Functions — github.com/ForensicRS/forensic-rs

hub / github.com/ForensicRS/forensic-rs / functions

Functions353 in github.com/ForensicRS/forensic-rs

⨍ Functions 353◇ Types & classes 95

↓ 40 callersMethodlen

(&self)

src/traits/vfs.rs:160

↓ 36 callersMethodinto

(self)

src/traits/registry/mod.rs:55

↓ 35 callersMethodinsert

(&mut self, field_name: Text, field_value: Field)

src/data.rs:71

↓ 33 callersMethodclone

(&self)

src/err.rs:57

↓ 32 callersMethodinto

(self)

src/artifact.rs:139

↓ 29 callersMethodtry_into

(self)

src/field/mod.rs:74

↓ 19 callersMethodtry_into

(self)

src/traits/sql.rs:52

↓ 18 callersMethoditer

(&self)

src/data.rs:216

↓ 16 callersMethodinto

(self)

src/traits/sql.rs:108

↓ 16 callersMethodvisit_str

(self, txt: &str)

src/artifact.rs:370

↓ 11 callersMethodclose_key

(&self, hkey: RegHiveKey)

src/traits/registry/mod.rs:223

↓ 10 callersMethodopen_key

( &self, _hkey: crate::traits::registry::RegHiveKey, _key_name

src/traits/registry/mod.rs:359

↓ 9 callersFunctionis_leap_year

(year: u16)

src/utils/time.rs:421

↓ 7 callersFunctionnormalize_prefix

(path : &Path)

src/core/fs/chroot.rs:29

↓ 7 callersFunctionreg_value

(reg_reader: &dyn RegistryReader, key: crate::prelude::RegHiveKey, value: &str, default: F)

src/traits/registry/extra/env_vars.rs:228

↓ 6 callersMethodread

(&self, i: usize)

src/traits/sql.rs:281

↓ 6 callersMethodread_value

( &self, _hkey: crate::traits::registry::RegHiveKey, _value_na

src/traits/registry/mod.rs:367

↓ 6 callersFunctiontimestamp_from

this is an error handling routine. - if `ts_res` contains a valid unix timestamp `ts`, then `Ok(Some(ts))` is returned - if `ts_res` contains a value

src/core/fs/stdfs.rs:15

↓ 5 callersMethodadd_value

(&mut self, path: &str, value: &str, data: RegValue)

src/utils/testing.rs:44

↓ 5 callersFunctionfiletime_to_system_time

Converts a Windows filetime to unix timestamp with millisecond precision ```rust use forensic_rs::utils::time::filetime_to_system_time; //Sat 3 Febru

src/utils/time.rs:297

↓ 5 callersFunctionto_years

(mut days : u128)

src/utils/time.rs:424

↓ 4 callersFunctionartifact_from_str

(txt : &str)

src/artifact.rs:602

↓ 4 callersFunctionchannel

()

src/channel.rs:117

↓ 4 callersMethodcontains

(&self, path: &str)

src/utils/testing.rs:60

↓ 4 callersFunctionipv4_from_str

(ipv4: &str)

src/field/utils.rs:3

↓ 4 callersFunctionreplace_user_profile

(txt : String, user_profile : &str)

src/traits/registry/extra/env_vars.rs:245

↓ 3 callersMethodcontains_key

(&self, path: &str)

src/utils/testing.rs:139

↓ 3 callersMethodfiletime

Returns the original filetime since 1601 ```rust use forensic_rs::prelude::*; let time = Filetime::new(125963224790010000); // 29-02-2000 18:27:59.001

src/utils/time.rs:200

↓ 3 callersMethodget_keys

(&self, path: &str)

src/utils/testing.rs:93

↓ 3 callersMethodget_values

(&self, path: &str)

src/utils/testing.rs:82

↓ 3 callersMethodinto

(self)

src/field/internal.rs:37

↓ 3 callersMethodinto_iter

(self)

src/traits/forensic.rs:109

↓ 3 callersFunctionipv6_from_str

(s: &str)

src/field/utils.rs:80

↓ 3 callersMethodis_dir

(&self)

src/traits/vfs.rs:154

↓ 3 callersMethodis_symlink

(&self)

src/traits/vfs.rs:157

↓ 3 callersMethodprepare

(&'a self, statement : &'a str)

src/traits/sql.rs:204

↓ 3 callersMethodsend

(&self, msg : T)

src/channel.rs:61

↓ 3 callersMethodskip

(&mut self, n: u32)

src/utils/win/decompress/xpress_huff.rs:118

↓ 2 callersMethodaccessed

Seconds elapsed since UNIX_EPOCH in UTC

src/traits/vfs.rs:121

↓ 2 callersFunctionbasic_cache

()

src/utils/testing.rs:367

↓ 2 callersMethodcreated

Seconds elapsed since UNIX_EPOCH in UTC

src/traits/vfs.rs:112

↓ 2 callersFunctiondecompress

(in_buf: &[u8], out_buf: &mut Vec<u8>)

src/utils/win/decompress/lz77.rs:3

↓ 2 callersFunctiondecompress

Inspired by https://raw.githubusercontent.com/Velocidex/go-prefetch/master/lzxpress.go

src/utils/win/decompress/xpress_huff.rs:5

↓ 2 callersMethodenumerate_keys

( &self, _hkey: crate::traits::registry::RegHiveKey, )

src/traits/registry/mod.rs:382

↓ 2 callersFunctioninterpolate_csidl_path

Interpolates paths that contains a CSIDL ```rust use forensic_rs::core::UserEnvVars; use forensic_rs::utils::win::csidl::interpolate_csidl_path; let

src/utils/win/csidl.rs:326

↓ 2 callersFunctionlinux_artifacts_from_str

(txt : &str)

src/artifact.rs:658

↓ 2 callersFunctionlinux_service_from_str

(txt : &str)

src/artifact.rs:671

↓ 2 callersMethodlookup

(&self, n: u32)

src/utils/win/decompress/xpress_huff.rs:112

↓ 2 callersMethodmodified

Seconds elapsed since UNIX_EPOCH in UTC

src/traits/vfs.rs:130

↓ 2 callersMethodnext

(&mut self)

src/traits/sql.rs:271

↓ 2 callersFunctionother_artifact_from_str

(txt : &str)

src/artifact.rs:717

↓ 2 callersMethodread_to_string

(&mut self, path: &Path)

src/core/fs/stdfs.rs:83

↓ 2 callersMethodrecv

(&self)

src/channel.rs:92

↓ 2 callersMethodrecv_timeout

(&self, duration : std::time::Duration)

src/channel.rs:104

↓ 2 callersFunctionregistry_artifacts_from_str

(txt : &str)

src/artifact.rs:638

↓ 2 callersFunctiontesting_logger_dummy

Use for fast initialization during testing

src/logging/mod.rs:85

↓ 2 callersFunctiontesting_notifier_dummy

Use for fast initialization during testing

src/notifications/mod.rs:74

↓ 2 callersFunctionwindows_artifacts_from_str

(txt : &str)

src/artifact.rs:616

↓ 2 callersFunctionwinevt_artifacts_from_str

(txt : &str)

src/artifact.rs:648

↓ 1 callersFunctionacumulated_day_month

(month : u8, year : u16)

src/utils/time.rs:407

↓ 1 callersFunctionbasic_registry

()

src/utils/testing.rs:382

↓ 1 callersMethodcmp

(&self, other: &Self)

src/utils/time.rs:664

↓ 1 callersMethodcmp

(&self, other: &Self)

src/utils/win/decompress/xpress_huff.rs:154

↓ 1 callersMethodcolumn_type

(&self, i: usize)

src/traits/sql.rs:261

↓ 1 callersFunctioncommon_artifact_from_str

(txt : &str)

src/artifact.rs:687

↓ 1 callersFunctioncontext

Gets the context of the analysis

src/context.rs:29

↓ 1 callersFunctioncsidl_value

(csidl: &str)

src/utils/win/csidl.rs:203

↓ 1 callersFunctiondays_from_year

(year : u16)

src/utils/time.rs:438

↓ 1 callersFunctiondecompress_chunk

( in_index: usize, in_buf: &[u8], out_index: usize, out_buf: &mut Vec<u8>, chunk_size: usi

src/utils/win/decompress/xpress_huff.rs:22

↓ 1 callersMethodduration_since

Returns the amount of time elapsed from an earlier point in time. This function may fail because measurements taken earlier are not guaranteed to alw

src/utils/time.rs:211

↓ 1 callersMethodexists

(&self, path: &Path)

src/traits/vfs.rs:36

↓ 1 callersMethodfield

(&self, field_name : &str)

src/data.rs:57

↓ 1 callersMethodfields

(&self)

src/data.rs:211

↓ 1 callersFunctionfiletime_to_unix_timestamp

Converts a Windows filetime to unix timestamp in milliseconds ```rust use forensic_rs::utils::time::filetime_to_unix_timestamp; //Sat 3 February 2024

src/utils/time.rs:283

↓ 1 callersMethodget_value

(&self, path: &str, value: &str)

src/utils/testing.rs:71

↓ 1 callersFunctionhex_to_digit

Convert an ASCII character that represents an hexadecimal digit into this digit

src/field/utils.rs:25

↓ 1 callersMethodincrease_counter

(&self)

src/utils/testing.rs:38

↓ 1 callersFunctioninitialize_context

Simplifys the creation of new events with the context of the analysis: artifact being processed, name of the machine where the artifacts came from and

src/context.rs:18

↓ 1 callersFunctioninitialize_logger

Initializes the logger for the current thread/component.

src/logging/mod.rs:74

↓ 1 callersFunctioninitialize_notifier

Initializes the Notifier for the current thread/component.

src/notifications/mod.rs:64

↓ 1 callersFunctioninterpolate_env_vars

(pth : &str, env_vars : &UserEnvVars, ret : &mut String)

src/core/mod.rs:6

↓ 1 callersFunctionipv4_to_str

(ipv4: u32)

src/field/utils.rs:239

↓ 1 callersFunctionipv4_to_u32_bytes

(ipv4: &[u8])

src/field/utils.rs:33

↓ 1 callersFunctionipv6_to_str

(ipv6: u128)

src/field/utils.rs:249

↓ 1 callersFunctionis_hex_digit

Check whether an ASCII character represents an hexadecimal digit

src/field/utils.rs:21

↓ 1 callersFunctionis_local_ipv4

(ip: u32)

src/field/utils.rs:255

↓ 1 callersFunctionis_local_ipv6

(ip: u128)

src/field/utils.rs:252

↓ 1 callersFunctionlist_all_profiles

(reg_reader: &dyn RegistryReader, system_root : &str)

src/traits/registry/extra/env_vars.rs:59

↓ 1 callersFunctionmac_artifact_from_str

(txt : &str)

src/artifact.rs:681

↓ 1 callersMethodmetadata

(&self)

src/core/fs/stdfs.rs:59

↓ 1 callersMethodopen

(&mut self, path: &Path)

src/core/fs/stdfs.rs:155

↓ 1 callersFunctionport_to_u16

(port: &str)

src/field/utils.rs:280

↓ 1 callersFunctionprefix_code_tree_add_leaf

( tree_nodes: &[Rc<RefCell<PrefixCodeNode>>], leaf_index: usize, mask: u32, bits: u32, )

src/utils/win/decompress/xpress_huff.rs:173

↓ 1 callersFunctionprefix_code_tree_decode_symbol

( bstr: &mut BitStream, root: Rc<RefCell<PrefixCodeNode>>, )

src/utils/win/decompress/xpress_huff.rs:267

↓ 1 callersFunctionprefix_code_tree_rebuild

(input: &[u8])

src/utils/win/decompress/xpress_huff.rs:209

↓ 1 callersFunctionprepare_db

()

src/traits/sql.rs:305

↓ 1 callersFunctionprepare_wrapper

(connection :Connection)

src/traits/sql.rs:318

↓ 1 callersFunctionprogram_data

(reg_reader: &dyn RegistryReader)

src/traits/registry/extra/env_vars.rs:110

↓ 1 callersFunctionprogram_files

(reg_reader: &dyn RegistryReader)

src/traits/registry/extra/env_vars.rs:126

↓ 1 callersMethodread_all

(&mut self, path: &Path)

src/core/fs/stdfs.rs:87

next →1–100 of 353, ranked by callers