dissect.etl

Subpackages

• dissect.etl.headers
  • dissect.etl.headers.event
  • dissect.etl.headers.headers
  • dissect.etl.headers.logfile
  • dissect.etl.headers.system
  • dissect.etl.headers.utils
• dissect.etl.manifests

Submodules

• dissect.etl.etl
• dissect.etl.exceptions
• dissect.etl.manifest
• dissect.etl.utils

Package Contents

Classes

ETL	The main interface when controlling an ETL file.
Buffer

class dissect.etl.ETL(fh)

The main interface when controlling an ETL file.

buffer(index: int) → Buffer

Reads a specific buffer into memory.

buffers() → Iterable[Buffer]

__iter__() → Iterable[Event]

calculate_timestamp(time_delta: int) → datetime.datetime

get_filetime_for_event(time_delta: int) → int

class dissect.etl.Buffer(etl, offset)

property header

property size: int

property data: memoryview

property data_offset: int

property filled_bytes: int

property next_buffer: int

__iter__() → Iterable[EventRecord]

read_record(offset)

Parse a record from a given offset inside a buffer.

open()

exception dissect.etl.Error

Bases: Exception

Common base class for all non-exit exceptions.

exception dissect.etl.ExtendedDataItemException

Bases: Error

Common base class for all non-exit exceptions.

exception dissect.etl.InvalidBufferError

Bases: Error

Common base class for all non-exit exceptions.

exception dissect.etl.InvalidHeaderError

Bases: Error

Common base class for all non-exit exceptions.

exception dissect.etl.InvalidHookIdException

Bases: Error

Common base class for all non-exit exceptions.

exception dissect.etl.InvalidMarkerError

Bases: Error

Common base class for all non-exit exceptions.

exception dissect.etl.InvalidRecordError

Bases: Error

Common base class for all non-exit exceptions.

exception dissect.etl.ManifestNotFoundError

Bases: Error

Common base class for all non-exit exceptions.