def __init__(self, **kwargs):
kwargs['name'] = "Attachment"
kwargs['column'] = 'indirect'
link = FlagFramework.query_type(case=kwargs.get('case'),
family='Disk Forensics',
report='ViewFile',
mode='Summary',
__target__='inode_id')
kwargs['link'] = link
kwargs['link_pane'] = 'popup'
IntegerType.__init__(self, **kwargs)
def __init__(self, **kwargs):
kwargs['name']="Attachment"
kwargs['column'] = 'indirect'
link = FlagFramework.query_type(case=kwargs.get('case'),
family='Disk Forensics',
report='ViewFile',
mode = 'Summary',
__target__ = 'inode_id')
kwargs['link'] = link
kwargs['link_pane'] = 'popup'
IntegerType.__init__(self, **kwargs)
table='dictionary',
## Class names starting with _ are private and should not
## be user selectable:
where="left(class,1) != '_' ",
case=None,
)
result.row(table, form, valign='top')
class OffsetType(IntegerType):
hidden = True
LogCompatible = False
def __init__(self, case, table='LogicalIndexOffsets'):
self.case = case
IntegerType.__init__(self, name='Offset', column='offset', table=table)
def select(self):
return "concat(%s, ',', %s)" % (self.escape_column_name('offset'),
self.escape_column_name('length'))
def display(self, value, row, result):
offset, length = value.split(",")
inode = row['Inode']
query = query_type(case=self.case,
family="Disk Forensics",
report='ViewFile',
mode='HexDump',
inode_id=inode,
offset=offset,
hexlimit=max(int(offset) - 50, 0),
def __init__(self, case, table='LogicalIndexOffsets'):
self.case = case
IntegerType.__init__(self, name='Offset',
column='offset',
table=table)
