Difference between revisions of "TruxtonChildFileIO newartifact"
Jump to navigation
Jump to search
(→Sample) |
|||
| (One intermediate revision by the same user not shown) | |||
| Line 8: | Line 8: | ||
=Return value= | =Return value= | ||
| − | An | + | An [[TruxtonArtifact|artifact]] object |
=Sample= | =Sample= | ||
| Line 41: | Line 41: | ||
if __name__ == "__main__": | if __name__ == "__main__": | ||
| − | main() | + | sys.exit(main()) |
</syntaxhighlight> | </syntaxhighlight> | ||
Latest revision as of 10:03, 3 February 2024
This create an artifact object from a file in Truxton. It automatically associates the file and media identifiers used in the entity table.
Syntax
object newartifact();
Return value
An artifact object
Sample
import truxton
import shutil
from pathlib import Path
def add_file(parent_truxton_file, filename):
source_file = open(filename, "rb")
child = parent_truxton_file.newchild()
child.name = Path(filename).name
shutil.copyfileobj(source_file, child)
source_file.close()
child.save()
return child
def main():
t = truxton.create()
file = t.getfileid("5ec2a123-74d6-5da7-0653-4e6800000000")
child = add_file(file, "C:/decrypts/PlainText.txt")
artifact = child .newartifact()
artifact.type = truxton.ENTITY_TYPE_PASSWORD
artifact.value = "password"
artifact.datatype = truxton.DATA_TYPE_ASCII
artifact.length = 8
artifact.offset = 1
artifact.save()
if __name__ == "__main__":
sys.exit(main())
