Skip to main content

Module volatility

Module volatility 

Source
Expand description

Artifact volatility model — RFC 3227 Order of Volatility encoded as data.

Ratings live directly in crate::catalog::ArtifactDescriptor::volatility (populated for assessed entries; None for generated entries awaiting review).

Use volatility_for for point-lookups and acquisition_order to get a live-response collection order (most ephemeral first).

Enums§

VolatilityClass
Acquisition urgency for a forensic artifact under RFC 3227 Order of Volatility.

Functions§

acquisition_order
Returns all assessed descriptors sorted most-volatile-first (Volatile → Residual). Ties broken by artifact ID for determinism.
volatility_for
Returns the descriptor for a given artifact ID if it has been assessed.