79 lines
2.4 KiB
Python
79 lines
2.4 KiB
Python
#!/usr/bin/python
|
|
# -*- coding: utf-8 -*-
|
|
#
|
|
# Copyright 2013 The Plaso Project Authors.
|
|
# Please see the AUTHORS file for details on individual authors.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
"""This file contains a small classify test program."""
|
|
|
|
import argparse
|
|
import glob
|
|
import logging
|
|
|
|
from plaso.classifier import classifier
|
|
from plaso.classifier import scanner
|
|
from plaso.classifier import test_lib
|
|
|
|
|
|
def Main():
|
|
args_parser = argparse.ArgumentParser(
|
|
description='Classify test program.')
|
|
|
|
args_parser.add_argument(
|
|
'-t', '--type', type='choice', metavar='TYPE', action='store',
|
|
dest='scanner_type', choices=['scan-tree', 'scan_tree'],
|
|
default='scan-tree', help='The scanner type')
|
|
|
|
args_parser.add_argument(
|
|
'-v', '--verbose', action='store_true', dest='verbose', default=False,
|
|
help='Print verbose output')
|
|
|
|
args_parser.add_argument(
|
|
'filenames', nargs='+', action='store', metavar='FILENAMES',
|
|
default=None, help='The input filename(s) to classify.')
|
|
|
|
options = args_parser.parse_args()
|
|
|
|
if options.verbose:
|
|
logging.basicConfig(level=logging.DEBUG)
|
|
|
|
files_to_classify = []
|
|
for input_glob in options.filenames:
|
|
files_to_classify += glob.glob(input_glob)
|
|
|
|
store = test_lib.CreateSpecificationStore()
|
|
|
|
if options.scanner_type not in ['scan-tree', 'scan_tree']:
|
|
print u'Unsupported scanner type defaulting to: scan-tree'
|
|
|
|
scan = scanner.Scanner(store)
|
|
classify = classifier.Classifier(scan)
|
|
|
|
for input_filename in files_to_classify:
|
|
classifications = classify.ClassifyFile(input_filename)
|
|
|
|
print u'File: {0:s}'.format(input_filename)
|
|
if not classifications:
|
|
print u'No classifications found.'
|
|
else:
|
|
print u'Classifications:'
|
|
for classification in classifications:
|
|
print u'\tformat: {0:s}'.format(classification.identifier)
|
|
|
|
print u''
|
|
|
|
|
|
if __name__ == '__main__':
|
|
Main()
|