List of all items

Structs

• AnalyseOptions
• bootkit::BootkitMarker
• carve::CarvedFile
• carve::FileMagic
• disk_signature::SignatureCollision
• ebr::EbrChain
• ebr::EbrEntry
• findings::Anomaly
• findings::MbrAnalysis
• findings::PartitionSummary
• gap::Gap
• mbr::MbrSector
• partition::Chs
• partition::PartitionEntry
• partition::TypeCode
• vbr::Bpb

Enums

• Error
• boot_code::BootCodeId
• findings::AnomalyKind
• findings::Severity
• gap::GapKind
• partition::ChsConsistency
• partition::PartitionFamily
• provenance::Alignment
• provenance::PartitioningEra
• signature::DetectedFs
• wipe::FillPattern

Functions

• analyse
• analyse_with_options
• boot_code::identify
• bootkit::scan
• carve::carve
• carve::extract_ascii_strings
• disk_signature::find_signature_collisions
• ebr::walk_ebr_chain
• entropy::is_uniform
• entropy::shannon
• gap::compute_gaps
• gpt::has_gpt_header
• mbr::parse_mbr_sector
• partition::chs_consistency
• provenance::classify_alignment
• provenance::infer_era
• report::text_report
• signature::detect
• signature::type_conflicts
• vbr::parse_bpb
• wipe::classify

Constants

• bootkit::KNOWN_SIGNATURES
• carve::FILE_MAGICS
• entropy::HIGH_ENTROPY_THRESHOLD
• gpt::GPT_HEADER_MAGIC
• gpt::PROTECTIVE_TYPE_CODE
• mbr::BOOT_CODE_LEN
• mbr::SECTOR_SIZE
• partition::STD_HEADS_PER_CYL
• partition::STD_SECTORS_PER_TRACK