plaso.single_process package

Submodules

The single process extraction engine.

class plaso.single_process.extraction_engine.SingleProcessEngine(status_update_callback=None)[source]

Single process extraction engine.

ProcessSource(storage_writer, resolver_context, processing_configuration, system_configurations, file_system_path_specs)[source]

Processes file systems within a source.

Parameters:

storage_writer (StorageWriter) – storage writer for a session storage.
resolver_context (dfvfs.Context) – resolver context.
processing_configuration (ProcessingConfiguration) – processing configuration.
system_configurations (list[SystemConfigurationArtifact]) – system configurations.
file_system_path_specs (list[dfvfs.PathSpec]) – path specifications of the source file systems to process.

Returns:

processing status.

Return type:

ProcessingStatus

Raises:

BadConfigOption – if an invalid collection filter was specified or if the preferred time zone is invalid.

__init__(status_update_callback=None)[source]

Initializes a single process extraction engine.

Parameters:: status_update_callback (Optional[function]) – callback function for status updates.