Evtx.Evtx.Record

Package Evtx :: Module Evtx :: Class Record |
[hide private]
[frames] | no frames]

# Class Record

source code

Instance Methods | [hide private]
__init__(self, buf, offset, chunk) Constructor. | source code
__repr__(self) repr(x) | source code
__str__(self) str(x) | source code
root(self) | source code
length(self) | source code
verify(self) | source code
data(self) Return the raw data block which makes up this record as a bytestring. | source code
Inherited from `BinaryParser.Block`: `__unicode__`, `absolute_offset`, `current_field_offset`, `declare_field`, `offset`, `pack_word`, `unpack_binary`, `unpack_byte`, `unpack_dosdate`, `unpack_double`, `unpack_dword`, `unpack_dword_be`, `unpack_filetime`, `unpack_float`, `unpack_guid`, `unpack_int16`, `unpack_int32`, `unpack_int64`, `unpack_int8`, `unpack_qword`, `unpack_string`, `unpack_systemtime`, `unpack_word`, `unpack_word_be`, `unpack_wstring` Inherited from `object`: `__delattr__`, `__format__`, `__getattribute__`, `__hash__`, `__new__`, `__reduce__`, `__reduce_ex__`, `__setattr__`, `__sizeof__`, `__subclasshook__`

Properties | [hide private]
Inherited from `object`: `__class__`

Method Details | [hide private]

### __init__(self, buf, offset, chunk) (Constructor) | source code
    Constructor.
    Arguments:
    - `buf`: Byte string containing stuff to parse.
    - `offset`: The offset into the buffer at which the block starts.
Overrides: object.__init__ (inherited documentation)

### __repr__(self) (Representation operator) | source code
repr(x) Overrides: object.__repr__ (inherited documentation)

### __str__(self) (Informal representation operator) | source code
str(x) Overrides: object.__str__ (inherited documentation)

### data(self) | source code
    Return the raw data block which makes up this record as a bytestring.

    @rtype str
    @return A string that is a copy of the buffer that makes
      up this record.