Package Evtx :: Module Evtx :: Class Record
[hide private]
[frames] | no frames]

Class Record

source code


Instance Methods [hide private]
 
__init__(self, buf, offset, chunk)
Constructor.
source code
 
__repr__(self)
repr(x)
source code
 
__str__(self)
str(x)
source code
 
root(self) source code
 
length(self) source code
 
verify(self) source code
 
data(self)
Return the raw data block which makes up this record as a bytestring.
source code

Inherited from BinaryParser.Block: __unicode__, absolute_offset, current_field_offset, declare_field, offset, pack_word, unpack_binary, unpack_byte, unpack_dosdate, unpack_double, unpack_dword, unpack_dword_be, unpack_filetime, unpack_float, unpack_guid, unpack_int16, unpack_int32, unpack_int64, unpack_int8, unpack_qword, unpack_string, unpack_systemtime, unpack_word, unpack_word_be, unpack_wstring

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __setattr__, __sizeof__, __subclasshook__

Properties [hide private]

Inherited from object: __class__

Method Details [hide private]

__init__(self, buf, offset, chunk)
(Constructor)

source code 

Constructor.
Arguments:
- `buf`: Byte string containing stuff to parse.
- `offset`: The offset into the buffer at which the block starts.

Overrides: object.__init__
(inherited documentation)

__repr__(self)
(Representation operator)

source code 

repr(x)

Overrides: object.__repr__
(inherited documentation)

__str__(self)
(Informal representation operator)

source code 

str(x)

Overrides: object.__str__
(inherited documentation)

data(self)

source code 

Return the raw data block which makes up this record as a bytestring.

@rtype str
@return A string that is a copy of the buffer that makes
  up this record.