Expand description
Artifact volatility model — RFC 3227 Order of Volatility encoded as data.
Ratings live directly in crate::catalog::ArtifactDescriptor::volatility
(populated for assessed entries; None for generated entries awaiting review).
Use volatility_for for point-lookups and acquisition_order to get a
live-response collection order (most ephemeral first).
Enums§
- Volatility
Class - Acquisition urgency for a forensic artifact under RFC 3227 Order of Volatility.
Functions§
- acquisition_
order - Returns all assessed descriptors sorted most-volatile-first (Volatile → Residual). Ties broken by artifact ID for determinism.
- volatility_
for - Returns the descriptor for a given artifact ID if it has been assessed.