def is_valid_for(self, target_file: TargetPath):
if target_file.is_file():
if "ASCII text" in target_file.get_type():
return True
if "UTF-8 Unicode text" in target_file.get_type():
return True
return False
def is_valid_for(self, target_file: TargetPath):
if target_file.is_file():
if "JPEG image data" in target_file.get_type():
return True
elif "PNG image data" in target_file.get_type():
return True
elif "GIF image data" in target_file.get_type():
return True
return False
def is_valid_for(self, target_file: TargetPath):
if "Event Log" in target_file.get_type() and \
target_file.is_file() and \
isinstance(target_file, TargetFile) and \
target_file.get_extension() == ".evtx":
return True
return False
def is_valid_for(self, target_file: TargetPath):
if target_file.is_file():
if "PDF document" in target_file.get_type():
return True
elif "Composite Document" in target_file.get_type():
return True
elif "OpenDocument" in target_file.get_type():
return True
elif "Microsoft Word" in target_file.get_type():
return True
elif "Microsoft Excel" in target_file.get_type():
return True
elif "Microsoft PowerPoint" in target_file.get_type():
return True
if isinstance(target_file, TargetFile):
if target_file.get_extension() in [
".pages", ".numbers", ".keynote"
]:
return True
return False
def is_valid_for(self, target_file: TargetPath):
if target_file.is_file():
if ("Zip archive data" in target_file.get_type()):
return True
return False
def is_valid_for(self, target_file: TargetPath):
if "Windows registry" in target_file.get_type() and \
target_file.is_file():
return True
return False
def is_valid_for(self, target_file: TargetPath):
if target_file.is_file(
) and "Microsoft Outlook email" in target_file.get_type():
return True
return False
def is_valid_for(self, target_file: TargetPath):
if target_file.is_file():
if "SQLite" in target_file.get_type() and ("History" in target_file.get_name() \
or "places" in target_file.get_name()):
return True
return False
def is_valid_for(self, target_file: TargetPath):
if target_file.is_file():
if "data" in target_file.get_type(
) and "MFT" in target_file.get_name():
return True
return False
