dissect.target.plugins.os.unix.log.lastlog
¶
Module Contents¶
Classes¶
Unix lastlog plugin. |
Attributes¶
- dissect.target.plugins.os.unix.log.lastlog.LastLogRecord¶
- dissect.target.plugins.os.unix.log.lastlog.lastlog_def = Multiline-String¶
Show Value
""" #define UT_NAMESIZE 32 #define UT_HOSTSIZE 256 #define size 292 struct { uint32 tv_sec; } time_t; struct entry { struct time_t ll_time; char ut_user[UT_NAMESIZE]; char ut_host[UT_HOSTSIZE]; }; """
- dissect.target.plugins.os.unix.log.lastlog.c_lastlog¶
- class dissect.target.plugins.os.unix.log.lastlog.LastLogPlugin(target: dissect.target.Target)¶
Bases:
dissect.target.plugin.Plugin
Unix lastlog plugin.
- check_compatible() None ¶
Perform a compatibility check with the target.
This function should return
None
if the plugin is compatible with the current target (self.target
). For example, check if a certain file exists. Otherwise it should raise anUnsupportedPluginError
.- Raises:
UnsupportedPluginError – If the plugin could not be loaded.
- lastlog() Iterator[LastLogRecord] ¶
Return last logins information from /var/log/lastlog.
The lastlog file contains the most recent logins of all users on a Unix based operating system.
References