mirror of
https://github.com/volatilityfoundation/volatility
synced 2026-06-08 18:04:46 +00:00
Mike Auty
47 lines
1.7 KiB
Python
47 lines
1.7 KiB
Python
from volatility.renderers.basic import Renderer
|
|
from volatility import debug
|
|
import sqlite3
|
|
|
|
__author__ = 'mike'
|
|
|
|
class SqliteRenderer(Renderer):
|
|
|
|
def __init__(self, plugin_name, config):
|
|
self._plugin_name = plugin_name
|
|
self._config = config
|
|
self._db = None
|
|
|
|
column_types = [(str, "TEXT"),
|
|
(int, "INTEGER"),
|
|
(float, "REAL"),
|
|
(bytes, "BLOB")]
|
|
|
|
def _column_type(self, col_type):
|
|
for (t, v) in self.column_types:
|
|
if issubclass(col_type, t):
|
|
return v
|
|
return "TEXT"
|
|
|
|
def _sanitize_name(self, name):
|
|
return name
|
|
|
|
def _add_row(self, node, accumulator):
|
|
accumulator[node] = max(accumulator.values()) + 1
|
|
insert = "INSERT INTO " + self._plugin_name + " VALUES (?, ?, " + ", ".join(["?"] * len(node.values)) + ")"
|
|
print insert, [accumulator[node], accumulator[node.parent]] + list(node.values)
|
|
self._db.execute(insert, [accumulator[node], accumulator[node.parent]] + list(node.values))
|
|
return accumulator
|
|
|
|
def render(self, outfd, grid):
|
|
"""Renders the TreeGrid in data out to the output file from the config options"""
|
|
if not self._config.OUTPUT_FILE:
|
|
debug.error("Please specify a valid output file using --output-file")
|
|
|
|
self._db = sqlite3.connect(self._config.OUTPUT_FILE, isolation_level = None)
|
|
create = "CREATE TABLE " + self._plugin_name + "( id INTEGER, rowparent INTEGER, " + \
|
|
", ".join(['"' + self._sanitize_name(i.name) + '" ' + self._column_type(i.type) for i in grid.columns]) + ")"
|
|
self._db.execute(create)
|
|
grid.visit(None, self._add_row, {None: 0})
|
|
|
|
|