Rietveld Code Review Tool
Help | Bug tracker | Discussion group | Source code | Sign in
(965)

Unified Diff: plaso/parsers/sqlite_plugins/mac_document_versions.py

Issue 316460043: [plaso] Added database schema matching to sqlite plugins #1093 (Closed)
Patch Set: Changes to schema extractor script Created 6 years, 11 months ago
Use n/p to move between diff chunks; N/P to move between comments. Please Sign in to add in-line comments.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: plaso/parsers/sqlite_plugins/mac_document_versions.py
diff --git a/plaso/parsers/sqlite_plugins/mac_document_versions.py b/plaso/parsers/sqlite_plugins/mac_document_versions.py
index f2e6080cecd7a6be85308345d28109949f82e6a7..2448aa9dae682ef3e9d1380ee2c796f22c6ce9ab 100644
--- a/plaso/parsers/sqlite_plugins/mac_document_versions.py
+++ b/plaso/parsers/sqlite_plugins/mac_document_versions.py
@@ -59,6 +59,25 @@ class MacDocumentVersionsPlugin(interface.SQLitePlugin):
# The required tables for the query.
REQUIRED_TABLES = frozenset([u'files', u'generations'])
+ SCHEMAS = [
+ {u'files':
+ u'CREATE TABLE files (file_row_id INTEGER PRIMARY KEY ASC,file_name '
+ u'TEXT,file_parent_id INTEGER,file_path TEXT,file_inode '
+ u'INTEGER,file_last_seen INTEGER NOT NULL DEFAULT 0,file_status '
+ u'INTEGER NOT NULL DEFAULT 1,file_storage_id INTEGER NOT NULL)',
+ u'generations':
+ u'CREATE TABLE generations (generation_id INTEGER PRIMARY KEY '
+ u'ASC,generation_storage_id INTEGER NOT NULL,generation_name TEXT NOT '
+ u'NULL,generation_client_id TEXT NOT NULL,generation_path TEXT '
+ u'UNIQUE,generation_options INTEGER NOT NULL DEFAULT '
+ u'1,generation_status INTEGER NOT NULL DEFAULT 1,generation_add_time '
+ u'INTEGER NOT NULL DEFAULT 0,generation_size INTEGER NOT NULL DEFAULT '
+ u'0,generation_prunable INTEGER NOT NULL DEFAULT 0)',
+ u'storage':
+ u'CREATE TABLE storage (storage_id INTEGER PRIMARY KEY ASC '
+ u'AUTOINCREMENT,storage_options INTEGER NOT NULL DEFAULT '
+ u'1,storage_status INTEGER NOT NULL DEFAULT 1)'}]
+
# The SQL field path is the relative path from DocumentRevisions.
# For this reason the Path to the program has to be added at the beginning.
ROOT_VERSION_PATH = u'/.DocumentRevisions-V100/'

Powered by Google App Engine
RSS Feeds Recent Issues | This issue
This is Rietveld f62528b