def is_valid_for(self, target_file: TargetPath): if target_file.is_file(): if "ASCII text" in target_file.get_type(): return True if "UTF-8 Unicode text" in target_file.get_type(): return True return False
def is_valid_for(self, target_file: TargetPath): if target_file.is_file(): if "JPEG image data" in target_file.get_type(): return True elif "PNG image data" in target_file.get_type(): return True elif "GIF image data" in target_file.get_type(): return True return False
def is_valid_for(self, target_file: TargetPath): if "Event Log" in target_file.get_type() and \ target_file.is_file() and \ isinstance(target_file, TargetFile) and \ target_file.get_extension() == ".evtx": return True return False
def is_valid_for(self, target_file: TargetPath): if target_file.is_file(): if "PDF document" in target_file.get_type(): return True elif "Composite Document" in target_file.get_type(): return True elif "OpenDocument" in target_file.get_type(): return True elif "Microsoft Word" in target_file.get_type(): return True elif "Microsoft Excel" in target_file.get_type(): return True elif "Microsoft PowerPoint" in target_file.get_type(): return True if isinstance(target_file, TargetFile): if target_file.get_extension() in [ ".pages", ".numbers", ".keynote" ]: return True return False
def is_valid_for(self, target_file: TargetPath): if target_file.is_file(): if ("Zip archive data" in target_file.get_type()): return True return False
def is_valid_for(self, target_file: TargetPath): if "Windows registry" in target_file.get_type() and \ target_file.is_file(): return True return False
def is_valid_for(self, target_file: TargetPath): if target_file.is_file( ) and "Microsoft Outlook email" in target_file.get_type(): return True return False
def is_valid_for(self, target_file: TargetPath): if target_file.is_file(): if "SQLite" in target_file.get_type() and ("History" in target_file.get_name() \ or "places" in target_file.get_name()): return True return False
def is_valid_for(self, target_file: TargetPath): if target_file.is_file(): if "data" in target_file.get_type( ) and "MFT" in target_file.get_name(): return True return False