How to use the artifacts.collector.CollectorDefinition function in artifacts

To help you get started, we’ve selected a few artifacts examples, based on popular ways it is used in public projects.

Secure your code as it's written. Use Snyk Code to scan source code in minutes - no build needed - and fix issues immediately.

github ForensicArtifacts / artifacts / artifacts / collector.py View on Github external
"""Initializes the collector definition object.

    Args:
      path_list: optional list of path strings. The default is None.

    Raises:
      FormatError: when path_list is not set.
    """
    if not path_list:
      raise errors.FormatError(u'Missing path_list value.')

    super(WindowsRegistryValueCollectorDefinition, self).__init__(**kwargs)
    self.path_list = path_list


class WMIQueryCollectorDefinition(CollectorDefinition):
  """Class that implements the WMI query collector definition."""

  TYPE_INDICATOR = definitions.TYPE_INDICATOR_WMI_QUERY

  def __init__(self, query=None, **kwargs):
    """Initializes the collector definition object.

    Args:
      query: optional string containing the WMI query. The default is None.

    Raises:
      FormatError: when query is not set.
    """
    if not query:
      raise errors.FormatError(u'Missing query value.')
github ForensicArtifacts / artifacts / artifacts / collector.py View on Github external
super(CollectorDefinition, self).__init__()
    self.conditions = []
    self.returned_types = []
    self.supported_os = []

  @property
  def type_indicator(self):
    """The type indicator."""
    type_indicator = getattr(self, 'TYPE_INDICATOR', None)
    if type_indicator is None:
      raise NotImplementedError(
          u'Invalid path specification missing type indicator.')
    return type_indicator


class ArtifactCollectorDefinition(CollectorDefinition):
  """Class that implements the artifact collector definition."""

  TYPE_INDICATOR = definitions.TYPE_INDICATOR_ARTIFACT

  def __init__(self, artifact_list=None, **kwargs):
    """Initializes the collector definition object.

    Args:
      artifact_list: optional list of artifact definition names.
                     The default is None.

    Raises:
      FormatError: when artifact_list is not set.
    """
    if not artifact_list:
      raise errors.FormatError(u'Missing artifact_list value.')
github ForensicArtifacts / artifacts / artifacts / collector.py View on Github external
"""Initializes the collector definition object.

    Args:
      path_list: optional list of path strings. The default is None.

    Raises:
      FormatError: when path_list is not set.
    """
    if not path_list:
      raise errors.FormatError(u'Missing path_list value.')

    super(FileCollectorDefinition, self).__init__(**kwargs)
    self.path_list = path_list


class WindowsRegistryKeyCollectorDefinition(CollectorDefinition):
  """Class that implements the Windows Registry key collector definition."""

  TYPE_INDICATOR = definitions.TYPE_INDICATOR_WINDOWS_REGISTRY_KEY

  def __init__(self, path_list=None, **kwargs):
    """Initializes the collector definition object.

    Args:
      path_list: optional list of path strings. The default is None.

    Raises:
      FormatError: when path_list is not set.
    """
    if not path_list:
      raise errors.FormatError(u'Missing path_list value.')
github ForensicArtifacts / artifacts / artifacts / collector.py View on Github external
Args:
      artifact_list: optional list of artifact definition names.
                     The default is None.

    Raises:
      FormatError: when artifact_list is not set.
    """
    if not artifact_list:
      raise errors.FormatError(u'Missing artifact_list value.')

    super(ArtifactCollectorDefinition, self).__init__(**kwargs)
    self.artifact_list = artifact_list


class FileCollectorDefinition(CollectorDefinition):
  """Class that implements the file collector definition."""

  TYPE_INDICATOR = definitions.TYPE_INDICATOR_FILE

  def __init__(self, path_list=None, **kwargs):
    """Initializes the collector definition object.

    Args:
      path_list: optional list of path strings. The default is None.

    Raises:
      FormatError: when path_list is not set.
    """
    if not path_list:
      raise errors.FormatError(u'Missing path_list value.')
github ForensicArtifacts / artifacts / artifacts / collector.py View on Github external
def __init__(self, **kwargs):
    """Initializes the collector definition object.

    Args:
      kwargs: a dictionary of keyword arguments dependending on
              the collector type.

    Raises:
      FormatError: when there are unused keyword arguments.
    """
    if kwargs:
      raise errors.FormatError(u'Unused keyword arguments.')

    super(CollectorDefinition, self).__init__()
    self.conditions = []
    self.returned_types = []
    self.supported_os = []
github ForensicArtifacts / artifacts / artifacts / collector.py View on Github external
"""Initializes the collector definition object.

    Args:
      path_list: optional list of path strings. The default is None.

    Raises:
      FormatError: when path_list is not set.
    """
    if not path_list:
      raise errors.FormatError(u'Missing path_list value.')

    super(WindowsRegistryKeyCollectorDefinition, self).__init__(**kwargs)
    self.path_list = path_list


class WindowsRegistryValueCollectorDefinition(CollectorDefinition):
  """Class that implements the Windows Registry value collector definition."""

  TYPE_INDICATOR = definitions.TYPE_INDICATOR_WINDOWS_REGISTRY_VALUE

  def __init__(self, path_list=None, **kwargs):
    """Initializes the collector definition object.

    Args:
      path_list: optional list of path strings. The default is None.

    Raises:
      FormatError: when path_list is not set.
    """
    if not path_list:
      raise errors.FormatError(u'Missing path_list value.')