SYMBOL INDEX (519 symbols across 84 files) FILE: docs/conf.py function RunSphinxAPIDoc (line 101) | def RunSphinxAPIDoc(app): class MarkdownLinkFixer (line 114) | class MarkdownLinkFixer(transforms.Transform): method _FixLinks (line 121) | def _FixLinks(self, node): method _Traverse (line 142) | def _Traverse(self, node): method apply (line 154) | def apply(self): function setup (line 160) | def setup(app): FILE: tests/appcompatcache.py class TestOutputWriter (line 226) | class TestOutputWriter(output_writers.StdoutOutputWriter): method __init__ (line 234) | def __init__(self): method WriteCachedEntry (line 239) | def WriteCachedEntry(self, cached_entry): class AppCompatCacheDataParserTest (line 249) | class AppCompatCacheDataParserTest(test_lib.BaseTestCase): method testCheckSignature (line 254) | def testCheckSignature(self): method testParseHeader (line 284) | def testParseHeader(self): class AppCompatCacheCollectorTest (line 318) | class AppCompatCacheCollectorTest(test_lib.BaseTestCase): method _CreateTestRegistry (line 321) | def _CreateTestRegistry(self): method testCollect (line 355) | def testCollect(self): method testCollectEmpty (line 370) | def testCollectEmpty(self): FILE: tests/application_identifiers.py class ApplicationIdentifiersCollectorTest (line 15) | class ApplicationIdentifiersCollectorTest(shared_test_lib.BaseTestCase): method _CreateTestRegistry (line 18) | def _CreateTestRegistry(self): method testCollect (line 44) | def testCollect(self): method testCollectEmpty (line 59) | def testCollectEmpty(self): FILE: tests/cached_credentials.py class TestOutputWriter (line 16) | class TestOutputWriter(output_writers.StdoutOutputWriter): method __init__ (line 24) | def __init__(self): method WriteCachedEntry (line 29) | def WriteCachedEntry(self, cached_entry): class CachedCredentialsKeyCollectorTest (line 39) | class CachedCredentialsKeyCollectorTest(test_lib.BaseTestCase): method _CreateTestRegistry (line 62) | def _CreateTestRegistry(self): method testGetBootKey (line 126) | def testGetBootKey(self): method testGetLSAKey (line 135) | def testGetLSAKey(self): method testGetNLKey (line 145) | def testGetNLKey(self): method testCollect (line 160) | def testCollect(self): method testCollectEmpty (line 176) | def testCollectEmpty(self): FILE: tests/data_format.py class ErrorBytesIO (line 16) | class ErrorBytesIO(io.BytesIO): method read (line 22) | def read(self, size=None): # pylint: disable=redundant-returns-doc,un... class ErrorDataTypeMap (line 38) | class ErrorDataTypeMap(dtfabric_data_maps.DataTypeMap): method FoldByteStream (line 43) | def FoldByteStream(self, mapped_value, **unused_kwargs): method MapByteStream (line 59) | def MapByteStream(self, byte_stream, **unused_kwargs): class BinaryDataFormatTest (line 76) | class BinaryDataFormatTest(test_lib.BaseTestCase): method testDebugPrintData (line 117) | def testDebugPrintData(self): method testDebugPrintDecimalValue (line 132) | def testDebugPrintDecimalValue(self): method testDebugPrintValue (line 145) | def testDebugPrintValue(self): method testDebugPrintText (line 156) | def testDebugPrintText(self): method testReadStructureFromByteStream (line 170) | def testReadStructureFromByteStream(self): FILE: tests/environment_variables.py class EnvironmentVariablesCollectorTest (line 15) | class EnvironmentVariablesCollectorTest(shared_test_lib.BaseTestCase): method _CreateTestRegistry (line 18) | def _CreateTestRegistry(self): method testCollect (line 44) | def testCollect(self): method testCollectEmpty (line 58) | def testCollectEmpty(self): FILE: tests/eventlog_providers.py class EventLogProvidersCollectorTest (line 14) | class EventLogProvidersCollectorTest(shared_test_lib.BaseTestCase): method testCollect (line 17) | def testCollect(self): method testCollectEmpty (line 62) | def testCollectEmpty(self): FILE: tests/filters.py class WindowsRegistryKeyPathFilterTest (line 11) | class WindowsRegistryKeyPathFilterTest(shared_test_lib.BaseTestCase): method testInitialize (line 14) | def testInitialize(self): class WindowsRegistryKeyPathPrefixFilterTest (line 23) | class WindowsRegistryKeyPathPrefixFilterTest(shared_test_lib.BaseTestCase): method testInitialize (line 26) | def testInitialize(self): class WindowsRegistryKeyPathSuffixFilterTest (line 34) | class WindowsRegistryKeyPathSuffixFilterTest(shared_test_lib.BaseTestCase): method testInitialize (line 37) | def testInitialize(self): class WindowsRegistryKeyWithValuesFilterTest (line 45) | class WindowsRegistryKeyWithValuesFilterTest(shared_test_lib.BaseTestCase): method testInitialize (line 48) | def testInitialize(self): FILE: tests/hexdump.py class HexdumpTest (line 11) | class HexdumpTest(shared_test_lib.BaseTestCase): method testHexdump (line 14) | def testHexdump(self): FILE: tests/interface.py class WindowsRegistryKeyCollectorTest (line 14) | class WindowsRegistryKeyCollectorTest(shared_test_lib.BaseTestCase): method testGetStringValueFromKey (line 19) | def testGetStringValueFromKey(self): method testGetValueDataFromKey (line 57) | def testGetValueDataFromKey(self): method testGetValueFromKey (line 72) | def testGetValueFromKey(self): FILE: tests/knownfolders.py class KnownFoldersCollectorTest (line 15) | class KnownFoldersCollectorTest(shared_test_lib.BaseTestCase): method _CreateTestRegistry (line 22) | def _CreateTestRegistry(self): method testCollect (line 57) | def testCollect(self): method testCollectEmpty (line 73) | def testCollectEmpty(self): FILE: tests/mounted_devices.py class MountedDevicesCollectorTest (line 15) | class MountedDevicesCollectorTest(shared_test_lib.BaseTestCase): method _CreateTestRegistry (line 18) | def _CreateTestRegistry(self): method testCollect (line 44) | def testCollect(self): method testCollectEmpty (line 59) | def testCollectEmpty(self): FILE: tests/mru.py class MostRecentlyUsedCollectorTest (line 15) | class MostRecentlyUsedCollectorTest(test_lib.BaseTestCase): method _CreateTestRegistry (line 18) | def _CreateTestRegistry(self): method testCollect (line 50) | def testCollect(self): method testCollectEmpty (line 69) | def testCollectEmpty(self): FILE: tests/msie_zone_info.py class MSIEZoneInformationCollectorTest (line 14) | class MSIEZoneInformationCollectorTest(shared_test_lib.BaseTestCase): method testCollect (line 17) | def testCollect(self): method testCollectEmpty (line 44) | def testCollectEmpty(self): FILE: tests/output_writer.py class StdoutOutputWriterTest (line 11) | class StdoutOutputWriterTest(shared_test_lib.BaseTestCase): method testFormatDataInHexadecimal (line 16) | def testFormatDataInHexadecimal(self): method testOpenClose (line 58) | def testOpenClose(self): method testWriteDebugData (line 67) | def testWriteDebugData(self): method testWriteValue (line 73) | def testWriteValue(self): method testWriteText (line 79) | def testWriteText(self): FILE: tests/profiles.py class UserProfilesCollectorTest (line 15) | class UserProfilesCollectorTest(shared_test_lib.BaseTestCase): method _CreateTestRegistry (line 21) | def _CreateTestRegistry(self): method testCollect (line 51) | def testCollect(self): method testCollectEmpty (line 65) | def testCollectEmpty(self): FILE: tests/programscache.py class TestOutputWriter (line 16) | class TestOutputWriter(output_writers.StdoutOutputWriter): method __init__ (line 23) | def __init__(self): method WriteText (line 28) | def WriteText(self, text): class ProgramsCacheDataParserTest (line 37) | class ProgramsCacheDataParserTest(test_lib.BaseTestCase): method testParse (line 40) | def testParse(self): class ProgramsCacheCollectorTest (line 48) | class ProgramsCacheCollectorTest(test_lib.BaseTestCase): method testCollect (line 51) | def testCollect(self): method testCollectEmpty (line 78) | def testCollectEmpty(self): FILE: tests/sam.py class SecurityAccountManagerDataParserTest (line 78) | class SecurityAccountManagerDataParserTest(test_lib.BaseTestCase): method testParseFValue (line 81) | def testParseFValue(self): method testParseVValue (line 105) | def testParseVValue(self): class SecurityAccountManagerCollectorTest (line 125) | class SecurityAccountManagerCollectorTest(test_lib.BaseTestCase): method _CreateTestRegistry (line 130) | def _CreateTestRegistry(self): method testCollect (line 161) | def testCollect(self): method testCollectEmpty (line 180) | def testCollectEmpty(self): FILE: tests/services.py class WindowsServicesCollectorTest (line 15) | class WindowsServicesCollectorTest(shared_test_lib.BaseTestCase): method _CreateTestRegistry (line 23) | def _CreateTestRegistry(self): method testCollect (line 80) | def testCollect(self): method testCollectEmpty (line 99) | def testCollectEmpty(self): FILE: tests/shellfolders.py class ShellFoldersCollectorTest (line 15) | class ShellFoldersCollectorTest(shared_test_lib.BaseTestCase): method _CreateTestRegistry (line 23) | def _CreateTestRegistry(self): method testCollect (line 66) | def testCollect(self): method testCollectEmpty (line 89) | def testCollectEmpty(self): FILE: tests/sysinfo.py class SystemInfoCollectorTest (line 15) | class SystemInfoCollectorTest(test_lib.BaseTestCase): method _CreateTestRegistry (line 32) | def _CreateTestRegistry(self): method testParseInstallDate (line 93) | def testParseInstallDate(self): method testCollect (line 116) | def testCollect(self): method testCollectEmpty (line 150) | def testCollectEmpty(self): FILE: tests/task_cache.py class TaskCacheDataParserTest (line 26) | class TaskCacheDataParserTest(test_lib.BaseTestCase): method testParseDynamicInfo (line 29) | def testParseDynamicInfo(self): class TaskCacheCollectorTest (line 50) | class TaskCacheCollectorTest(test_lib.BaseTestCase): method _CreateTestRegistry (line 65) | def _CreateTestRegistry(self): method _CreateTestRegistryEmpty (line 146) | def _CreateTestRegistryEmpty(self): method testCollect (line 168) | def testCollect(self): method testCollectEmpty (line 200) | def testCollectEmpty(self): FILE: tests/test_lib.py class BaseTestCase (line 9) | class BaseTestCase(unittest.TestCase): method _GetTestFilePath (line 18) | def _GetTestFilePath(self, path_segments): method _SkipIfPathNotExists (line 31) | def _SkipIfPathNotExists(self, path): class TestOutputWriter (line 45) | class TestOutputWriter(output_writers.StdoutOutputWriter): method __init__ (line 52) | def __init__(self): method Close (line 57) | def Close(self): method Open (line 61) | def Open(self): method WriteText (line 65) | def WriteText(self, text): FILE: tests/type_libraries.py class TypeLibraryTest (line 15) | class TypeLibraryTest(test_lib.BaseTestCase): method testInitialize (line 23) | def testInitialize(self): class TypeLibraryCollectorTest (line 30) | class TypeLibraryCollectorTest(test_lib.BaseTestCase): method _CreateTestRegistry (line 43) | def _CreateTestRegistry(self): method testCollect (line 104) | def testCollect(self): method testCollectEmpty (line 125) | def testCollectEmpty(self): FILE: tests/userassist.py class UserAssistDataParserTest (line 28) | class UserAssistDataParserTest(test_lib.BaseTestCase): method testParseEntry (line 31) | def testParseEntry(self): class UserAssistCollectorTest (line 40) | class UserAssistCollectorTest(test_lib.BaseTestCase): method _CreateTestRegistry (line 52) | def _CreateTestRegistry(self): method testCollect (line 92) | def testCollect(self): method testCollectEmpty (line 109) | def testCollectEmpty(self): FILE: utils/dependencies.py class DependencyDefinition (line 8) | class DependencyDefinition: method __init__ (line 32) | def __init__(self, name): class DependencyDefinitionReader (line 54) | class DependencyDefinitionReader: method _GetConfigValue (line 71) | def _GetConfigValue(self, config_parser, section_name, value_name): method Read (line 87) | def Read(self, file_object): class DependencyHelper (line 108) | class DependencyHelper: method __init__ (line 118) | def __init__( method _CheckPythonModule (line 144) | def _CheckPythonModule(self, dependency): method _CheckPythonModuleVersion (line 168) | def _CheckPythonModuleVersion( method _ImportPythonModule (line 249) | def _ImportPythonModule(self, module_name): method _PrintCheckDependencyStatus (line 270) | def _PrintCheckDependencyStatus( method CheckDependencies (line 292) | def CheckDependencies(self, verbose_output=True): method CheckTestDependencies (line 322) | def CheckTestDependencies(self, verbose_output=True): FILE: winregrc/appcompatcache.py class AppCompatCacheHeader (line 12) | class AppCompatCacheHeader: method __init__ (line 20) | def __init__(self): class AppCompatCacheCachedEntry (line 27) | class AppCompatCacheCachedEntry: method __init__ (line 42) | def __init__(self): class AppCompatCacheDataParser (line 55) | class AppCompatCacheDataParser(data_format.BinaryDataFormat): method __init__ (line 97) | def __init__(self, debug=False, output_writer=None): method _DebugPrintCachedEntryXP (line 108) | def _DebugPrintCachedEntryXP(self, cached_entry): method _DebugPrintCachedEntry2003 (line 131) | def _DebugPrintCachedEntry2003(self, cached_entry): method _DebugPrintCachedEntry8 (line 167) | def _DebugPrintCachedEntry8(self, cached_entry_header, cached_entry_bo... method _DebugPrintHeader (line 207) | def _DebugPrintHeader(self, format_type, header): method _GetCachedEntryDataTypeMap (line 240) | def _GetCachedEntryDataTypeMap( method _ParseCommon2003CachedEntry (line 293) | def _ParseCommon2003CachedEntry(self, value_data, cached_entry_offset): method CheckSignature (line 331) | def CheckSignature(self, value_data): method ParseCachedEntry (line 372) | def ParseCachedEntry( method ParseHeader (line 542) | def ParseHeader(self, format_type, value_data): class AppCompatCacheCollector (line 618) | class AppCompatCacheCollector(interface.WindowsRegistryKeyCollector): method __init__ (line 625) | def __init__(self, debug=False, output_writer=None): method _CollectAppCompatCacheFromKey (line 638) | def _CollectAppCompatCacheFromKey(self, app_compat_cache_key): method Collect (line 692) | def Collect(self, registry, all_control_sets=False): FILE: winregrc/application_identifiers.py class ApplicationIdentifier (line 6) | class ApplicationIdentifier: method __init__ (line 14) | def __init__(self, guid, description): class ApplicationIdentifiersCollector (line 26) | class ApplicationIdentifiersCollector(interface.WindowsRegistryKeyCollec... method _CollectApplicationIdentifiers (line 32) | def _CollectApplicationIdentifiers(self, application_identifiers_key): method Collect (line 51) | def Collect(self, registry): FILE: winregrc/cached_credentials.py class CachedCredentialsKeyCollector (line 13) | class CachedCredentialsKeyCollector(interface.WindowsRegistryKeyCollector): method __init__ (line 45) | def __init__(self, debug=False, output_writer=None): method _DecryptARC4 (line 55) | def _DecryptARC4(self, key, data): method _DecryptTripleDES (line 70) | def _DecryptTripleDES(self, key, data): method _GetBootKey (line 86) | def _GetBootKey(self, registry): method _GetLSAKey (line 134) | def _GetLSAKey(self, registry, boot_key): method _GetNLKey (line 167) | def _GetNLKey(self, registry, lsa_key): method _UnpackLSAKey (line 215) | def _UnpackLSAKey(self, lsa_key): method Collect (line 240) | def Collect(self, registry): # pylint: disable=arguments-differ FILE: winregrc/catalog.py class CatalogKeyDescriptor (line 6) | class CatalogKeyDescriptor: method __init__ (line 16) | def __init__(self): class CatalogCollector (line 24) | class CatalogCollector: method __init__ (line 27) | def __init__(self, group_keys=False): method _CollectCatalogKeyDescriptors (line 36) | def _CollectCatalogKeyDescriptors(self, registry_key): method Collect (line 58) | def Collect(self, root_key): FILE: winregrc/controlpanel_items.py class ControlPanelItem (line 6) | class ControlPanelItem: method __init__ (line 15) | def __init__(self, identifier, module_name): class ControlPanelItemsCollector (line 28) | class ControlPanelItemsCollector(interface.WindowsRegistryKeyCollector): method _CollectControlPanelItems (line 35) | def _CollectControlPanelItems(self, control_panel_namespace_key): method Collect (line 51) | def Collect(self, registry): FILE: winregrc/data_format.py class BinaryDataFormat (line 13) | class BinaryDataFormat: method __init__ (line 26) | def __init__(self, debug=False, output_writer=None): method _DebugPrintData (line 39) | def _DebugPrintData(self, description, data): method _DebugPrintDecimalValue (line 52) | def _DebugPrintDecimalValue(self, description, value): method _DebugPrintFiletimeValue (line 61) | def _DebugPrintFiletimeValue(self, description, value): method _DebugPrintStructureObject (line 82) | def _DebugPrintStructureObject(self, structure_object, debug_info): method _DebugPrintText (line 92) | def _DebugPrintText(self, text): method _DebugPrintValue (line 101) | def _DebugPrintValue(self, description, value): method _FormatDataInHexadecimal (line 112) | def _FormatDataInHexadecimal(self, data): method _FormatIntegerAsDecimal (line 176) | def _FormatIntegerAsDecimal(self, integer): method _FormatIntegerAsFiletime (line 187) | def _FormatIntegerAsFiletime(self, integer): method _FormatIntegerAsHexadecimal2 (line 209) | def _FormatIntegerAsHexadecimal2(self, integer): method _FormatIntegerAsHexadecimal4 (line 220) | def _FormatIntegerAsHexadecimal4(self, integer): method _FormatIntegerAsHexadecimal8 (line 231) | def _FormatIntegerAsHexadecimal8(self, integer): method _FormatStructureObject (line 242) | def _FormatStructureObject(self, structure_object, debug_info): method _FormatValue (line 282) | def _FormatValue(self, description, value): method _GetDataTypeMap (line 296) | def _GetDataTypeMap(self, name): method _ReadDefinitionFile (line 315) | def _ReadDefinitionFile(self, filename): method _ReadStructureFromByteStream (line 335) | def _ReadStructureFromByteStream( FILE: winregrc/delegatefolders.py class DelegateFolder (line 6) | class DelegateFolder: method __init__ (line 15) | def __init__(self, identifier, name, namespace): class DelegateFoldersCollector (line 29) | class DelegateFoldersCollector(interface.WindowsRegistryKeyCollector): method _CollectDelegateFolders (line 36) | def _CollectDelegateFolders(self, delegate_folders_key, namespace): method Collect (line 51) | def Collect(self, registry): FILE: winregrc/environment_variables.py class EnvironmentVariable (line 6) | class EnvironmentVariable: method __init__ (line 14) | def __init__(self, name, value): class EnvironmentVariablesCollector (line 26) | class EnvironmentVariablesCollector(interface.WindowsRegistryKeyCollector): method _CollectEnvironmentVariablesFromEnvironmentKey (line 59) | def _CollectEnvironmentVariablesFromEnvironmentKey(self, registry_key): method _CollectEnvironmentVariablesWithMappings (line 73) | def _CollectEnvironmentVariablesWithMappings(self, registry_key, mappi... method Collect (line 88) | def Collect(self, registry): FILE: winregrc/errors.py class Error (line 4) | class Error(Exception): class ParseError (line 8) | class ParseError(Error): FILE: winregrc/eventlog_providers.py class EventLogProvider (line 6) | class EventLogProvider: method __init__ (line 22) | def __init__(self): class EventLogProvidersCollector (line 35) | class EventLogProvidersCollector(interface.WindowsRegistryKeyCollector): method _CollectEventLogProviders (line 45) | def _CollectEventLogProviders( method _CollectEventLogProvidersFromPublishersKeys (line 122) | def _CollectEventLogProvidersFromPublishersKeys(self, winevt_publisher... method _CollectEventLogProvidersFromServicesKey (line 146) | def _CollectEventLogProvidersFromServicesKey(self, services_eventlog_k... method _GetEventLogProviderSortedKey (line 181) | def _GetEventLogProviderSortedKey(self, event_log_provider): method _GetMessageFilePathsFromKey (line 195) | def _GetMessageFilePathsFromKey(self, registry_key, value_name): method _MergeEventLogProviders (line 217) | def _MergeEventLogProviders( method _NormalizeMessageFiles (line 240) | def _NormalizeMessageFiles(self, message_files): method Collect (line 259) | def Collect(self, registry): FILE: winregrc/filters.py class BaseWindowsRegistryKeyFilter (line 6) | class BaseWindowsRegistryKeyFilter: method key_paths (line 13) | def key_paths(self): method Match (line 18) | def Match(self, registry_key): class WindowsRegistryKeyPathFilter (line 29) | class WindowsRegistryKeyPathFilter(BaseWindowsRegistryKeyFilter): method __init__ (line 42) | def __init__(self, key_path): method key_paths (line 88) | def key_paths(self): method Match (line 98) | def Match(self, registry_key): class WindowsRegistryKeyPathPrefixFilter (line 126) | class WindowsRegistryKeyPathPrefixFilter(BaseWindowsRegistryKeyFilter): method __init__ (line 129) | def __init__(self, key_path_prefix): method Match (line 138) | def Match(self, registry_key): class WindowsRegistryKeyPathSuffixFilter (line 150) | class WindowsRegistryKeyPathSuffixFilter(BaseWindowsRegistryKeyFilter): method __init__ (line 153) | def __init__(self, key_path_suffix): method Match (line 162) | def Match(self, registry_key): class WindowsRegistryKeyWithValuesFilter (line 174) | class WindowsRegistryKeyWithValuesFilter(BaseWindowsRegistryKeyFilter): method __init__ (line 179) | def __init__(self, value_names): method Match (line 188) | def Match(self, registry_key): FILE: winregrc/hexdump.py function Hexdump (line 8) | def Hexdump(data): FILE: winregrc/interface.py class WindowsRegistryKeyCollector (line 4) | class WindowsRegistryKeyCollector: method __init__ (line 7) | def __init__(self, debug=False): method _GetStringValueFromKey (line 16) | def _GetStringValueFromKey( method _GetValueDataFromKey (line 40) | def _GetValueDataFromKey(self, registry_key, value_name): method _GetValueFromKey (line 59) | def _GetValueFromKey(self, registry_key, value_name, default_value=None): FILE: winregrc/knownfolders.py class KnownFolder (line 6) | class KnownFolder: method __init__ (line 16) | def __init__(self, identifier, display_name, localized_display_name): class KnownFoldersCollector (line 31) | class KnownFoldersCollector(interface.WindowsRegistryKeyCollector): method _CollectKnownFolders (line 38) | def _CollectKnownFolders(self, folder_descriptions_key): method Collect (line 55) | def Collect(self, registry): FILE: winregrc/mounted_devices.py class MountedDevice (line 7) | class MountedDevice: method __init__ (line 18) | def __init__(self, identifier): class MountedDevicesCollector (line 32) | class MountedDevicesCollector(data_format.BinaryDataFormat): method _ParseMountedDevicesValue (line 40) | def _ParseMountedDevicesValue(self, registry_value): method Collect (line 91) | def Collect(self, registry): FILE: winregrc/mru.py class MostRecentlyUsedEntry (line 9) | class MostRecentlyUsedEntry: method __init__ (line 20) | def __init__( class MostRecentlyUsedCollector (line 40) | class MostRecentlyUsedCollector(data_format.BinaryDataFormat): method __init__ (line 101) | def __init__(self, debug=False, output_writer=None): method _InKeyPaths (line 112) | def _InKeyPaths(self, key_path, key_paths): method _ProcessKey (line 129) | def _ProcessKey(self, registry_key): method _ProcessKeyWithMRUListValue (line 156) | def _ProcessKeyWithMRUListValue(self, registry_key): method _ProcessKeyWithMRUListExValue (line 234) | def _ProcessKeyWithMRUListExValue(self, registry_key): method _ProcessMRUEntryShellItem (line 314) | def _ProcessMRUEntryShellItem(self, key_path, value_name, value_data): method _ProcessMRUEntryShellItemList (line 329) | def _ProcessMRUEntryShellItemList(self, key_path, value_name, value_da... method _ProcessMRUEntryString (line 345) | def _ProcessMRUEntryString(self, key_path, value_name, value_data): method _ProcessMRUEntryStringAndShellItem (line 378) | def _ProcessMRUEntryStringAndShellItem( method _ProcessMRUEntryStringAndShellItemList (line 414) | def _ProcessMRUEntryStringAndShellItemList( method Collect (line 450) | def Collect(self, registry): # pylint: disable=arguments-differ FILE: winregrc/msie_zone_info.py class MSIEZoneInformation (line 6) | class MSIEZoneInformation: method __init__ (line 16) | def __init__(self, zone, zone_name, control, control_value): class MSIEZoneInformationCollector (line 32) | class MSIEZoneInformationCollector(interface.WindowsRegistryKeyCollector): method _CollectZoneInformationFromLockdownKey (line 84) | def _CollectZoneInformationFromLockdownKey(self, lockdown_key): method _CollectZoneInformationFromZonesKey (line 107) | def _CollectZoneInformationFromZonesKey(self, zones_key): method Collect (line 139) | def Collect(self, registry): FILE: winregrc/output_writers.py class OutputWriter (line 11) | class OutputWriter: method _FormatDataInHexadecimal (line 20) | def _FormatDataInHexadecimal(self, data): method _FormatFATDateTimeValue (line 84) | def _FormatFATDateTimeValue(self, value): method _FormatFiletimeValue (line 103) | def _FormatFiletimeValue(self, value): method Close (line 127) | def Close(self): method DebugPrintData (line 130) | def DebugPrintData(self, description, data): method DebugPrintValue (line 142) | def DebugPrintValue(self, description, value): method DebugPrintText (line 153) | def DebugPrintText(self, text): method Open (line 162) | def Open(self): method WriteDebugData (line 170) | def WriteDebugData(self, description, data): method WriteIntegerValueAsDecimal (line 179) | def WriteIntegerValueAsDecimal(self, description, value): method WriteFiletimeValue (line 188) | def WriteFiletimeValue(self, description, value): method WriteText (line 197) | def WriteText(self, text): method WriteValue (line 205) | def WriteValue(self, description, value): class StdoutOutputWriter (line 214) | class StdoutOutputWriter(OutputWriter): method Close (line 217) | def Close(self): method Open (line 221) | def Open(self): method WriteDebugData (line 229) | def WriteDebugData(self, description, data): method WriteFiletimeValue (line 242) | def WriteFiletimeValue(self, description, value): method WriteIntegerValueAsDecimal (line 252) | def WriteIntegerValueAsDecimal(self, description, value): method WriteText (line 261) | def WriteText(self, text): method WriteValue (line 269) | def WriteValue(self, description, value): FILE: winregrc/profiles.py class UserProfile (line 6) | class UserProfile: method __init__ (line 14) | def __init__(self, security_identifier, profile_path): class UserProfilesCollector (line 26) | class UserProfilesCollector(interface.WindowsRegistryKeyCollector): method _CollectUserProfiles (line 33) | def _CollectUserProfiles(self, profile_list_key): method Collect (line 47) | def Collect(self, registry): FILE: winregrc/programscache.py class ProgramsCacheDataParser (line 15) | class ProgramsCacheDataParser(data_format.BinaryDataFormat): method _DebugPrintEntryFooter (line 20) | def _DebugPrintEntryFooter(self, entry_footer): method _DebugPrintEntryHeader (line 28) | def _DebugPrintEntryHeader(self, entry_header): method _DebugPrintHeader (line 36) | def _DebugPrintHeader(self, header): method _DebugPrintShellItem (line 44) | def _DebugPrintShellItem(self, shell_item): method _ParseEntryFooter (line 56) | def _ParseEntryFooter(self, value_data, value_data_offset): method _ParseHeader (line 94) | def _ParseHeader(self, value_data): method Parse (line 130) | def Parse(self, value_data): class ProgramsCacheCollector (line 247) | class ProgramsCacheCollector(interface.WindowsRegistryKeyCollector): method __init__ (line 258) | def __init__(self, debug=False, output_writer=None): method _CollectProgramsCacheFromValue (line 269) | def _CollectProgramsCacheFromValue(self, registry, key_path, value_name): method Collect (line 293) | def Collect(self, registry): # pylint: disable=arguments-differ FILE: winregrc/sam.py class UserAccount (line 13) | class UserAccount: method __init__ (line 37) | def __init__(self): class SecurityAccountManagerDataParser (line 57) | class SecurityAccountManagerDataParser(data_format.BinaryDataFormat): method _DebugPrintUserInformationDescriptor (line 143) | def _DebugPrintUserInformationDescriptor( method _FormatSecurityDescriptor (line 172) | def _FormatSecurityDescriptor(self, security_descriptor_data): method _FormatUserAccountControlFlags (line 202) | def _FormatUserAccountControlFlags(self, user_account_control_flags): method ParseCValue (line 223) | def ParseCValue(self, value_data): method _ParseFiletime (line 244) | def _ParseFiletime(self, filetime): method ParseFValue (line 261) | def ParseFValue(self, value_data, user_account): method ParseVValue (line 299) | def ParseVValue(self, value_data, user_account): class SecurityAccountManagerCollector (line 375) | class SecurityAccountManagerCollector(interface.WindowsRegistryKeyCollec... method __init__ (line 385) | def __init__(self, debug=False, output_writer=None): method Collect (line 398) | def Collect(self, registry): # pylint: disable=arguments-differ FILE: winregrc/scripts/appcompatcache.py function Main (line 15) | def Main(): FILE: winregrc/scripts/application_identifiers.py class StdoutWriter (line 15) | class StdoutWriter(output_writers.StdoutOutputWriter): method WriteApplicationIdentifier (line 18) | def WriteApplicationIdentifier(self, application_identifier): function Main (line 28) | def Main(): FILE: winregrc/scripts/cached_credentials.py function Main (line 15) | def Main(): FILE: winregrc/scripts/catalog.py class StdoutWriter (line 17) | class StdoutWriter(output_writers.StdoutOutputWriter): method WriteKeyPath (line 20) | def WriteKeyPath(self, key_path): method WriteValueDescriptor (line 28) | def WriteValueDescriptor(self, value_name, value_data_type): function Main (line 38) | def Main(): FILE: winregrc/scripts/controlpanel_items.py class StdoutWriter (line 15) | class StdoutWriter(output_writers.StdoutOutputWriter): method WriteHeader (line 20) | def WriteHeader(self): method WriteKnownFolder (line 24) | def WriteKnownFolder(self, control_panel_item, windows_versions): function Main (line 46) | def Main(): FILE: winregrc/scripts/delegatefolders.py class StdoutWriter (line 15) | class StdoutWriter(output_writers.StdoutOutputWriter): method WriteDelegateFolder (line 18) | def WriteDelegateFolder(self, delegate_folder): function Main (line 31) | def Main(): FILE: winregrc/scripts/environment_variables.py class StdoutWriter (line 15) | class StdoutWriter(output_writers.StdoutOutputWriter): method WriteEnvironmentVariable (line 18) | def WriteEnvironmentVariable(self, environment_variable): function Main (line 27) | def Main(): FILE: winregrc/scripts/eventlog_providers.py class StdoutWriter (line 15) | class StdoutWriter(output_writers.StdoutOutputWriter): method WriteEventLogProvider (line 18) | def WriteEventLogProvider(self, eventlog_provider): function Main (line 76) | def Main(): FILE: winregrc/scripts/knownfolders.py class StdoutWriter (line 15) | class StdoutWriter(output_writers.StdoutOutputWriter): method WriteHeader (line 20) | def WriteHeader(self): method WriteKnownFolder (line 24) | def WriteKnownFolder(self, known_folder, windows_versions): function Main (line 51) | def Main(): FILE: winregrc/scripts/mounted_devices.py class StdoutWriter (line 15) | class StdoutWriter(output_writers.StdoutOutputWriter): method WriteMountedDevice (line 18) | def WriteMountedDevice(self, mounted_device): function Main (line 44) | def Main(): FILE: winregrc/scripts/mru.py class StdoutWriter (line 19) | class StdoutWriter(output_writers.StdoutOutputWriter): method _WritePropertyStore (line 22) | def _WritePropertyStore(self, fwps_store): method _WriteShellItem (line 70) | def _WriteShellItem(self, fwsi_item): method _WriteShellItemCompressedFolder (line 168) | def _WriteShellItemCompressedFolder(self, fwsi_item): method _WriteShellItemControlPanelCategory (line 176) | def _WriteShellItemControlPanelCategory(self, fwsi_item): method _WriteShellItemControlPanelItem (line 186) | def _WriteShellItemControlPanelItem(self, fwsi_item): method _WriteShellItemFileEntry (line 194) | def _WriteShellItemFileEntry(self, fwsi_item): method _WriteShellItemNetworkLocation (line 212) | def _WriteShellItemNetworkLocation(self, fwsi_item): method _WriteShellItemUsersPropertyView (line 226) | def _WriteShellItemUsersPropertyView(self, fwsi_item): method _WriteShellItemVolume (line 238) | def _WriteShellItemVolume(self, fwsi_item): method WriteShellItem (line 255) | def WriteShellItem(self, fwsi_item): method WriteShellItemList (line 264) | def WriteShellItemList(self, fwsi_item_list): function Main (line 281) | def Main(): FILE: winregrc/scripts/msie_zone_info.py class StdoutWriter (line 15) | class StdoutWriter(output_writers.StdoutOutputWriter): method _GetControlValueDescription (line 123) | def _GetControlValueDescription(self, control, control_value): method WriteZoneInformation (line 151) | def WriteZoneInformation(self, zone_information): function Main (line 190) | def Main(): FILE: winregrc/scripts/profiles.py class StdoutWriter (line 15) | class StdoutWriter(output_writers.StdoutOutputWriter): method WriteUserProfile (line 18) | def WriteUserProfile(self, user_profile): function Main (line 29) | def Main(): FILE: winregrc/scripts/programscache.py function Main (line 15) | def Main(): FILE: winregrc/scripts/sam.py function Main (line 15) | def Main(): FILE: winregrc/scripts/services.py class StdoutWriter (line 15) | class StdoutWriter(output_writers.StdoutOutputWriter): method __init__ (line 18) | def __init__(self, use_tsv=False): method WriteWindowsService (line 28) | def WriteWindowsService(self, service): function Main (line 82) | def Main(): FILE: winregrc/scripts/shellfolders.py class StdoutWriter (line 15) | class StdoutWriter(output_writers.StdoutOutputWriter): method WriteHeader (line 20) | def WriteHeader(self): method WriteShellFolder (line 24) | def WriteShellFolder(self, shell_folder, windows_versions): function Main (line 54) | def Main(): FILE: winregrc/scripts/srum_extensions.py class StdoutWriter (line 15) | class StdoutWriter(output_writers.StdoutOutputWriter): method WriteSRUMExtension (line 18) | def WriteSRUMExtension(self, srum_extension): function Main (line 27) | def Main(): FILE: winregrc/scripts/sysinfo.py function Main (line 15) | def Main(): FILE: winregrc/scripts/syskey.py function Main (line 16) | def Main(): FILE: winregrc/scripts/task_cache.py function Main (line 15) | def Main(): FILE: winregrc/scripts/time_zones.py class CSVFileWriter (line 15) | class CSVFileWriter(output_writers.OutputWriter): method __init__ (line 20) | def __init__(self, path): method Close (line 30) | def Close(self): method Open (line 35) | def Open(self): method WriteTimeZone (line 45) | def WriteTimeZone(self, time_zone): method WriteText (line 63) | def WriteText(self, text): class StdoutWriter (line 72) | class StdoutWriter(output_writers.StdoutOutputWriter): method WriteTimeZone (line 75) | def WriteTimeZone(self, time_zone): function Main (line 94) | def Main(): FILE: winregrc/scripts/type_libraries.py function Main (line 15) | def Main(): FILE: winregrc/scripts/usbstor.py class StdoutWriter (line 15) | class StdoutWriter(output_writers.StdoutOutputWriter): method WriteUserProfile (line 47) | def WriteUserProfile(self, storage_device): function Main (line 91) | def Main(): FILE: winregrc/scripts/userassist.py function Main (line 15) | def Main(): FILE: winregrc/services.py class WindowsService (line 6) | class WindowsService: method __init__ (line 41) | def __init__( method __eq__ (line 64) | def __eq__(self, other): method __ne__ (line 80) | def __ne__(self, other): method GetObjectNameDescription (line 96) | def GetObjectNameDescription(self): method GetServiceTypeDescription (line 104) | def GetServiceTypeDescription(self): method GetStartValueDescription (line 113) | def GetStartValueDescription(self): class WindowsServicesCollector (line 123) | class WindowsServicesCollector(interface.WindowsRegistryKeyCollector): method _CollectWindowsServicesFromServicesKey (line 126) | def _CollectWindowsServicesFromServicesKey(self, services_key): method _CollectWindowsServicesFromSystemKey (line 147) | def _CollectWindowsServicesFromSystemKey(self, system_key): method Collect (line 162) | def Collect(self, registry, all_control_sets=False): method Compare (line 185) | def Compare(self, registry, output_writer): FILE: winregrc/shellfolders.py class WindowsShellFolder (line 6) | class WindowsShellFolder: method __init__ (line 17) | def __init__(self, identifier=None, localized_string=None): class ShellFoldersCollector (line 32) | class ShellFoldersCollector(interface.WindowsRegistryKeyCollector): method __init__ (line 37) | def __init__(self, debug=False): method _CollectShellFolders (line 46) | def _CollectShellFolders(self, class_identifiers_key): method _GetShellFolderName (line 81) | def _GetShellFolderName(self, class_identifier_key): method Collect (line 111) | def Collect(self, registry): FILE: winregrc/srum_extensions.py class SRUMExtension (line 6) | class SRUMExtension: method __init__ (line 14) | def __init__(self, guid, dll_name): class SRUMExtensionsCollector (line 26) | class SRUMExtensionsCollector(interface.WindowsRegistryKeyCollector): method Collect (line 33) | def Collect(self, registry, output_writer): FILE: winregrc/sysinfo.py class SystemInformation (line 9) | class SystemInformation: method __init__ (line 26) | def __init__(self): class SystemInfoCollector (line 42) | class SystemInfoCollector(interface.WindowsRegistryKeyCollector): method __init__ (line 64) | def __init__(self, debug=False, output_writer=None): method _ParseInstallDate (line 75) | def _ParseInstallDate(self, registry_value): method Collect (line 93) | def Collect(self, registry): # pylint: disable=arguments-differ FILE: winregrc/syskey.py class SystemKey (line 8) | class SystemKey: method __init__ (line 15) | def __init__(self): class SystemKeyCollector (line 21) | class SystemKeyCollector(interface.WindowsRegistryKeyCollector): method __init__ (line 31) | def __init__(self, debug=False, output_writer=None): method _GetBootKey (line 42) | def _GetBootKey(self, registry): method Collect (line 90) | def Collect(self, registry): # pylint: disable=arguments-differ FILE: winregrc/task_cache.py class CachedTask (line 15) | class CachedTask: method __init__ (line 26) | def __init__(self): class TaskCacheDataParser (line 35) | class TaskCacheDataParser(data_format.BinaryDataFormat): method __init__ (line 40) | def __init__(self, debug=False, output_writer=None): method _ParseFiletime (line 51) | def _ParseFiletime(self, filetime): method ParseDynamicInfo (line 68) | def ParseDynamicInfo(self, value_data, cached_task): class TaskCacheCollector (line 130) | class TaskCacheCollector(interface.WindowsRegistryKeyCollector): method __init__ (line 141) | def __init__(self, debug=False, output_writer=None): method _GetIdValue (line 153) | def _GetIdValue(self, registry_key): method Collect (line 171) | def Collect(self, registry): # pylint: disable=arguments-differ FILE: winregrc/time_zones.py class TimeZone (line 8) | class TimeZone: method __init__ (line 17) | def __init__(self, name): class TimeZoneInformationDataParser (line 29) | class TimeZoneInformationDataParser(data_format.BinaryDataFormat): method _FormatSystemTime (line 51) | def _FormatSystemTime(self, systemtime): method ParseTZIValue (line 74) | def ParseTZIValue(self, value_data, time_zone): class TimeZonesCollector (line 102) | class TimeZonesCollector(interface.WindowsRegistryKeyCollector): method Collect (line 109) | def Collect(self, registry, output_writer): FILE: winregrc/type_libraries.py class TypeLibrary (line 6) | class TypeLibrary: method __init__ (line 16) | def __init__(self, identifier, version, description, typelib_filename): class TypeLibrariesCollector (line 32) | class TypeLibrariesCollector(interface.WindowsRegistryKeyCollector): method __init__ (line 42) | def __init__(self, debug=False, output_writer=None): method Collect (line 53) | def Collect(self, registry): # pylint: disable=arguments-differ FILE: winregrc/usbstor.py class USBStorageDeviceProperty (line 10) | class USBStorageDeviceProperty: method __init__ (line 20) | def __init__(self, property_set, identifier): class USBStorageDevice (line 34) | class USBStorageDevice: method __init__ (line 47) | def __init__(self): class USBStorageDeviceCollector (line 59) | class USBStorageDeviceCollector(data_format.BinaryDataFormat): method _CollectUSBStorageDevices (line 67) | def _CollectUSBStorageDevices(self, usbstor_key): method _GetPropertyValueData (line 79) | def _GetPropertyValueData(self, property_value_key, value_type): method _GetPropertyValueType (line 116) | def _GetPropertyValueType(self, property_value_key): method _GetStringValueFromKey (line 140) | def _GetStringValueFromKey( method _GetValueDataFromKey (line 164) | def _GetValueDataFromKey(self, registry_key, value_name): method _ParseDeviceKey (line 183) | def _ParseDeviceKey(self, device_key): method _ParseFiletime (line 238) | def _ParseFiletime(self, filetime): method Collect (line 255) | def Collect(self, registry): FILE: winregrc/userassist.py class UserAssistEntry (line 11) | class UserAssistEntry: method __init__ (line 20) | def __init__(self, guid=None, name=None, value_name=None): class UserAssistDataParser (line 34) | class UserAssistDataParser(data_format.BinaryDataFormat): method _DebugPrintEntry (line 40) | def _DebugPrintEntry(self, format_version, user_assist_entry): method ParseEntry (line 83) | def ParseEntry(self, format_version, entry_data): class UserAssistCollector (line 125) | class UserAssistCollector(interface.WindowsRegistryKeyCollector): method __init__ (line 136) | def __init__(self, debug=False, output_writer=None): method _CollectUserAssistFromKey (line 149) | def _CollectUserAssistFromKey(self, guid_subkey): method Collect (line 203) | def Collect(self, registry): # pylint: disable=arguments-differ FILE: winregrc/versions.py class WindowsVersions (line 4) | class WindowsVersions: method KeyFunction (line 41) | def KeyFunction(cls, windows_version): FILE: winregrc/volume_scanner.py class VolumeScannerOptions (line 15) | class VolumeScannerOptions(dfvfs_volume_scanner.VolumeScannerOptions): method __init__ (line 30) | def __init__(self): class SingleFileWindowsRegistryFileReader (line 36) | class SingleFileWindowsRegistryFileReader( method __init__ (line 40) | def __init__(self, path): method Open (line 49) | def Open(self, path, ascii_codepage='cp1252'): class WindowsRegistryVolumeScanner (line 86) | class WindowsRegistryVolumeScanner(dfvfs_volume_scanner.WindowsVolumeSca... method __init__ (line 93) | def __init__(self, mediator=None): method _GetUsername (line 106) | def _GetUsername(self, options): method IsSingleFileRegistry (line 163) | def IsSingleFileRegistry(self): method ScanForWindowsVolume (line 171) | def ScanForWindowsVolume(self, source_path, options=None): class WindowsRegistryVolumeScannerMediator (line 214) | class WindowsRegistryVolumeScannerMediator( method GetUsername (line 222) | def GetUsername(self, usernames): method _PrintUsernames (line 260) | def _PrintUsernames(self, usernames):