예제 #1
0
파일: macuser.py 프로젝트: tincho9/plaso
    def testProcess(self):
        """Tests the Process function."""
        plist_name = 'user.plist'

        plugin = macuser.MacUserPlugin()
        storage_writer = self._ParsePlistFileWithPlugin(
            plugin, [plist_name], plist_name)

        self.assertEqual(storage_writer.number_of_events, 1)

        # The order in which PlistParser generates events is nondeterministic
        # hence we sort the events.
        events = list(storage_writer.GetSortedEvents())

        event = events[0]

        self.CheckTimestamp(event.timestamp, '2013-12-28 04:35:47.000000')

        self.assertEqual(event.key, 'passwordLastSetTime')
        self.assertEqual(event.root, '/')
        expected_description = (
            'Last time user (501) changed the password: '******'$ml$37313$fa6cac1869263baa85cffc5e77a3d4ee164b7'
            '5536cae26ce8547108f60e3f554$a731dbb0e386b169af8'
            '9fbb33c255ceafc083c6bc5194853f72f11c550c42e4625'
            'ef113b66f3f8b51fc3cd39106bad5067db3f7f1491758ff'
            'e0d819a1b0aba20646fd61345d98c0c9a411bfd1144dd4b'
            '3c40ec0f148b66d5b9ab014449f9b2e103928ef21db6e25'
            'b536a60ff17a84e985be3aa7ba3a4c16b34e0d1d2066ae178')
        self.assertEqual(event.desc, expected_description)

        expected_string = '//passwordLastSetTime {}'.format(
            expected_description)
        expected_short = '{0:s}...'.format(expected_string[:77])
        self._TestGetMessageStrings(event, expected_string, expected_short)
예제 #2
0
    def testProcess(self):
        """Tests the Process function."""
        plist_name = 'user.plist'

        plugin = macuser.MacUserPlugin()
        storage_writer = self._ParsePlistFileWithPlugin(
            plugin, [plist_name], plist_name)

        self.assertEqual(storage_writer.number_of_warnings, 0)
        self.assertEqual(storage_writer.number_of_events, 1)

        # The order in which PlistParser generates events is nondeterministic
        # hence we sort the events.
        events = list(storage_writer.GetSortedEvents())

        expected_event_values = {
            'data_type':
            'plist:key',
            'desc': ('Last time user (501) changed the password: '******'$ml$37313$fa6cac1869263baa85cffc5e77a3d4ee164b7'
                     '5536cae26ce8547108f60e3f554$a731dbb0e386b169af8'
                     '9fbb33c255ceafc083c6bc5194853f72f11c550c42e4625'
                     'ef113b66f3f8b51fc3cd39106bad5067db3f7f1491758ff'
                     'e0d819a1b0aba20646fd61345d98c0c9a411bfd1144dd4b'
                     '3c40ec0f148b66d5b9ab014449f9b2e103928ef21db6e25'
                     'b536a60ff17a84e985be3aa7ba3a4c16b34e0d1d2066ae178'),
            'key':
            'passwordLastSetTime',
            'root':
            '/',
            'timestamp':
            '2013-12-28 04:35:47.000000'
        }

        self.CheckEventValues(storage_writer, events[0], expected_event_values)
예제 #3
0
 def setUp(self):
   """Sets up the needed objects used throughout the test."""
   self._plugin = macuser.MacUserPlugin()
   self._parser = plist.PlistParser()
예제 #4
0
 def setUp(self):
     """Makes preparations before running an individual test."""
     self._plugin = macuser.MacUserPlugin()
     self._parser = plist.PlistParser()
예제 #5
0
 def setUp(self):
     """Sets up the needed objects used throughout the test."""
     self._plugin = macuser.MacUserPlugin(None)
     self._parser = plist.PlistParser(event.PreprocessObject(), None)