dissect.etl
¶
Subpackages¶
Submodules¶
Package Contents¶
Classes¶
- class dissect.etl.ETL(fh)¶
The main interface when controlling an ETL file.
- calculate_timestamp(time_delta: int) datetime.datetime ¶
- get_filetime_for_event(time_delta: int) int ¶
- class dissect.etl.Buffer(etl, offset)¶
- property header¶
- property size: int¶
- property data: memoryview¶
- property data_offset: int¶
- property filled_bytes: int¶
- property next_buffer: int¶
- __iter__() Iterable[EventRecord] ¶
- read_record(offset)¶
Parse a record from a given offset inside a buffer.
- open()¶
- exception dissect.etl.Error¶
Bases:
Exception
Common base class for all non-exit exceptions.
- exception dissect.etl.ExtendedDataItemException¶
Bases:
Error
Common base class for all non-exit exceptions.
- exception dissect.etl.InvalidBufferError¶
Bases:
Error
Common base class for all non-exit exceptions.
- exception dissect.etl.InvalidHeaderError¶
Bases:
Error
Common base class for all non-exit exceptions.
- exception dissect.etl.InvalidHookIdException¶
Bases:
Error
Common base class for all non-exit exceptions.
- exception dissect.etl.InvalidMarkerError¶
Bases:
Error
Common base class for all non-exit exceptions.