plaso.single_process package

Submodules

plaso.single_process.extraction_engine module

The single process extraction engine.

class plaso.single_process.extraction_engine.SingleProcessEngine(status_update_callback=None)[source]

Bases: BaseEngine

Single process extraction engine.

ProcessSource(storage_writer, resolver_context, processing_configuration, system_configurations, file_system_path_specs)[source]

Processes file systems within a source.

Parameters:
  • storage_writer (StorageWriter) – storage writer for a session storage.

  • resolver_context (dfvfs.Context) – resolver context.

  • processing_configuration (ProcessingConfiguration) – processing configuration.

  • system_configurations (list[SystemConfigurationArtifact]) – system configurations.

  • file_system_path_specs (list[dfvfs.PathSpec]) – path specifications of the source file systems to process.

Returns:

processing status.

Return type:

ProcessingStatus

Raises:

BadConfigOption – if an invalid collection filter was specified or if the preferred time zone is invalid.

__init__(status_update_callback=None)[source]

Initializes a single process extraction engine.

Parameters:

status_update_callback (Optional[function]) – callback function for status updates.

Module contents