Crate veracrypt_forensic 

veracrypt-forensic — VeraCrypt/TrueCrypt volume anomaly auditor

Observations over an unlocked volume’s recovered facts: flavor (VeraCrypt vs legacy TrueCrypt), the PRF/cipher in use, and whether the header advertises a hidden volume. Findings are observations, never verdicts.

Structs

Anomaly

A classified observation with a stable code and note.

Enums

Severity

Severity of a VeraCrypt finding.

Functions

audit

Audit an unlocked volume’s VolumeInfo plus its declared hidden-volume size.