usnjrnl_forensic/lib.rs
1//! NTFS USN Journal parser with full path reconstruction via journal rewind.
2//!
3//! Implements the CyberCX "Rewind" algorithm for complete path resolution,
4//! even when MFT entries have been reallocated. Also provides direct binary
5//! parsing of $UsnJrnl:$J (V2/V3/V4), $MFT correlation, $MFTMirr comparison,
6//! and $LogFile gap detection.
7
8pub mod analysis;
9pub mod correlation;
10pub mod image;
11pub mod logfile;
12pub mod mft;
13pub mod mftmirr;
14pub mod monitor;
15pub mod output;
16pub mod refs;
17pub mod rewind;
18pub mod rules;
19pub mod triage;
20pub mod usn;