:py:mod:`dissect.target.plugins.os.windows.regf.usb`
====================================================

.. py:module:: dissect.target.plugins.os.windows.regf.usb


Module Contents
---------------

Classes
~~~~~~~

.. autoapisummary::

   dissect.target.plugins.os.windows.regf.usb.UsbPlugin




Attributes
~~~~~~~~~~

.. autoapisummary::

   dissect.target.plugins.os.windows.regf.usb.UsbRegistryRecord
   dissect.target.plugins.os.windows.regf.usb.USB_DEVICE_PROPERTY_KEYS


.. py:data:: UsbRegistryRecord

   

.. py:data:: USB_DEVICE_PROPERTY_KEYS

   

.. py:class:: UsbPlugin(target: dissect.target.Target)


   Bases: :py:obj:`dissect.target.plugin.Plugin`

   USB plugin.

   .. py:attribute:: USB_STOR
      :value: 'HKLM\\SYSTEM\\CurrentControlSet\\Enum\\USBSTOR'

      

   .. py:attribute:: DEVICE_CONTAINERS
      :value: 'HKLM\\SYSTEM\\CurrentControlSet\\Control\\DeviceContainers'

      

   .. py:attribute:: USB
      :value: 'HKLM\\SYSTEM\\CurrentControlSet\\Enum\\USB'

      

   .. py:attribute:: HID
      :value: 'HKLM\\SYSTEM\\CurrentControlSet\\Enum\\HID'

      

   .. py:attribute:: SCSI
      :value: 'HKLM\\SYSTEM\\CurrentControlSet\\Enum\\SCSI'

      

   .. py:method:: check_compatible() -> None

      Perform a compatibility check with the target.

      This function should return ``None`` if the plugin is compatible with
      the current target (``self.target``). For example, check if a certain
      file exists.
      Otherwise it should raise an ``UnsupportedPluginError``.

      :raises UnsupportedPluginError: If the plugin could not be loaded.


   .. py:method:: unpack_timestamps(usb_reg_properties)

      Params:
          usb_reg_properties (Regf): A registry object with USB properties
      :returns: A dict containing parsed timestamps within passed registry object
      :rtype: timestamps (Dict)


   .. py:method:: parse_device_name(device_name)


   .. py:method:: usb()

      Return information about attached USB devices.

      Use the registry to find information about USB devices that have been attached to the system, for example the
      HKLM\SYSTEM\CurrentControlSet\Enum\USBSTOR registry key.

      Yields UsbRegistryRecord with fields:
          hostname (string): The target hostname
          domain (string): The target domain
          type (string): Type of USB device
          serial (string): Serial number of USB storage device
          vid (string): Vendor ID of USB storage device
          pid (string): Product ID of the USB storage device
          rev (string): Version of the USB storage device
          containerid (string):
          friendlyname (string): Display name of the USB storage device
          first_insert (datetime): First insertion date of USB storage device
          first_install (datetime): First instalation date of USB storage device
          last_insert (datetime): Most recent insertion (arrival) date of USB storage device
          last_removal (datetime): Most recent removal (unplug) date of USB storage device
          info_origin (string): Location of info present in output