Source code for plaso.analyzers.interface

# -*- coding: utf-8 -*-
"""Definitions to provide a whole-file processing framework."""

import abc

from plaso.lib import definitions

[docs] class BaseAnalyzer(object): """Class that provides the interface for whole-file analysis.""" NAME = 'base_analyzer' DESCRIPTION = '' # Processing status hint used by the worker. PROCESSING_STATUS_HINT = definitions.STATUS_INDICATOR_ANALYZING INCREMENTAL_ANALYZER = False SIZE_LIMIT = 32 * 1024 * 1024
[docs] @abc.abstractmethod def Analyze(self, data): """Analyzes a block of data, updating the state of the analyzer. Args: data(bytes): block of data to process. """
# pylint: disable=redundant-returns-doc
[docs] @abc.abstractmethod def GetResults(self): """Retrieves the results of the analysis. Returns: list[AnalyzerResult]: results. """
[docs] @abc.abstractmethod def Reset(self): """Resets the internal state of the analyzer."""