pub struct FsMeta {
pub ino: u64,
pub kind: NodeKind,
pub allocated: Allocation,
pub size: u64,
pub nlink: u32,
pub uid: Option<u32>,
pub gid: Option<u32>,
pub mode: Option<u32>,
pub times: MacbTimes,
pub streams: Vec<StreamInfo>,
pub residency: ResidencyKind,
pub link_target: Option<Vec<u8>>,
}Expand description
The unified forensic metadata record — TSK’s name-layer vs meta-layer split,
ADS/residency, and per-timestamp provenance, without the eager run-list
(runs come from FileSystem::extents on demand).
Fields§
§ino: u64Metadata address (MFT reference / inode number).
kind: NodeKind§allocated: AllocationName/metadata-layer status.
size: u64§nlink: u32§uid: Option<u32>§gid: Option<u32>§mode: Option<u32>§times: MacbTimes§streams: Vec<StreamInfo>Default $DATA plus ADS / resource forks (metadata only).
residency: ResidencyKind§link_target: Option<Vec<u8>>Trait Implementations§
impl Eq for FsMeta
impl StructuralPartialEq for FsMeta
Auto Trait Implementations§
impl Freeze for FsMeta
impl RefUnwindSafe for FsMeta
impl Send for FsMeta
impl Sync for FsMeta
impl Unpin for FsMeta
impl UnsafeUnpin for FsMeta
impl UnwindSafe for FsMeta
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more