Skip to content

Commit

Permalink
Code clean up
Browse files Browse the repository at this point in the history
  • Loading branch information
joachimmetz committed Jan 7, 2024
1 parent bcbb7e1 commit 4df82b3
Show file tree
Hide file tree
Showing 9 changed files with 11 additions and 11 deletions.
14 changes: 7 additions & 7 deletions plaso/parsers/sqlite_plugins/windows_timeline.py
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# -*- coding: utf-8 -*-
"""SQLite parser plugin for Windows 10 Timeline database files."""
"""SQLite parser plugin for Windows 10 timeline database files."""

import json

Expand All @@ -11,7 +11,7 @@


class WindowsTimelineGenericEventData(events.EventData):
"""Windows Timeline database generic event data.
"""Windows 10 timeline database generic event data.
Attributes:
application_display_name (str): a more human-friendly version of the
Expand Down Expand Up @@ -41,7 +41,7 @@ def __init__(self):


class WindowsTimelineUserEngagedEventData(events.EventData):
"""Windows Timeline database User Engaged event data.
"""Windows 10 timeline database User Engaged event data.
Contains information describing how long a user interacted with an application
for.
Expand Down Expand Up @@ -71,14 +71,14 @@ def __init__(self):


class WindowsTimelinePlugin(interface.SQLitePlugin):
"""SQLite parser plugin for Windows 10 Timeline database files.
"""SQLite parser plugin for Windows 10 timeline database files.
The Windows 10 Timeline database file is typically stored in:
The Windows 10 timeline database file is typically stored in:
%APPDATA%\\Local\\ConnectedDevicesPlatform\\L.<username>\\ActivitiesCache.db
"""

NAME = 'windows_timeline'
DATA_FORMAT = 'Windows 10 Timeline SQLite database (ActivitiesCache.db) file'
DATA_FORMAT = 'Windows 10 timeline SQLite database (ActivitiesCache.db) file'

REQUIRED_STRUCTURE = {
'Activity': frozenset([
Expand Down Expand Up @@ -212,7 +212,7 @@ def _GetDateTimeRowValue(self, query_hash, row, value_name):

def ParseGenericRow(
self, parser_mediator, query, row, **unused_kwargs):
"""Parses a generic windows timeline row.
"""Parses a generic Windows timeline row.
Args:
parser_mediator (ParserMediator): mediates interactions between parsers
Expand Down
Empty file modified test_data/DataUsage.sqlite
100755 → 100644
Empty file.
Empty file modified test_data/ONEDRIVE.EXE-7E152375.pf
100755 → 100644
Empty file.
Empty file modified test_data/ObfuscationStringMap.txt
100755 → 100644
Empty file.
Empty file modified test_data/SyncEngine-2022-11-24.2341.10688.1.odlgz
100755 → 100644
Empty file.
Empty file modified test_data/com.apple.identityservices.idstatuscache.plist
100755 → 100644
Empty file.
Empty file modified test_data/powershell_transcript_ger.txt
100755 → 100644
Empty file.
Empty file modified test_data/unpaired_surrogate.lnk
100755 → 100644
Empty file.
8 changes: 4 additions & 4 deletions tests/parsers/sqlite_plugins/windows_timeline.py
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
#!/usr/bin/env python3
# -*- coding: utf-8 -*-
"""Tests for the Windows Timeline SQLite database plugin."""
"""Tests for the Windows 10 timeline SQLite database plugin."""

import unittest

Expand All @@ -9,11 +9,11 @@
from tests.parsers.sqlite_plugins import test_lib


class WindowsTimelineTest(test_lib.SQLitePluginTestCase):
"""Tests for the Windows Timeline plugin."""
class WindowsTimelinePluginTest(test_lib.SQLitePluginTestCase):
"""Tests for the Windows 10 timeline SQLite database plugin."""

def testProcess(self):
"""Tests the Process function on a Windows Timeline SQLite database."""
"""Tests the Process function."""
plugin = windows_timeline.WindowsTimelinePlugin()
storage_writer = self._ParseDatabaseFileWithPlugin(
['windows_timeline_ActivitiesCache.db'], plugin)
Expand Down

0 comments on commit 4df82b3

Please sign in to comment.