TruxtonChildFileIO newrelation - Revision history

Sam: /* Sample */

2024-02-03T14:08:01Z

Sample

Sam at 16:36, 22 February 2021

2021-02-22T16:36:19Z

Sam: Created page with "This create new relationship sourced from a file in Truxton. It automatically associates the parent file and media identifiers used in the Relation table...."

2020-05-25T19:42:12Z

Created page with "This create new relationship sourced from a file in Truxton. It automatically associates the parent file and media identifiers used in the Relation table...."

New page

This create new relationship sourced from a file in Truxton.
It automatically associates the parent file and media identifiers used in the [[Relation Table | Relation table.]]

=Syntax=
<syntaxhighlight lang="Python">
object newrelation();
</syntaxhighlight>

=Return value=
A Relation object

=Sample=

<syntaxhighlight lang="Python" highlight="46">
import truxton
import shutil
from datetime import datetime
from calendar import timegm
from pathlib import Path

EPOCH_AS_FILETIME = 116444736000000000
HUNDREDS_OF_NANOSECONDS = 10000000

def date_to_filetime(dt):
return EPOCH_AS_FILETIME + (timegm(dt.timetuple()) * HUNDREDS_OF_NANOSECONDS)

def add_file(parent_truxton_file, filename):
source_file = open(filename, "rb")
child = parent_truxton_file.newchild()
child.name = Path(filename).name
shutil.copyfileobj(source_file, child)
source_file.close()
child.save()
return child

def main():
t = truxton.create()
file = t.getfileid("5ec2a123-74d6-5da7-0653-4e6800000000")

child = add_file(file, "C:/Events/Relations.txt")

imsi = child.newartifact()

imsi.type = truxton.ENTITY_TYPE_IMSI
imsi.value = "310120265624299"
imsi.datatype = truxton.DATA_TYPE_ASCII
imsi.length = 15
imsi.offset = 1
imsi.save()

mac = child.newartifact()

mac.type = truxton.ENTITY_TYPE_MAC_ADDRESS
mac.value = "001422012345"
mac.datatype = truxton.DATA_TYPE_ASCII
mac.length = 12
mac.offset = 111
mac.save()

relationship = child.newrelation()

relationship.a = imsi.id
relationship.b = mac.id
relationship.typea = truxton.OBJECT_TYPE_ENTITY
relationship.typeb = truxton.OBJECT_TYPE_ENTITY
relationship.relation = truxton.RELATION_RELATED

if relationship.save() is True:
print( "New relationship established" )

if __name__ == "__main__":
main()
</syntaxhighlight>

@@ Line 69: / Line 69: @@
 if __name__ == "__main__":
-   main()
+   sys.exit(main())
 </source>

@@ Line 1: / Line 1: @@
 This create new relationship sourced from a file in Truxton.
-It automatically associates the parent file and media identifiers used in the [[Relation Table | Relation table.]]
+It automatically associates the parent file and media identifiers used in the <code><nowiki>[</nowiki>[[Relation Table|Relation]]<nowiki>]</nowiki></code> table.
 =Syntax=
-<syntaxhighlight lang="Python">
+<source lang="Python">
 object newrelation();
-</syntaxhighlight>
+</source>
 =Return value=
-A Relation object
+A [[TruxtonRelation|Relation]] object
 =Sample=
+<source lang="Python" highlight="46">
 import truxton
 import shutil
@@ Line 71: / Line 70: @@
 if __name__ == "__main__":
    main()
-</syntaxhighlight>
+</source>