Expand description
Read-only NTFS Master File Table parsing primitives.
This crate intentionally parses exported record bytes and in-memory fixtures. It does not open volumes, require elevation, or provide deletion authority.
Re-exports§
pub use adapter::NtfsAttributeListEntry;pub use adapter::NtfsAttributeStream;pub use adapter::NtfsDataRun;pub use adapter::NtfsDirectoryEntry;pub use adapter::NtfsDirectoryEntrySource;pub use adapter::NtfsDirectoryIndex;pub use adapter::NtfsFileName;pub use adapter::NtfsFileReference;pub use adapter::NtfsIndexEntry;pub use adapter::NtfsParsedAttribute;pub use adapter::NtfsParsedRecord;pub use attrs::AttributeHeader;pub use attrs::AttributeType;pub use index::DirectoryEdge;pub use index::DirectoryEdgeConfidence;pub use index::DirectoryEdgeSequenceStatus;pub use index::DirectoryEdgeSource;pub use index::MftIndex;pub use index::MftIndexEntry;pub use index::MftPathCandidate;pub use index::PhysicalMetrics;pub use index::PhysicalMetricsAccumulator;pub use index::SubtreeSummary;pub use reader::MftRecordBatch;pub use reader::MftRecordError;pub use reader::MftRecordReader;pub use record::FileNameNamespace;pub use record::ParseCaveat;pub use record_set::NtfsRecordResolver;pub use record_set::NtfsRecordSet;pub use record_set::resolve_record_with_stream_source;pub use stream::NtfsStreamGeometry;pub use stream::NtfsStreamReadError;pub use stream::NtfsStreamReader;pub use stream::NtfsStreamSource;pub use stream::SparseRunPolicy;