def main():
args_parser = argparse.ArgumentParser(description="Tests get_version.")
options = args_parser.parse_args()
try:
pyesedb.get_version()
except Exception:
return False
return True
def test_get_version(self):
"""Tests the get_version function."""
version = pyesedb.get_version()
self.assertIsNotNone(version)
def test_get_version(self):
"""Tests the get_version function."""
version = pyesedb.get_version()
def test_get_version(self): """Tests the get_version function.""" version = pyesedb.get_version()
# -*- coding: utf-8 -*-
"""Parser for Extensible Storage Engine (ESE) database files (EDB)."""
import logging
import pyesedb
from plaso.lib import errors
from plaso.lib import specification
from plaso.parsers import interface
from plaso.parsers import manager
from plaso.parsers import plugins
if pyesedb.get_version() < '20140301':
raise ImportWarning(u'EseDbParser requires at least pyesedb 20140301.')
class EseDbCache(plugins.BasePluginCache):
"""A cache storing query results for ESEDB plugins."""
def StoreDictInCache(self, attribute_name, dict_object):
"""Store a dict object in cache.
Args:
attribute_name: The name of the attribute.
dict_object: A dict object.
"""
setattr(self, attribute_name, dict_object)
class EseDbParser(interface.SingleFileBasePluginsParser):
"""Parses Extensible Storage Engine (ESE) database files (EDB)."""
# -*- coding: utf-8 -*-
"""Script to extract an ESE database catalog."""
from __future__ import print_function
from __future__ import unicode_literals
import argparse
import logging
import os
import sys
import pyesedb
import database
if pyesedb.get_version() < '20140406':
raise ImportWarning('extract.py requires pyesedb 20140406 or later.')
COLUMN_TYPE_DESCRIPTIONS = {
pyesedb.column_types.NULL: 'Null',
pyesedb.column_types.BOOLEAN: 'Boolean',
pyesedb.column_types.INTEGER_8BIT_UNSIGNED: 'Integer 8-bit unsigned',
pyesedb.column_types.INTEGER_16BIT_SIGNED: 'Integer 16-bit signed',
pyesedb.column_types.INTEGER_32BIT_SIGNED: 'Integer 32-bit signed',
pyesedb.column_types.CURRENCY: 'Currency',
pyesedb.column_types.FLOAT_32BIT: 'Floating point 32-bit',
pyesedb.column_types.DOUBLE_64BIT: 'Floating point 64-bit',
pyesedb.column_types.DATE_TIME: 'Filetime',
pyesedb.column_types.BINARY_DATA: 'Binary data',
pyesedb.column_types.TEXT: 'Text',
pyesedb.column_types.LARGE_BINARY_DATA: 'Large binary data',
# -*- coding: utf-8 -*-
"""Parser for Extensible Storage Engine (ESE) database files (EDB)."""
import logging
import pyesedb
from plaso.lib import errors
from plaso.lib import specification
from plaso.parsers import interface
from plaso.parsers import manager
from plaso.parsers import plugins
if pyesedb.get_version() < '20150409':
raise ImportWarning(u'EseDbParser requires at least pyesedb 20150409.')
class EseDbCache(plugins.BasePluginCache):
"""A cache storing query results for ESEDB plugins."""
def StoreDictInCache(self, attribute_name, dict_object):
"""Store a dict object in cache.
Args:
attribute_name: The name of the attribute.
dict_object: A dict object.
"""
setattr(self, attribute_name, dict_object)
"""Parser for Extensible Storage Engine (ESE) database Files (EDB)."""
import logging
import pyesedb
from plaso.lib import errors
from plaso.lib import parser
from plaso.lib import plugin
from plaso.parsers.esedb_plugins import interface
# This import is necessary to register all the ESEDB plugins.
from plaso.parsers import esedb_plugins # pylint: disable=unused-import
if pyesedb.get_version() < '20140301':
raise ImportWarning(u'EseDbParser requires at least pyesedb 20140301.')
class EseDbParser(parser.BaseParser):
"""Parses Extensible Storage Engine (ESE) database Files (EDB)."""
NAME = 'esedb'
def __init__(self, pre_obj, config):
"""Initializes the parser.
Args:
pre_obj: pre-parsing object.
config: configuration object.
"""
"""Script to extract an ESE database catalog."""
from __future__ import print_function
from __future__ import unicode_literals
import argparse
import logging
import os
import sys
import pyesedb
import database
if pyesedb.get_version() < '20140406':
raise ImportWarning('extract.py requires pyesedb 20140406 or later.')
COLUMN_TYPE_DESCRIPTIONS = {
pyesedb.column_types.NULL: 'Null',
pyesedb.column_types.BOOLEAN: 'Boolean',
pyesedb.column_types.INTEGER_8BIT_UNSIGNED: 'Integer 8-bit unsigned',
pyesedb.column_types.INTEGER_16BIT_SIGNED: 'Integer 16-bit signed',
pyesedb.column_types.INTEGER_32BIT_SIGNED: 'Integer 32-bit signed',
pyesedb.column_types.CURRENCY: 'Currency',
pyesedb.column_types.FLOAT_32BIT: 'Floating point 32-bit',
pyesedb.column_types.DOUBLE_64BIT: 'Floating point 64-bit',
pyesedb.column_types.DATE_TIME: 'Filetime',
pyesedb.column_types.BINARY_DATA: 'Binary data',
pyesedb.column_types.TEXT: 'Text',
# -*- coding: utf-8 -*-
"""Parser for Extensible Storage Engine (ESE) database files (EDB)."""
import logging
import pyesedb
from plaso.lib import errors
from plaso.lib import specification
from plaso.parsers import interface
from plaso.parsers import manager
from plaso.parsers import plugins
if pyesedb.get_version() < '20150409':
raise ImportWarning(u'EseDbParser requires at least pyesedb 20150409.')
class EseDbCache(plugins.BasePluginCache):
"""A cache storing query results for ESEDB plugins."""
def StoreDictInCache(self, attribute_name, dict_object):
"""Store a dict object in cache.
Args:
attribute_name: The name of the attribute.
dict_object: A dict object.
"""
setattr(self, attribute_name, dict_object)
class EseDbParser(interface.SingleFileBasePluginsParser):
"""Parses Extensible Storage Engine (ESE) database files (EDB)."""