OLD | NEW |
1 # -*- coding: utf-8 -*- | 1 # -*- coding: utf-8 -*- |
2 """Parser for Microsoft Internet Explorer (MSIE) Cache Files (CF).""" | 2 """Parser for Microsoft Internet Explorer (MSIE) Cache Files (CF).""" |
3 | 3 |
4 import pymsiecf | 4 import pymsiecf |
5 | 5 |
6 from dfdatetime import fat_date_time as dfdatetime_fat_date_time | 6 from dfdatetime import fat_date_time as dfdatetime_fat_date_time |
7 from dfdatetime import filetime as dfdatetime_filetime | 7 from dfdatetime import filetime as dfdatetime_filetime |
8 from dfdatetime import semantic_time as dfdatetime_semantic_time | 8 from dfdatetime import semantic_time as dfdatetime_semantic_time |
9 | 9 |
10 from plaso import dependencies | |
11 from plaso.containers import events | 10 from plaso.containers import events |
12 from plaso.containers import time_events | 11 from plaso.containers import time_events |
13 from plaso.lib import eventdata | 12 from plaso.lib import eventdata |
14 from plaso.lib import specification | 13 from plaso.lib import specification |
15 from plaso.parsers import interface | 14 from plaso.parsers import interface |
16 from plaso.parsers import manager | 15 from plaso.parsers import manager |
17 | 16 |
18 | 17 |
19 dependencies.CheckModuleVersion(u'pymsiecf') | |
20 | |
21 | |
22 class MSIECFLeakEventData(events.EventData): | 18 class MSIECFLeakEventData(events.EventData): |
23 """MSIECF leak event data. | 19 """MSIECF leak event data. |
24 | 20 |
25 Attributes: | 21 Attributes: |
26 cached_filename (str): name of the cached file. | 22 cached_filename (str): name of the cached file. |
27 cached_file_size (int): size of the cached file. | 23 cached_file_size (int): size of the cached file. |
28 cache_directory_index (int): index of the cache directory. | 24 cache_directory_index (int): index of the cache directory. |
29 cache_directory_name (str): name of the cache directory. | 25 cache_directory_name (str): name of the cache directory. |
30 recovered (bool): True if the item was recovered. | 26 recovered (bool): True if the item was recovered. |
31 """ | 27 """ |
(...skipping 338 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
370 u'unable to open file with error: {0:s}'.format(exception)) | 366 u'unable to open file with error: {0:s}'.format(exception)) |
371 return | 367 return |
372 | 368 |
373 try: | 369 try: |
374 self._ParseItems(parser_mediator, msiecf_file) | 370 self._ParseItems(parser_mediator, msiecf_file) |
375 finally: | 371 finally: |
376 msiecf_file.close() | 372 msiecf_file.close() |
377 | 373 |
378 | 374 |
379 manager.ParsersManager.RegisterParser(MSIECFParser) | 375 manager.ParsersManager.RegisterParser(MSIECFParser) |
OLD | NEW |