Skip to main content

Crate mbr

Crate mbr 

Source
Expand description

§mbr-core

Pure-Rust, read-only Master Boot Record (MBR) parser. Decodes the on-disk structures — the 512-byte boot sector, the four primary partition entries, Extended Boot Record (EBR) chains, CHS/LBA geometry, GPT and VBR cross-validation primitives, boot-code identity, and filesystem fingerprints — with no I/O beyond a caller-supplied Read + Seek.

This crate is the structure-decode layer. It deliberately contains no anomaly findings: the forensic analyzer that turns these structures into graded observations lives in the sibling mbr-forensic crate, which re-exports every type here.

use mbr::parse_mbr_sector;

// Pure parsing from a 512-byte buffer (no I/O required):
let buf = [0u8; 512];
let sector = parse_mbr_sector(&buf)?;

Re-exports§

pub use boot_code::identify as identify_boot_code;
pub use boot_code::BootCodeId;
pub use disk_signature::find_signature_collisions;
pub use disk_signature::SignatureCollision;
pub use ebr::walk_ebr_chain;
pub use ebr::EbrChain;
pub use ebr::EbrEntry;
pub use mbr::parse_mbr_sector;
pub use mbr::MbrSector;
pub use mbr::SECTOR_SIZE;
pub use partition::Chs;
pub use partition::ChsConsistency;
pub use partition::PartitionEntry;
pub use partition::PartitionFamily;
pub use partition::TypeCode;
pub use signature::detect as detect_fs;
pub use signature::DetectedFs;

Modules§

boot_code
Boot code identification by fingerprinting the first 446 bytes of the MBR.
carve
File-signature carving and string extraction over raw byte regions.
diag
Internal diagnostics — a single, greppable home for every trace event.
disk_signature
NT disk-signature (offset 440) cross-disk analysis.
ebr
Extended Boot Record (EBR) chain traversal and forensic inspection.
gpt
GPT/MBR cross-validation primitives.
mbr
512-byte MBR sector parsing — pure &[u8] interface, no I/O.
partition
MBR partition entry types and partition-type-code semantics.
signature
Filesystem magic-byte detection from the first sector of a partition.
vbr
Volume Boot Record (VBR) / BIOS Parameter Block parsing.

Enums§

Error
Crate-level error type.