Skip to main content

Crate vhdx_forensic

Crate vhdx_forensic 

Source
Expand description

VHDX forensic integrity analyser and in-memory repair tool.

Depends on the vhdx crate for container parsing. Exports VhdxIntegrity, VhdxRepair, and all anomaly/severity types.

§Layer

FORENSIC AUDIT — equivalent role to ewf-forensic for E01 images.

Re-exports§

pub use integrity::AnalysisSummary;
pub use integrity::VhdxIntegrity;
pub use integrity::VhdxIntegrityAnomaly;
pub use repair::CannotRepair;
pub use repair::RepairAction;
pub use repair::RepairReport;
pub use repair::VhdxRepair;

Modules§

integrity
repair

Structs§

VhdxReader
Read-only VHDX container reader.

Enums§

Severity
The canonical 5-level severity scale, shared across every SecurityRonin analyzer via forensicnomicon::report. Severity of a forensic finding (Info < Low < Medium < High < Critical).
VhdxError

Constants§

FILE_MAGIC
Well-known VHDX file magic (first 8 bytes of every VHDX file).

Functions§

anomalies_at_least
Return references to all anomalies whose severity is at or above min.
crc32c

Type Aliases§

Result