Module volatility 

Artifact volatility helpers over the assembled global catalog.

The VolatilityClass rating type (RFC 3227 Order of Volatility) is defined in forensicnomicon-core and re-exported here (so crate::volatility::VolatilityClass resolves throughout the descriptor dataset). The helpers below resolve against the global crate::catalog::CATALOG.

Use volatility_for for point-lookups and acquisition_order to get a live-response collection order (most ephemeral first).

Enums

VolatilityClass

Acquisition urgency for a forensic artifact under RFC 3227 Order of Volatility.

Functions

acquisition_order

Returns all assessed descriptors sorted most-volatile-first (Volatile → Residual). Ties broken by artifact ID for determinism.

volatility_for

Returns the descriptor for a given artifact ID if it has been assessed.