Struct ResolvedRecord 

pub struct ResolvedRecord {
    pub record: UsnRecord,
    pub full_path: String,
    pub parent_path: String,
    pub source: RecordSource,
}

Result of path resolution for a single USN record.

Fields

record: UsnRecord

The original USN record.

full_path: String

The fully resolved path (e.g. “.\Users\admin\temp\malware.exe”).

parent_path: String

The resolved parent path (e.g. “.\Users\admin\temp”).

source: RecordSource

Where this record originated (allocated journal, carved, or ghost).

Trait Implementations

impl Clone for ResolvedRecord

fn clone(&self) -> ResolvedRecord

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ResolvedRecord

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.