Enum RecordSource 

pub enum RecordSource {
    Allocated,
    Carved,
    Ghost,
}

Where a resolved record originated.

Variants

Allocated

From the live (allocated) USN journal.

Carved

Carved from unallocated disk space.

Ghost

Ghost record inferred from MFT/journal correlation.

Implementations

impl RecordSource

pub fn as_str(&self) -> &'static str

Returns the lowercase label used in serialization and source filters.

Trait Implementations

impl Clone for RecordSource

fn clone(&self) -> RecordSource

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for RecordSource

impl Debug for RecordSource

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for RecordSource

impl PartialEq for RecordSource

fn eq(&self, other: &RecordSource) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for RecordSource