Expand description
Adapter: peripheral-core VolumeLabels (Windows VolumeInfoCache) → USB-history
Claims.
VolumeInfoCache records the label a user gave a volume against the drive letter it
was mounted at. That label is a Attribute::VolumeName fact keyed by the drive
letter; the correlation layer’s drive-letter reconciliation then attributes it to the
device that MountedDevices maps to that letter, so a stick’s human-readable name
(“Authorized USB”) lands on the stick. A pure mapping over already-decoded records.
Structs§
- Volume
Cache Source - A
HistorySourceover decodedVolumeLabels.