SYMBOL INDEX (45 symbols across 7 files) FILE: evtxtract/__init__.py class CompleteRecord (line 14) | class CompleteRecord(object): method __init__ (line 17) | def __init__(self, offset, eid, xml): class IncompleteRecord (line 24) | class IncompleteRecord(object): method __init__ (line 27) | def __init__(self, offset, eid, substitutions): function extract (line 34) | def extract(buf): FILE: evtxtract/carvers.py class ParseError (line 27) | class ParseError(RuntimeError): pass function is_chunk_header (line 30) | def is_chunk_header(buf, offset): function find_evtx_chunks (line 76) | def find_evtx_chunks(buf): function is_record (line 98) | def is_record(buf, offset): function find_evtx_records (line 130) | def find_evtx_records(buf): function extract_chunk_records (line 155) | def extract_chunk_records(buf, offset): function extract_chunk_templates (line 195) | def extract_chunk_templates(buf, offset): class MaxOffsetReached (line 242) | class MaxOffsetReached(Exception): pass function does_root_have_resident_template (line 245) | def does_root_have_resident_template(buf, offset, max_offset): function extract_root_substitutions (line 316) | def extract_root_substitutions(buf, offset, max_offset): function extract_record (line 577) | def extract_record(buf, offset): FILE: evtxtract/main.py function output_record (line 14) | def output_record(args, r): function format_incomplete_record (line 51) | def format_incomplete_record(record): function main (line 72) | def main(argv=None): FILE: evtxtract/templates.py class Template (line 17) | class Template(object): method __init__ (line 20) | def __init__(self, eid, xml): method get_id (line 27) | def get_id(self): method _get_placeholders (line 48) | def _get_placeholders(self): method match_substitutions (line 67) | def match_substitutions(self, substitutions): method _escape (line 119) | def _escape(value): method insert_substitutions (line 130) | def insert_substitutions(self, substitutions): function make_replacement (line 156) | def make_replacement(template, index, substitution): function get_complete_template (line 174) | def get_complete_template(root, current_index=0): function get_template (line 220) | def get_template(record): FILE: evtxtract/utils.py function to_lxml (line 9) | def to_lxml(record_xml): function get_child (line 23) | def get_child(node, tag, function get_eid (line 36) | def get_eid(record_xml): class Mmap (line 53) | class Mmap(object): method __init__ (line 58) | def __init__(self, filename): method __enter__ (line 64) | def __enter__(self): method __exit__ (line 69) | def __exit__(self, type, value, traceback): FILE: tests/fixtures.py function image (line 13) | def image(request): function image_file (line 21) | def image_file(request): function image_mmap (line 27) | def image_mmap(request): FILE: tests/test_all.py function test_find_chunks (line 14) | def test_find_chunks(image_mmap): function first (line 55) | def first(s): function test_extract_records (line 60) | def test_extract_records(image_mmap): function test_extract_templates (line 110) | def test_extract_templates(image_mmap): function test_find_records (line 136) | def test_find_records(image_mmap): function test_evtxtract (line 143) | def test_evtxtract(image_mmap):