:py:mod:`dissect.target.plugins.os.windows.regf.nethist`
========================================================

.. py:module:: dissect.target.plugins.os.windows.regf.nethist




Module Contents
---------------

Classes
~~~~~~~

.. autoapisummary::

   dissect.target.plugins.os.windows.regf.nethist.NethistPlugin



Functions
~~~~~~~~~

.. autoapisummary::
   :nosignatures:

   dissect.target.plugins.os.windows.regf.nethist.parse_ts



Attributes
~~~~~~~~~~

.. autoapisummary::

   dissect.target.plugins.os.windows.regf.nethist.NetworkHistoryRecord


.. py:data:: NetworkHistoryRecord

.. py:class:: NethistPlugin(target: dissect.target.target.Target)

   Bases: :py:obj:`dissect.target.plugin.Plugin`


   Windows network history plugin.


   .. py:attribute:: KEY
      :value: 'HKLM\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Networklist\\Signatures'



   .. py:attribute:: PROFILE_KEY
      :value: 'HKLM\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Networklist\\Profiles'



   .. py:method:: check_compatible() -> None

      Perform a compatibility check with the target.

      This function should return ``None`` if the plugin is compatible with the current target (``self.target``).
      For example, check if a certain file exists. Otherwise it should raise an
      :class:`UnsupportedPluginError`.

      :raises UnsupportedPluginError: If the plugin could not be loaded.



   .. py:method:: network_history() -> collections.abc.Iterator[NetworkHistoryRecord]

      Return attached network history.

      The HKLM\Software\Microsoft\Windows NT\CurrentVersion\Networklist\Signatures and
      HKLM\Software\Microsoft\Windows NT\CurrentVersion\Networklist\Profiles registry keys contain information
      about the networks to which the system has been connected, both wireless and wired.

      .. rubric:: References

      - https://web.archive.org/web/20221127181357/https://www.weaklink.org/2016/11/windows-network-profile-registry-keys/



   .. py:method:: find_profile(guid: str) -> dissect.target.helpers.regutil.RegistryKey | None


.. py:function:: parse_ts(val: bytes, tzinfo: datetime.tzinfo = datetime.timezone.utc) -> datetime.datetime