Skip to main content

parse_volume_info_cache

Function parse_volume_info_cache 

Source
pub fn parse_volume_info_cache(
    hive: &Hive<Cursor<Vec<u8>>>,
    file: &str,
) -> Vec<VolumeLabel>
Expand description

Parse VolumeInfoCache volume labels from an already-opened SOFTWARE hive.

Total over a valid hive: a subkey that is not a X: drive letter, or that carries no non-empty string VolumeLabel, is skipped rather than panicked on. file is recorded as each record’s Provenance file (the hive name, e.g. SOFTWARE).