Functions — github.com/ForensicRS/forensic-rs

hub / github.com/ForensicRS/forensic-rs / functions

Functions353 in github.com/ForensicRS/forensic-rs

⨍ Functions 353◇ Types & classes 95

Methodfrom_u32

(v : u32)

src/traits/registry/mod.rs:46

src/traits/registry/mod.rs:49

Functionget_env_vars_of_users

Extract the principal environment variables for all users which have a profile: USERPROFILE SystemRoot windir SystemDrive ProgramFiles ProgramData Pro

src/traits/registry/extra/env_vars.rs:24

Methodget_system_root

Get the same value as the env var "%SystemRoot%"". It's usually "C:\Windows"

src/traits/registry/mod.rs:226

Methodhas_field

(&self, field_name : &str)

src/data.rs:61

Methodhash

(&self, state: &mut H)

Returns the hour number ```rust use forensic_rs::prelude::*; let time = Filetime::new(125963224790010000); // 29-02-2000 18:27:59.001 assert_eq!(18,

src/utils/time.rs:151

Methodi64_field

Obtains the casted value of the field into i64 and caches it

src/data.rs:75

Functioninit_testing_logger

()

src/utils/testing.rs:417

Methodip_field

Obtains the casted value of the field into IP and caches it

src/data.rs:132

Methodis_file

(&self)

src/traits/vfs.rs:151

Functionis_ipv4

(text: &str)

src/field/utils.rs:303

Functionis_ipv4_port

(text: &str)

src/field/utils.rs:297

Functionis_ipv6

(text: &str)

src/field/utils.rs:306

Methodis_live

(&self)

src/core/fs/stdfs.rs:151

Methodis_live

(&self)

src/core/fs/chroot.rs:74

Functioniterate_fields_test

()

src/data.rs:350

Methodkey_at

( &self, hkey: crate::traits::registry::RegHiveKey, pos: u32, )

src/utils/testing.rs:308

Methodkey_at

( &self, _hkey: crate::traits::registry::RegHiveKey, _pos: u32

src/traits/registry/mod.rs:389

Methodkey_info

(&self, hkey: RegHiveKey)

src/utils/testing.rs:346

Methodkey_info

(&self, _hkey: crate::traits::registry::RegHiveKey)

src/traits/registry/mod.rs:404

Methodlist_tables

(&self)

src/traits/sql.rs:215

Methodlist_users

(&self)

src/traits/registry/mod.rs:235

Methodlog

(&self, level : Level, module : &'static str, file : &'static str, line : u32, data : Cow<'static, str>)

src/logging/mod.rs:35

Functionmax_level

()

src/logging/mod.rs:65

Methodmetadata

(&mut self, path: &Path)

src/core/fs/chroot.rs:86

Methodmetadata_path

Get the metadata of a file/dir

src/traits/vfs.rs:63

Methodmillis

Returns the second number ```rust use forensic_rs::prelude::*; let time = Filetime::new(125963224790010000); // 29-02-2000 18:27:59.001 assert_eq!(1,

src/utils/time.rs:181

Methodmilliseconds

Obtain the millisecond part ```rust use forensic_rs::prelude::*; let time = WinFiletime(125963224790010000); // 29-02-2000 18:27:59.001 assert_eq!(1,

src/utils/time.rs:635

Methodminute

Returns the minute number ```rust use forensic_rs::prelude::*; let time = Filetime::new(125963224790010000); // 29-02-2000 18:27:59.001 assert_eq!(27

src/utils/time.rs:161

Methodmissing_str

Create a MissingError from a static string slice

src/err.rs:47

Methodmissing_string

Create a MissingError from a String

src/err.rs:51

Methodmodified_opt

Seconds elapsed since UNIX_EPOCH in UTC

src/traits/vfs.rs:148

Methodmonth

Returns the month number ```rust use forensic_rs::prelude::*; let time = Filetime::new(125963224790010000); // 29-02-2000 18:27:59.001 assert_eq!(2,

src/utils/time.rs:131

Methodname

(&self)

src/traits/forensic.rs:83

Methodnanoseconds

Returns the nanoseconds number ```rust use forensic_rs::prelude::*; let time = Filetime::new(125963224790010000); // 29-02-2000 18:27:59.001 assert_e

src/utils/time.rs:191

Methodnew

(sender : std::sync::mpsc::Sender<T>)

src/channel.rs:55

Methodnew

(executable : String)

src/activity.rs:34

Methodnew

(host : &str, artifact : Artifact)

src/data.rs:31

Methodnew

(sender : Sender<Notification>)

src/notifications/mod.rs:36

Methodnew

Makes a new Filetime from windows u64 filetime

src/utils/time.rs:50

Methodnew

()

src/utils/testing.rs:31

Methodnew

(source: &'a [u8], in_pos: usize)

src/utils/win/decompress/xpress_huff.rs:95

Methodnew

(sender : Sender<Message>)

src/logging/mod.rs:30

Methodnew

()

src/core/fs/stdfs.rs:39

Methodnew

Creates a new ChRoot file system ``` use forensic_rs::prelude::*; use std::path::Path; let chrfs = ChRootFileSystem::new(Path::new("C:\\"), Box::new(

src/core/fs/chroot.rs:19

Methodnew

(conn : Connection)

src/traits/sql.rs:196

Methodnew

(field : Field)

src/field/internal.rs:27

Methodnew_sync

(sender : std::sync::mpsc::SyncSender<T>)

src/traits/forensic.rs:99

Methodnotify

(&self, priority: Priority, r#type : NotificationType, module : &'static str, file : &'static str, line : u32,

src/notifications/mod.rs:41

Methodopen

(&mut self, path : &Path)

src/core/fs/chroot.rs:102

Methodopen_key

( &self, hkey: crate::traits::registry::RegHiveKey, key_name: &str, )

src/utils/testing.rs:241

Methodopen_path

Open a file

src/traits/vfs.rs:73

Functionparse_ipv4_port

(text: &str)

src/field/utils.rs:287

Methodpartial_cmp

(&self, other: &Self)

src/utils/time.rs:658

Methodpartial_cmp

(&self, other: &Self)

src/utils/win/decompress/xpress_huff.rs:160

Methodread

(&mut self, buf: &mut [u8])

src/core/fs/stdfs.rs:49

Methodread

(& mut self, path: &Path, pos: u64, buf: & mut [u8])

src/core/fs/chroot.rs:82

Methodread_all

(&mut self, path: &Path)

src/core/fs/chroot.rs:78

Methodread_all_path

Read the entire contents of a file into a bytes vector.

src/traits/vfs.rs:48

Methodread_dir

(&mut self, path: &Path)

src/core/fs/chroot.rs:90

Methodread_dir_path

Lists the contents of a Directory

src/traits/vfs.rs:68

Methodread_path

Read part of the content of a file into a mutable byte slice

src/traits/vfs.rs:53

Methodread_to_string_path

Read the entire contents of a file into a string.

src/traits/vfs.rs:43

Methodread_value

( &self, hkey: crate::traits::registry::RegHiveKey, value_name: &str, )

src/utils/testing.rs:265

Methodsecond

Returns the second number ```rust use forensic_rs::prelude::*; let time = Filetime::new(125963224790010000); // 29-02-2000 18:27:59.001 assert_eq!(59

src/utils/time.rs:171

Methodseek

(&mut self, pos: std::io::SeekFrom)

src/core/fs/stdfs.rs:54

Methodserialize

(&self, serializer: S)

src/artifact.rs:289

Methodserialize

(&self, serializer: S)

src/data.rs:306

Methodserialize

(&self, serializer: S)

src/field/ip.rs:58

Methodserialize

(&self, serializer: S)

src/field/mod.rs:284

Functionset_artifact

Changes the type of artifact being processed by the current thread

src/context.rs:34

Functionset_host

Change the name of the computer for which artifacts are being processed by the current thread

src/context.rs:50

Functionset_max_level

(level: Level)

src/logging/mod.rs:56

Functionset_tenant

Change the tenant ID for which artifacts are being processed by the current thread

src/context.rs:43

Functionshould_allow_boxing

()

src/core/fs/stdfs.rs:216

Functionshould_allow_boxing

()

src/core/fs/chroot.rs:151

Functionshould_convert_using_try_into

()

src/traits/registry/mod.rs:289

Functionshould_exists_c_windows

()

src/core/fs/chroot.rs:164

Functionshould_generate_dummy_registry_reader

()

src/traits/registry/mod.rs:342

Functionshould_generate_valid_filetime

()

src/utils/time.rs:728

Functionshould_generate_valid_sids

()

src/utils/win/sid.rs:61

Functionshould_generate_valid_windows_timestamps

()

src/utils/time.rs:670

Functionshould_initialize_log_with_context

()

src/context.rs:58

Functionshould_interpolate_complex_env_vars_with_csidl

()

src/utils/win/csidl.rs:342

Functionshould_iterate_parser

()

src/traits/forensic.rs:115

Functionshould_parse_ip_from_u8_array

()

src/field/utils.rs:329

Functionshould_parse_ips

()

src/field/utils.rs:315

Functionshould_parse_socket

()

src/field/utils.rs:357

Functionshould_serialize_data

()

src/data.rs:364

Functionshould_transform_to_calendar

()

src/utils/time.rs:688

Functionshould_transform_unix_to_calendar

()

src/utils/time.rs:715

Functionsplit_path

(chr : char)

src/core/fs/chroot.rs:51

Methodsub

(self, rhs: Duration)

src/utils/time.rs:269

← previous next →201–300 of 353, ranked by callers