Пример #1
0
 def setUp(self):
   super().setUp()
   self.client_mock = action_mocks.FileFinderClientMockWithTimestamps()
   self.fixture_path = os.path.join(self.base_path, "searching")
   self.path = os.path.join(self.fixture_path, "*.log")
   self.client_id = self.SetupClient(0)
   vfs.Init()
Пример #2
0
    def setUp(self):
        super().setUp()
        self.client_id = self.SetupClient(0)
        self.client_mock = action_mocks.FileFinderClientMockWithTimestamps()

        stack = contextlib.ExitStack()
        self.files = stack.enter_context(SetUpTestFiles())
        self.addCleanup(stack.close)
Пример #3
0
    def testFileFinderResultExportConverterConvertsContent(self):
        client_mock = action_mocks.FileFinderClientMockWithTimestamps()

        action = rdf_file_finder.FileFinderAction(
            action_type=rdf_file_finder.FileFinderAction.Action.DOWNLOAD)

        path = os.path.join(self.base_path, "winexec_img.dd")
        flow_id = flow_test_lib.TestFlowHelper(
            file_finder.FileFinder.__name__,
            client_mock,
            client_id=self.client_id,
            paths=[path],
            pathtype=rdf_paths.PathSpec.PathType.OS,
            action=action,
            creator=self.test_username)

        flow_results = flow_test_lib.GetFlowResults(self.client_id, flow_id)
        self.assertLen(flow_results, 1)

        converter = file.FileFinderResultConverter()
        results = list(converter.Convert(self.metadata, flow_results[0]))

        self.assertLen(results, 1)

        self.assertEqual(results[0].basename, "winexec_img.dd")

        # Check that by default file contents are not exported
        self.assertFalse(results[0].content)
        self.assertFalse(results[0].content_sha256)

        # Convert again, now specifying export_files_contents=True in options.
        converter = file.FileFinderResultConverter(options=base.ExportOptions(
            export_files_contents=True))
        results = list(converter.Convert(self.metadata, flow_results[0]))
        self.assertTrue(results[0].content)

        self.assertEqual(
            results[0].content_sha256,
            "0652da33d5602c165396856540c173cd37277916fba07a9bf3080bc5a6236f03")
Пример #4
0
 def setUp(self):
     super().setUp()
     self.client_id = self.SetupClient(0)
     self.client_mock = action_mocks.FileFinderClientMockWithTimestamps()