:py:mod:`dissect.target.plugins.os.windows.regf.7zip` ===================================================== .. py:module:: dissect.target.plugins.os.windows.regf.7zip Module Contents --------------- Classes ~~~~~~~ .. autoapisummary:: dissect.target.plugins.os.windows.regf.7zip.SevenZipPlugin Attributes ~~~~~~~~~~ .. autoapisummary:: dissect.target.plugins.os.windows.regf.7zip.PanelPathRecord dissect.target.plugins.os.windows.regf.7zip.ArcHistoryRecord dissect.target.plugins.os.windows.regf.7zip.PathHistoryRecord dissect.target.plugins.os.windows.regf.7zip.CopyHistoryRecord dissect.target.plugins.os.windows.regf.7zip.FolderHistoryRecord .. py:data:: PanelPathRecord .. py:data:: ArcHistoryRecord .. py:data:: PathHistoryRecord .. py:data:: CopyHistoryRecord .. py:data:: FolderHistoryRecord .. py:class:: SevenZipPlugin(target: dissect.target.Target) Bases: :py:obj:`dissect.target.plugin.Plugin` Windows 7-Zip GUI plugin. .. py:attribute:: KEY :value: 'HKCU\\Software\\7-Zip' .. py:method:: check_compatible() -> None Perform a compatibility check with the target. This function should return ``None`` if the plugin is compatible with the current target (``self.target``). For example, check if a certain file exists. Otherwise it should raise an ``UnsupportedPluginError``. :raises UnsupportedPluginError: If the plugin could not be loaded. .. py:method:: parse_key(key, keyname, valuename, record) .. py:method:: sevenzip() -> Iterator[PanelPathRecord | ArcHistoryRecord | PathHistoryRecord | CopyHistoryRecord | FolderHistoryRecord] Return 7-Zip history information from the registry. 7-Zip is an open source file archiver. If the HKCU\Software\7-Zip registry key exists, it checks for additional registry keys, such as ArcHistory and FolderHistory. This might provide insight in which files have been archived by 7-Zip. .. rubric:: References - https://www.7-zip.org/