Source code for cybox.objects.win_file_object

# Copyright (c) 2015, The MITRE Corporation. All rights reserved.
# See LICENSE.txt for complete terms.

import cybox
import cybox.bindings.win_file_object as win_file_binding
from cybox.objects.file_object import File, FileAttribute, FilePermissions
from cybox.common import (DateTime, Hash, HashList, HexBinary,
        ObjectProperties, String, UnsignedLong)


[docs]class Stream(cybox.Entity): _binding = win_file_binding _binding_class = win_file_binding.StreamObjectType _namespace = 'http://cybox.mitre.org/objects#WinFileObject-2' name = cybox.TypedField("Name", String) size_in_bytes = cybox.TypedField("Size_In_Bytes", UnsignedLong) hashes = cybox.TypedField("Hash", Hash, key_name="hashes", multiple=True)
[docs]class StreamList(cybox.EntityList): _binding = win_file_binding _binding_class = win_file_binding.StreamListType _binding_var = "Stream" _contained_type = Stream _namespace = 'http://cybox.mitre.org/objects#WinFileObject-2'
[docs]class WindowsFileAttribute(String): _binding = win_file_binding _binding_class = win_file_binding.WindowsFileAttributeType _namespace = 'http://cybox.mitre.org/objects#WinFileObject-2'
[docs]class WindowsFileAttributes(FileAttribute, cybox.EntityList): _binding = win_file_binding _binding_class = win_file_binding.WindowsFileAttributesType _binding_var = "Attribute" _contained_type = WindowsFileAttribute _namespace = 'http://cybox.mitre.org/objects#WinFileObject-2'
[docs]class WindowsFilePermissions(FilePermissions, cybox.Entity): _binding = win_file_binding _binding_class = win_file_binding.WindowsFilePermissionsType _namespace = 'http://cybox.mitre.org/objects#WinFileObject-2' full_control = cybox.TypedField("Full_Control") modify = cybox.TypedField("Modify") read = cybox.TypedField("Read") read_and_execute = cybox.TypedField("Read_And_Execute") write = cybox.TypedField("Write")
[docs]class WinFile(File): _binding = win_file_binding _binding_class = win_file_binding.WindowsFileObjectType _namespace = 'http://cybox.mitre.org/objects#WinFileObject-2' _XSI_NS = "WinFileObj" _XSI_TYPE = "WindowsFileObjectType" filename_accessed_time = cybox.TypedField("Filename_Accessed_Time", DateTime) filename_created_time = cybox.TypedField("Filename_Created_Time", DateTime) filename_modified_time = cybox.TypedField("Filename_Modified_Time", DateTime) drive = cybox.TypedField("Drive", String) security_id = cybox.TypedField("Security_ID", String) security_type = cybox.TypedField("Security_Type", String) stream_list = cybox.TypedField("Stream_List", StreamList) #Override abstract types file_attributes_list = cybox.TypedField('File_Attributes_List', WindowsFileAttributes) privilege_list = cybox.TypedField('Permissions', WindowsFilePermissions)

Related Documentation