Struct FileName 

pub struct FileName {
    pub parent: FileReference,
    pub created: Filetime,
    pub modified: Filetime,
    pub mft_modified: Filetime,
    pub accessed: Filetime,
    pub allocated_size: u64,
    pub real_size: u64,
    pub flags: u32,
    pub namespace: u8,
    pub name: String,
}

Parsed $FILE_NAME value.

Fields

parent: FileReference

Reference to the parent directory.

created: Filetime

Creation time.

modified: Filetime

File content modification time.

mft_modified: Filetime

MFT record modification time.

accessed: Filetime

Last access time.

allocated_size: u64

Allocated size of the file, in bytes.

real_size: u64

Real (logical) size of the file, in bytes.

flags: u32

FILE_ATTRIBUTE_* flags.

namespace: u8

Namespace code (see forensicnomicon::ntfs::filename_namespace).

name: String

The decoded file name.

Implementations

impl FileName

pub fn namespace_name(&self) -> Option<&'static str>

Human-readable namespace name, if recognised.

pub fn is_dos_namespace(&self) -> bool

true if this is the short DOS (8.3) name — the one tools often omit when listing, and which carries its own timestamps.

pub fn parse(content: &[u8]) -> Result<FileName>

Parse a $FILE_NAME value from its resident content bytes.

Errors

NtfsError::TooShort when smaller than the fixed header, or NtfsError::BadAttribute when the name runs past the content.

Trait Implementations

impl Clone for FileName

fn clone(&self) -> FileName

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FileName

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for FileName

impl PartialEq for FileName

fn eq(&self, other: &FileName) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for FileName