pub fn parse_registry(
hive: &Hive<Cursor<Vec<u8>>>,
file: &str,
) -> Vec<DeviceConnection>Expand description
Parse USB / SCSI / USBSTOR device instances from an already-opened SYSTEM hive.
The caller opens the hive (a bootstrap step that must fail loudly on its own); this
function walks it and is total over a valid hive — a malformed subkey is skipped, not
panicked on. file is recorded as the Provenance file (the
hive name, e.g. SYSTEM); each record also carries its full key path.