:py:mod:`dissect.target.plugins.os.windows.thumbcache` ====================================================== .. py:module:: dissect.target.plugins.os.windows.thumbcache Module Contents --------------- Classes ~~~~~~~ .. autoapisummary:: dissect.target.plugins.os.windows.thumbcache.ThumbcachePlugin Attributes ~~~~~~~~~~ .. autoapisummary:: dissect.target.plugins.os.windows.thumbcache.GENERIC_THUMBCACHE_FIELDS dissect.target.plugins.os.windows.thumbcache.IndexRecord dissect.target.plugins.os.windows.thumbcache.ThumbcacheRecord dissect.target.plugins.os.windows.thumbcache.IconcacheRecord .. py:data:: GENERIC_THUMBCACHE_FIELDS :value: [('string', 'identifier'), ('string', 'hash'), ('string', 'extension'), ('varint', 'data_size'),... .. py:data:: IndexRecord .. py:data:: ThumbcacheRecord .. py:data:: IconcacheRecord .. py:class:: ThumbcachePlugin(target: dissect.target.Target) Bases: :py:obj:`dissect.target.plugin.Plugin` Base class for plugins. Plugins can optionally be namespaced by specifying the ``__namespace__`` class attribute. Namespacing results in your plugin needing to be prefixed with this namespace when being called. For example, if your plugin has specified ``test`` as namespace and a function called ``example``, you must call your plugin with ``test.example``:: A ``Plugin`` class has the following private class attributes: - ``__namespace__`` - ``__record_descriptors__`` With the following three being assigned in :func:`register`: - ``__plugin__`` - ``__functions__`` - ``__exports__`` Additionally, the methods and attributes of :class:`Plugin` receive more private attributes by using decorators. The :func:`export` decorator adds the following private attributes - ``__exported__`` - ``__output__``: Set with the :func:`export` decorator. - ``__record__``: Set with the :func:`export` decorator. The :func:`internal` decorator and :class:`InternalPlugin` set the ``__internal__`` attribute. Finally. :func:`args` decorator sets the ``__args__`` attribute. :param target: The :class:`~dissect.target.target.Target` object to load the plugin for. .. py:attribute:: __namespace__ :value: 'thumbcache' .. py:method:: get_cache_paths() -> Iterator[dissect.target.helpers.fsutil.TargetPath] .. py:method:: check_compatible() -> None Perform a compatibility check with the target. This function should return ``None`` if the plugin is compatible with the current target (``self.target``). For example, check if a certain file exists. Otherwise it should raise an ``UnsupportedPluginError``. :raises UnsupportedPluginError: If the plugin could not be loaded. .. py:method:: thumbcache(output_dir: Optional[pathlib.Path] = None) -> Iterator[Union[ThumbcacheRecord, IndexRecord]] .. py:method:: iconcache(output_dir: Optional[pathlib.Path] = None) -> Iterator[Union[IconcacheRecord, IndexRecord]]