:py:mod:`dissect.target.plugins.os.windows.log.amcache`
=======================================================

.. py:module:: dissect.target.plugins.os.windows.log.amcache


Module Contents
---------------

Classes
~~~~~~~

.. autoapisummary::

   dissect.target.plugins.os.windows.log.amcache.AmcacheInstallPlugin



Functions
~~~~~~~~~

.. autoapisummary::
   :nosignatures:

   dissect.target.plugins.os.windows.log.amcache.create_record



Attributes
~~~~~~~~~~

.. autoapisummary::

   dissect.target.plugins.os.windows.log.amcache.re_field
   dissect.target.plugins.os.windows.log.amcache.COMMON_ELEMENTS
   dissect.target.plugins.os.windows.log.amcache.AmcacheFileCreateRecord
   dissect.target.plugins.os.windows.log.amcache.AmcacheArpCreateRecord


.. py:data:: re_field

   

.. py:data:: COMMON_ELEMENTS
   :value: [('datetime', 'start_time'), ('datetime', 'stop_time'), ('datetime', 'created'), ('datetime',...

   

.. py:data:: AmcacheFileCreateRecord

   

.. py:data:: AmcacheArpCreateRecord

   

.. py:function:: create_record(description: Union[AmcacheFileCreateRecord, AmcacheArpCreateRecord], filename: str, install_properties: dict[str, str], create: str, target: dissect.target.Target) -> dissect.target.helpers.record.TargetRecordDescriptor


.. py:class:: AmcacheInstallPlugin(target)


   Bases: :py:obj:`dissect.target.plugin.Plugin`

   Amcache install log plugin.

   .. py:method:: check_compatible() -> None

      Perform a compatibility check with the target.

      This function should return ``None`` if the plugin is compatible with
      the current target (``self.target``). For example, check if a certain
      file exists.
      Otherwise it should raise an ``UnsupportedPluginError``.

      :raises UnsupportedPluginError: If the plugin could not be loaded.


   .. py:method:: amcache_install() -> Iterator[AmcacheArpCreateRecord, AmcacheFileCreateRecord]

      Return the contents of the Amcache install log.

      The log file contains the changes an installer performed on the system.
      These only get created when the executable is an installer.