:py:mod:`dissect.target.plugins.os.windows.log.intunemanagementextension`
=========================================================================

.. py:module:: dissect.target.plugins.os.windows.log.intunemanagementextension




Module Contents
---------------

Classes
~~~~~~~

.. autoapisummary::

   dissect.target.plugins.os.windows.log.intunemanagementextension.IntuneManagementExtensionLogParserPlugin




Attributes
~~~~~~~~~~

.. autoapisummary::

   dissect.target.plugins.os.windows.log.intunemanagementextension.IntuneManagementExtensionLogRecord
   dissect.target.plugins.os.windows.log.intunemanagementextension.LOG_PATTERN


.. py:data:: IntuneManagementExtensionLogRecord

.. py:data:: LOG_PATTERN

.. py:class:: IntuneManagementExtensionLogParserPlugin(target: dissect.target.target.Target)

   Bases: :py:obj:`dissect.target.plugin.Plugin`


   Parse Microsoft Intune Management Extension logs (including rotated logs).

   This plugin processes both the primary `IntuneManagementExtension.log` file and
   any timestamped rotated versions (e.g. `IntuneManagementExtension-20251009-135155.log`).

   Each parsed entry includes metadata such as timestamp, log type, thread ID,
   component name, and message content.


   .. py:attribute:: LOG_DIR
      :value: 'sysvol/ProgramData/Microsoft/IntuneManagementExtension/Logs'



   .. py:method:: check_compatible() -> None

      Verify that the Intune Management Extension logs exist in the target.

      :raises UnsupportedPluginError: If the log directory or log files are missing.



   .. py:method:: intunemanagementextension() -> collections.abc.Iterator[IntuneManagementExtensionLogRecord]

      Parse Intune Management Extension log files.

      :Yields: *IntuneManagementExtensionLogRecord* -- One record per parsed log line.