Enum ArtifactLocation 

#[non_exhaustive]
pub enum ArtifactLocation {
    RegistryKey,
    RegistryValue,
    File,
    Directory,
    EventLog,
    MemoryRegion,
    LiveResponse,
    DatabaseEntry,
    EseDatabase,
}

The kind of forensic artifact location.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

RegistryKey

A registry key (container of values).

RegistryValue

A specific registry value.

File

A file on disk.

Directory

A directory on disk.

EventLog

A Windows Event Log channel.

MemoryRegion

A region of process/physical memory.

LiveResponse

Output collected during live response from a running system (lsof, ss, chkrootkit, etc.).

DatabaseEntry

A structured database file (ESE/SQLite/etc.).

EseDatabase

An Extensible Storage Engine (ESE/JET Blue) database file.

Trait Implementations

impl Clone for ArtifactLocation

fn clone(&self) -> ArtifactLocation

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for ArtifactLocation

impl Debug for ArtifactLocation

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Eq for ArtifactLocation

impl Hash for ArtifactLocation

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for ArtifactLocation

fn eq(&self, other: &ArtifactLocation) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for ArtifactLocation