:py:mod:`dissect.target.plugins.os.windows.regf.bam`
====================================================

.. py:module:: dissect.target.plugins.os.windows.regf.bam


Module Contents
---------------

Classes
~~~~~~~

.. autoapisummary::

   dissect.target.plugins.os.windows.regf.bam.BamDamPlugin




Attributes
~~~~~~~~~~

.. autoapisummary::

   dissect.target.plugins.os.windows.regf.bam.c_bamdef
   dissect.target.plugins.os.windows.regf.bam.c_bam
   dissect.target.plugins.os.windows.regf.bam.BamDamRecord


.. py:data:: c_bamdef
   :value: Multiline-String

    .. raw:: html

        <details><summary>Show Value</summary>

    .. code-block:: python

        """
            struct entry {
                uint64 ts;
            };
            """

    .. raw:: html

        </details>

   

.. py:data:: c_bam

   

.. py:data:: BamDamRecord

   

.. py:class:: BamDamPlugin(target: dissect.target.Target)


   Bases: :py:obj:`dissect.target.plugin.Plugin`

   Plugin for bam/dam registry keys.

   .. py:attribute:: KEYS
      :value: ['HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\bam\\UserSettings',...

      

   .. py:method:: check_compatible() -> None

      Perform a compatibility check with the target.

      This function should return ``None`` if the plugin is compatible with
      the current target (``self.target``). For example, check if a certain
      file exists.
      Otherwise it should raise an ``UnsupportedPluginError``.

      :raises UnsupportedPluginError: If the plugin could not be loaded.


   .. py:method:: bam()

      Parse bam and dam registry keys.

      Yields BamDamRecords with fields:
          hostname (string): The target hostname.
          domain (string): The target domain.
          ts (datetime): The parsed timestamp.
          path (uri): The parsed path.