Package rekall :: Package plugins :: Package response :: Module forensic_artifacts :: Class BaseArtifactResultWriter

Class BaseArtifactResultWriter

Writes the results of artifacts.

Nested Classes
	__metaclass__ Automatic Plugin Registration through metaclasses.
	top_level_class Writes the results of artifacts.

Instance Methods

__init__(self, session=None, copy_files=False, create_timeline=False)
x.__init__(...) initializes x; see help(type(x)) for signature

source code

write_result(self, result)
Writes the artifact result.

source code

__enter__(self)

source code

__exit__(self, unused_type, unused_value, unused_traceback)

source code

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Class Methods

ImplementationByClass(self, name)

source code

ImplementationByName(self, name)

source code

Class Variables
	classes = `{'DirectoryBasedWriter': <class 'rekall.plugins.resp...`
	classes_by_name = `{'Directory': [<class 'rekall.plugins.respon...`
	plugin_feature = `'BaseArtifactResultWriter'`

Properties
Inherited from `object`: `__class__`

Method Details

init(self, session=None, copy_files=False, create_timeline=False)
(Constructor)

source code

x.__init__(...) initializes x; see help(type(x)) for signature

Overrides: object.__init__: (inherited documentation)

Class Variable Details

classes

Value:

{'DirectoryBasedWriter': <class 'rekall.plugins.response.forensic_arti
facts.DirectoryBasedWriter'>,
 'ZipBasedWriter': <class 'rekall.plugins.response.forensic_artifacts.
ZipBasedWriter'>}

classes_by_name

Value:

{'Directory': [<class 'rekall.plugins.response.forensic_artifacts.Dire
ctoryBasedWriter'>],
 'Zip': [<class 'rekall.plugins.response.forensic_artifacts.ZipBasedWr
iter'>]}

Class BaseArtifactResultWriter

__init__(self, session=None, copy_files=False, create_timeline=False) (Constructor)

classes

classes_by_name

init(self, session=None, copy_files=False, create_timeline=False)
(Constructor)