVENT_ACTION
• dictionary::EVENT_CATEGORY
• dictionary::EVENT_CODE
• dictionary::EVENT_OUTCOME
• dictionary::FILE_ACCESSED
• dictionary::FILE_CREATED
• dictionary::FILE_DEVICE
• dictionary::FILE_DIRECTORY
• dictionary::FILE_EXTENSION
• dictionary::FILE_INODE
• dictionary::FILE_NAME
• dictionary::FILE_OWNER
• dictionary::FILE_PATH
• dictionary::FILE_SIZE
• dictionary::FILE_TYPE
• dictionary::HTTP_REQUEST_METHOD
• dictionary::HTTP_RESPONSE_MIME_TYPE
• dictionary::HTTP_RESPONSE_STATUS_CODE
• dictionary::IN_INTERFACE
• dictionary::NETWORK_DURATION
• dictionary::NETWORK_PROTOCOL
• dictionary::NETWORK_TRANSPORT
• dictionary::OBSERVER_IP
• dictionary::OBSERVER_NAME
• dictionary::OUT_INTERFACE
• dictionary::PE_IMPORTS
• dictionary::PROCESS_EXECUTABLE
• dictionary::RULE_CATEGORY
• dictionary::RULE_ID
• dictionary::RULE_NAME
• dictionary::SOURCE_BYTES
• dictionary::SOURCE_IP
• dictionary::SOURCE_PORT
• dictionary::TAG_REPROCESS
• dictionary::URL_DOMAIN
• dictionary::URL_FULL
• dictionary::URL_PATH
• dictionary::URL_QUERY
• dictionary::USER_DOMAIN
• dictionary::USER_NAME
• logging::COMPONENT_LOGGER
• notifications::NOTIFIER
• traits::registry::HKC
• traits::registry::HKCR
• traits::registry::HKCU
• traits::registry::HKLM
• traits::registry::HKU
• utils::win::csidl::FOLDERID_ACCOUNT_PICTURES
• utils::win::csidl::FOLDERID_ACCOUNT_PICTURES_VALUE
• utils::win::csidl::FOLDERID_ADMINTOOLS
• utils::win::csidl::FOLDERID_ADMINTOOLS_VALUE
• utils::win::csidl::FOLDERID_APPDATADESKTOP
• utils::win::csidl::FOLDERID_APPDATADESKTOP_VALUE
• utils::win::csidl::FOLDERID_APPDATADOCUMENTS
• utils::win::csidl::FOLDERID_APPDATADOCUMENTS_VALUE
• utils::win::csidl::FOLDERID_APPDATAFAVORITES
• utils::win::csidl::FOLDERID_APPDATAFAVORITES_VALUE
• utils::win::csidl::FOLDERID_APPDATAPROGRAMDATA
• utils::win::csidl::FOLDERID_APPDATAPROGRAMDATA_VALUE
• utils::win::csidl::FOLDERID_APPLICATIONSHORTCUTS
• utils::win::csidl::FOLDERID_APPLICATIONSHORTCUTS_VALUE
• utils::win::csidl::FOLDERID_CAMERAROLL
• utils::win::csidl::FOLDERID_CAMERAROLL_VALUE
• utils::win::csidl::FOLDERID_CDBURNING
• utils::win::csidl::FOLDERID_CDBURNING_VALUE
• utils::win::csidl::FOLDERID_COMMONADMINTOOLS
• utils::win::csidl::FOLDERID_COMMONADMINTOOLS_VALUE
• utils::win::csidl::FOLDERID_COMMONOEMLINKS
• utils::win::csidl::FOLDERID_COMMONOEMLINKS_VALUE
• utils::win::csidl::FOLDERID_COMMONPROGRAMS
• utils::win::csidl::FOLDERID_COMMONPROGRAMS_VALUE
• utils::win::csidl::FOLDERID_COMMONSTARTMENU
• utils::win::csidl::FOLDERID_COMMONSTARTMENU_VALUE
• utils::win::csidl::FOLDERID_COMMONSTARTUP
• utils::win::csidl::FOLDERID_COMMONSTARTUP_VALUE
• utils::win::csidl::FOLDERID_COMMONTEMPLATES
• utils::win::csidl::FOLDERID_COMMONTEMPLATES_VALUE
• utils::win::csidl::FOLDERID_CONTACTS
• utils::win::csidl::FOLDERID_CONTACTS_VALUE
• utils::win::csidl::FOLDERID_COOKIES
• utils::win::csidl::FOLDERID_COOKIES_VALUE
• utils::win::csidl::FOLDERID_DESKTOP
• utils::win::csidl::FOLDERID_DESKTOP_VALUE
• utils::win::csidl::FOLDERID_DEVICEMETADATASTORE
• utils::win::csidl::FOLDERID_DEVICEMETADATASTORE_VALUE
• utils::win::csidl::FOLDERID_DOCUMENTS
• utils::win::csidl::FOLDERID_DOCUMENTSLIBRARY
• utils::win::csidl::FOLDERID_DOCUMENTSLIBRARY_VALUE
• utils::win::csidl::FOLDERID_DOCUMENTS_VALUE
• utils::win::csidl::FOLDERID_DOWNLOADS
• utils::win::csidl::FOLDERID_DOWNLOADS_VALUE
• utils::win::csidl::FOLDERID_FAVORITES
• utils::win::csidl::FOLDERID_FAVORITES_VALUE
• utils::win::csidl::FOLDERID_FONTS
• utils::win::csidl::FOLDERID_FONTS_VALUE
• utils::win::csidl::FOLDERID_GAMETASKS
• utils::win::csidl::FOLDERID_GAMETASKS_VALUE
• utils::win::csidl::FOLDERID_HISTORY
• utils::win::csidl::FOLDERID_HISTORY_VALUE
• utils::win::csidl::FOLDERID_IMPLICITAPPSHORTCUTS
• utils::win::csidl::FOLDERID_IMPLICITAPPSHORTCUTS_VALUE
• utils::win::csidl::FOLDERID_INTERNETCACHE
• utils::win::csidl::FOLDERID_INTERNETCACHE_VALUE
• utils::win::csidl::FOLDERID_LIBRARIES
• utils::win::csidl::FOLDERID_LIBRARIES_VALUE
• utils::win::csidl::FOLDERID_LINKS
• utils::win::csidl::FOLDERID_LINKS_VALUE
• utils::win::csidl::FOLDERID_LOCALAPPDATA
• utils::win::csidl::FOLDERID_LOCALAPPDATALOW
• utils::win::csidl::FOLDERID_LOCALAPPDATALOW_VALUE
• utils::win::csidl::FOLDERID_LOCALAPPDATA_VALUE
• utils::win::csidl::FOLDERID_MUSIC
• utils::win::csidl::FOLDERID_MUSICLIBRARY
• utils::win::csidl::FOLDERID_MUSICLIBRARY_VALUE
• utils::win::csidl::FOLDERID_MUSIC_VALUE
• utils::win::csidl::FOLDERID_NETHOOD
• utils::win::csidl::FOLDERID_NETHOOD_VALUE
• utils::win::csidl::FOLDERID_OBJECTS3D
• utils::win::csidl::FOLDERID_OBJECTS3D_VALUE
• utils::win::csidl::FOLDERID_ORIGINALIMAGES
• utils::win::csidl::FOLDERID_ORIGINALIMAGES_VALUE
• utils::win::csidl::FOLDERID_PHOTOALBUMS
• utils::win::csidl::FOLDERID_PHOTOALBUMS_VALUE
• utils::win::csidl::FOLDERID_PICTURES
• utils::win::csidl::FOLDERID_PICTURESLIBRARY
• utils::win::csidl::FOLDERID_PICTURESLIBRARY_VALUE
• utils::win::csidl::FOLDERID_PICTURES_VALUE
• utils::win::csidl::FOLDERID_PLAYLISTS
• utils::win::csidl::FOLDERID_PLAYLISTS_VALUE
• utils::win::csidl::FOLDERID_PRINTHOOD
• utils::win::csidl::FOLDERID_PRINTHOOD_VALUE
• utils::win::csidl::FOLDERID_PROFILE
• utils::win::csidl::FOLDERID_PROFILE_VALUE
• utils::win::csidl::FOLDERID_PROGRAMDATA
• utils::win::csidl::FOLDERID_PROGRAMDATA_VALUE
• utils::win::csidl::FOLDERID_PROGRAMFILES
• utils::win::csidl::FOLDERID_PROGRAMFILESCOMMON
• utils::win::csidl::FOLDERID_PROGRAMFILESCOMMONX64
• utils::win::csidl::FOLDERID_PROGRAMFILESCOMMONX64_VALUE
• utils::win::csidl::FOLDERID_PROGRAMFILESCOMMONX86
• utils::win::csidl::FOLDERID_PROGRAMFILESCOMMONX86_VALUE
• utils::win::csidl::FOLDERID_PROGRAMFILESCOMMON_VALUE
• utils::win::csidl::FOLDERID_PROGRAMFILESX64
• utils::win::csidl::FOLDERID_PROGRAMFILESX64_VALUE
• utils::win::csidl::FOLDERID_PROGRAMFILESX86
• utils::win::csidl::FOLDERID_PROGRAMFILESX86_VALUE
• utils::win::csidl::FOLDERID_PROGRAMFILES_VALUE
• utils::win::csidl::FOLDERID_PROGRAMS
• utils::win::csidl::FOLDERID_PROGRAMS_VALUE
• utils::win::csidl::FOLDERID_PUBLIC
• utils::win::csidl::FOLDERID_PUBLICDESKTOP
• utils::win::csidl::FOLDERID_PUBLICDESKTOP_VALUE
• utils::win::csidl::FOLDERID_PUBLICDOCUMENTS
• utils::win::csidl::FOLDERID_PUBLICDOCUMENTS_VALUE
• utils::win::csidl::FOLDERID_PUBLICDOWNLOADS
• utils::win::csidl::FOLDERID_PUBLICDOWNLOADS_VALUE
• utils::win::csidl::FOLDERID_PUBLICGAMETASKS
• utils::win::csidl::FOLDERID_PUBLICGAMETASKS_VALUE
• utils::win::csidl::FOLDERID_PUBLICLIBRARIES
• utils::win::csidl::FOLDERID_PUBLICLIBRARIES_VALUE
• utils::win::csidl::FOLDERID_PUBLICMUSIC
• utils::win::csidl::FOLDERID_PUBLICMUSIC_VALUE
• utils::win::csidl::FOLDERID_PUBLICPICTURES
• utils::win::csidl::FOLDERID_PUBLICPICTURES_VALUE
• utils::win::csidl::FOLDERID_PUBLICRINGTONES
• utils::win::csidl::FOLDERID_PUBLICRINGTONES_VALUE
• utils::win::csidl::FOLDERID_PUBLICUSERTILES
• utils::win::csidl::FOLDERID_PUBLICUSERTILES_VALUE
• utils::win::csidl::FOLDERID_PUBLICVIDEOS
• utils::win::csidl::FOLDERID_PUBLICVIDEOS_VALUE
• utils::win::csidl::FOLDERID_PUBLIC_VALUE
• utils::win::csidl::FOLDERID_QUICKLAUNCH
• utils::win::csidl::FOLDERID_QUICKLAUNCH_VALUE
• utils::win::csidl::FOLDERID_RECENT
• utils::win::csidl::FOLDERID_RECENT_VALUE
• utils::win::csidl::FOLDERID_RECORDEDTVLIBRARY
• utils::win::csidl::FOLDERID_RECORDEDTVLIBRARY_VALUE
• utils::win::csidl::FOLDERID_RESOURCEDIR
• utils::win::csidl::FOLDERID_RESOURCEDIR_VALUE
• utils::win::csidl::FOLDERID_ROAMEDTILEIMAGES
• utils::win::csidl::FOLDERID_ROAMEDTILEIMAGES_VALUE
• utils::win::csidl::FOLDERID_ROAMINGAPPDATA
• utils::win::csidl::FOLDERID_ROAMINGAPPDATA_VALUE
• utils::win::csidl::FOLDERID_ROAMINGTILES
• utils::win::csidl::FOLDERID_ROAMINGTILES_VALUE
• utils::win::csidl::FOLDERID_SAMPLEMUSIC
• utils::win::csidl::FOLDERID_SAMPLEMUSIC_VALUE
• utils::win::csidl::FOLDERID_SAMPLEPICTURES
• utils::win::csidl::FOLDERID_SAMPLEPICTURES_VALUE
• utils::win::csidl::FOLDERID_SAMPLEPLAYLISTS
• utils::win::csidl::FOLDERID_SAMPLEPLAYLISTS_VALUE
• utils::win::csidl::FOLDERID_SAMPLEVIDEOS
• utils::win::csidl::FOLDERID_SAMPLEVIDEOS_VALUE
• utils::win::csidl::FOLDERID_SAVEDGAMES
• utils::win::csidl::FOLDERID_SAVEDGAMES_VALUE
• utils::win::csidl::FOLDERID_SAVEDPICTURES
• utils::win::csidl::FOLDERID_SAVEDPICTURESLIBRARY
• utils::win::csidl::FOLDERID_SAVEDPICTURESLIBRARY_VALUE
• utils::win::csidl::FOLDERID_SAVEDPICTURES_VALUE
• utils::win::csidl::FOLDERID_SAVEDSEARCHES
• utils::win::csidl::FOLDERID_SAVEDSEARCHES_VALUE
• utils::win::csidl::FOLDERID_SCREENSHOTS
• utils::win::csidl::FOLDERID_SCREENSHOTS_VALUE
• utils::win::csidl::FOLDERID_SEARCHHISTORY
• utils::win::csidl::FOLDERID_SEARCHHISTORY_VALUE
• utils::win::csidl::FOLDERID_SEARCHTEMPLATES
• utils::win::csidl::FOLDERID_SEARCHTEMPLATES_VALUE
• utils::win::csidl::FOLDERID_SENDTO
• utils::win::csidl::FOLDERID_SENDTO_VALUE
• utils::win::csidl::FOLDERID_SIDEBARDEFAULTPARTS
• utils::win::csidl::FOLDERID_SIDEBARDEFAULTPARTS_VALUE
• utils::win::csidl::FOLDERID_SIDEBARPARTS
• utils::win::csidl::FOLDERID_SIDEBARPARTS_VALUE
• utils::win::csidl::FOLDERID_SKYDRIVE
• utils::win::csidl::FOLDERID_SKYDRIVECAMERAROLL
• utils::win::csidl::FOLDERID_SKYDRIVECAMERAROLL_VALUE
• utils::win::csidl::FOLDERID_SKYDRIVEDOCUMENTS
• utils::win::csidl::FOLDERID_SKYDRIVEDOCUMENTS_VALUE
• utils::win::csidl::FOLDERID_SKYDRIVEPICTURES
• utils::win::csidl::FOLDERID_SKYDRIVEPICTURES_VALUE
• utils::win::csidl::FOLDERID_SKYDRIVE_VALUE
• utils::win::csidl::FOLDERID_STARTMENU
• utils::win::csidl::FOLDERID_STARTMENU_VALUE
• utils::win::csidl::FOLDERID_STARTUP
• utils::win::csidl::FOLDERID_STARTUP_VALUE
• utils::win::csidl::FOLDERID_SYSTEM
• utils::win::csidl::FOLDERID_SYSTEMX86
• utils::win::csidl::FOLDERID_SYSTEMX86_VALUE
• utils::win::csidl::FOLDERID_SYSTEM_VALUE
• utils::win::csidl::FOLDERID_TEMPLATES
• utils::win::csidl::FOLDERID_TEMPLATES_VALUE
• utils::win::csidl::FOLDERID_USERPINNED
• utils::win::csidl::FOLDERID_USERPINNED_VALUE
• utils::win::csidl::FOLDERID_USERPROFILES
• utils::win::csidl::FOLDERID_USERPROFILES_VALUE
• utils::win::csidl::FOLDERID_USERPROGRAMFILES
• utils::win::csidl::FOLDERID_USERPROGRAMFILESCOMMON
• utils::win::csidl::FOLDERID_USERPROGRAMFILESCOMMON_VALUE
• utils::win::csidl::FOLDERID_USERPROGRAMFILES_VALUE
• utils::win::csidl::FOLDERID_VIDEOS
• utils::win::csidl::FOLDERID_VIDEOSLIBRARY
• utils::win::csidl::FOLDERID_VIDEOSLIBRARY_VALUE
• utils::win::csidl::FOLDERID_VIDEOS_VALUE
• utils::win::csidl::FOLDERID_WINDOWS
• utils::win::csidl::FOLDERID_WINDOWS_VALUE
• utils::win::sid::BUILTIN_ADMINS_SID_BIN
• utils::win::sid::BUILTIN_ADMINS_SID_STR
• utils::win::sid::BUILTIN_GUESTS_SID_BIN
• utils::win::sid::BUILTIN_GUESTS_SID_STR
• utils::win::sid::BUILTIN_USERS_SID_BIN
• utils::win::sid::BUILTIN_USERS_SID_STR
• utils::win::sid::LOCAL_SYSTEM_SID_BIN
• utils::win::sid::LOCAL_SYSTEM_SID_STR