Difference between revisions of "TruxtonETL"
Jump to navigation
Jump to search
(Created page with "This class provides capability to participate in Truxton's ETL pipeling. You can implement your own form of file exploitation. You can subscribe to events... =Properties= =M...") |
(→Sample) |
||
| Line 13: | Line 13: | ||
def main(): | def main(): | ||
| − | + | etl = truxton.etl() | |
| + | etl.name = "My New ETL" | ||
| + | etl.description = "This ETL processes files in the Truxton system" | ||
| + | etl.queue = "anewetl" | ||
| + | etl.stage = 40 | ||
| + | etl.id = 9999 | ||
| + | |||
| + | message = etl.getmessage() | ||
| + | |||
| + | while message is not None: | ||
| + | file_in_truxton = message.file() | ||
| + | |||
| + | # YOUR FORENSIC CODE GOES HERE | ||
| + | |||
| + | line_of_text = file_in_truxton.readline() | ||
| + | |||
| + | if "[SetupAPI" in line_of_text: | ||
| + | child = file_in_truxton.newchild() | ||
| + | child.name = "Child file from New ETL" | ||
| + | child.write("This is the file you were looking for.") | ||
| + | child.save() | ||
if __name__ == "__main__": | if __name__ == "__main__": | ||
main() | main() | ||
</syntaxhighlight> | </syntaxhighlight> | ||
Revision as of 15:59, 25 May 2020
This class provides capability to participate in Truxton's ETL pipeling. You can implement your own form of file exploitation. You can subscribe to events...
Properties
Methods
Sample
import truxton
def main():
etl = truxton.etl()
etl.name = "My New ETL"
etl.description = "This ETL processes files in the Truxton system"
etl.queue = "anewetl"
etl.stage = 40
etl.id = 9999
message = etl.getmessage()
while message is not None:
file_in_truxton = message.file()
# YOUR FORENSIC CODE GOES HERE
line_of_text = file_in_truxton.readline()
if "[SetupAPI" in line_of_text:
child = file_in_truxton.newchild()
child.name = "Child file from New ETL"
child.write("This is the file you were looking for.")
child.save()
if __name__ == "__main__":
main()
