Expand description
§mbr-core
Pure-Rust, read-only Master Boot Record (MBR) parser. Decodes the on-disk
structures — the 512-byte boot sector, the four primary partition entries,
Extended Boot Record (EBR) chains, CHS/LBA geometry, GPT and VBR
cross-validation primitives, boot-code identity, and filesystem
fingerprints — with no I/O beyond a caller-supplied Read + Seek.
This crate is the structure-decode layer. It deliberately contains no
anomaly findings: the forensic analyzer that turns these structures into
graded observations lives in the sibling mbr-forensic crate, which
re-exports every type here.
use mbr::parse_mbr_sector;
// Pure parsing from a 512-byte buffer (no I/O required):
let buf = [0u8; 512];
let sector = parse_mbr_sector(&buf)?;Re-exports§
pub use boot_code::identify as identify_boot_code;pub use boot_code::BootCodeId;pub use disk_signature::find_signature_collisions;pub use disk_signature::SignatureCollision;pub use ebr::walk_ebr_chain;pub use ebr::EbrChain;pub use ebr::EbrEntry;pub use mbr::parse_mbr_sector;pub use mbr::MbrSector;pub use mbr::SECTOR_SIZE;pub use partition::Chs;pub use partition::ChsConsistency;pub use partition::PartitionEntry;pub use partition::PartitionFamily;pub use partition::TypeCode;pub use signature::detect as detect_fs;pub use signature::DetectedFs;
Modules§
- boot_
code - Boot code identification by fingerprinting the first 446 bytes of the MBR.
- carve
- File-signature carving and string extraction over raw byte regions.
- diag
- Internal diagnostics — a single, greppable home for every trace event.
- disk_
signature - NT disk-signature (offset 440) cross-disk analysis.
- ebr
- Extended Boot Record (EBR) chain traversal and forensic inspection.
- gpt
- GPT/MBR cross-validation primitives.
- mbr
- 512-byte MBR sector parsing — pure
&[u8]interface, no I/O. - partition
- MBR partition entry types and partition-type-code semantics.
- signature
- Filesystem magic-byte detection from the first sector of a partition.
- vbr
- Volume Boot Record (VBR) / BIOS Parameter Block parsing.
Enums§
- Error
- Crate-level error type.