62 lines
1.8 KiB
Python
62 lines
1.8 KiB
Python
#!/usr/bin/python
|
|
# -*- coding: utf-8 -*-
|
|
#
|
|
# Copyright 2013 The Plaso Project Authors.
|
|
# Please see the AUTHORS file for details on individual authors.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
"""This file contains a formatter for the Google Chrome history."""
|
|
|
|
from plaso.formatters import interface
|
|
|
|
|
|
class ChromePageVisitedFormatter(interface.ConditionalEventFormatter):
|
|
"""The event formatter for page visited data in Chrome History."""
|
|
|
|
DATA_TYPE = 'chrome:history:page_visited'
|
|
|
|
FORMAT_STRING_PIECES = [
|
|
u'{url}',
|
|
u'({title})',
|
|
u'[count: {typed_count}]',
|
|
u'Host: {host}',
|
|
u'Visit from: {from_visit}',
|
|
u'Visit Source: [{visit_source}]',
|
|
u'{extra}']
|
|
|
|
FORMAT_STRING_SHORT_PIECES = [
|
|
u'{url}',
|
|
u'({title})']
|
|
|
|
SOURCE_LONG = 'Chrome History'
|
|
SOURCE_SHORT = 'WEBHIST'
|
|
|
|
|
|
class ChromeFileDownloadFormatter(interface.ConditionalEventFormatter):
|
|
"""The event formatter for file downloaded data in Chrome History."""
|
|
|
|
DATA_TYPE = 'chrome:history:file_downloaded'
|
|
|
|
FORMAT_STRING_PIECES = [
|
|
u'{url}',
|
|
u'({full_path}).',
|
|
u'Received: {received_bytes} bytes',
|
|
u'out of: {total_bytes} bytes.']
|
|
|
|
FORMAT_STRING_SHORT_PIECES = [
|
|
u'{full_path} downloaded',
|
|
u'({received_bytes} bytes)']
|
|
|
|
SOURCE_LONG = 'Chrome History'
|
|
SOURCE_SHORT = 'WEBHIST'
|