Skip to main content

parse_mountpoints2

Function parse_mountpoints2 

Source
pub fn parse_mountpoints2(
    hive: &Hive<Cursor<Vec<u8>>>,
    file: &str,
) -> Vec<UserMount>
Expand description

Parse per-user MountPoints2 volume mounts from an already-opened NTUSER.DAT hive. Total over a valid hive: a non-{GUID} mount name (a UNC/##server#share entry) is skipped, never panicked on. file is recorded as each record’s Provenance file.