Skip to content

Commit

Permalink
pylint fix
Browse files Browse the repository at this point in the history
  • Loading branch information
CandraTP committed Dec 16, 2024
1 parent ee84dec commit c35d10c
Show file tree
Hide file tree
Showing 4 changed files with 40 additions and 43 deletions.
56 changes: 37 additions & 19 deletions plaso/parsers/sqlite_plugins/ios_notes.py
Original file line number Diff line number Diff line change
Expand Up @@ -43,7 +43,8 @@ class IOSNotesPlugin(interface.SQLitePlugin):
}

QUERIES = [
('SELECT ZCREATIONDATE3, ZMODIFICATIONDATE1, ZTITLE1,ZSNIPPET from ZICCLOUDSYNCINGOBJECT',
('SELECT ZCREATIONDATE3, ZMODIFICATIONDATE1, ZTITLE1,ZSNIPPET'
'from ZICCLOUDSYNCINGOBJECT',
'ParseNoteRow')]

SCHEMAS = [{
Expand All @@ -56,23 +57,29 @@ class IOSNotesPlugin(interface.SQLitePlugin):
'ZNEEDSTOSAVEUSERSPECIFICRECORD INTEGER, ZCLOUDSTATE INTEGER,'
'ZACCOUNT INTEGER, ZCHECKEDFORLOCATION INTEGER, ZFILESIZE INTEGER,'
'ZHANDWRITINGSUMMARYVERSION INTEGER, ZHASMARKUPDATA INTEGER,'
'ZIMAGECLASSIFICATIONSUMMARYVERSION INTEGER, ZIMAGEFILTERTYPE INTEGER,'
'ZIMAGECLASSIFICATIONSUMMARYVERSION INTEGER,'
'ZIMAGEFILTERTYPE INTEGER,'
'ZNEEDSINITIALRELATIONSHIPSETUP INTEGER, ZOCRSUMMARYVERSION INTEGER,'
'ZORIENTATION INTEGER, ZSECTION INTEGER, ZURLEXPIRED INTEGER,'
'ZLOCATION INTEGER, ZMEDIA INTEGER, ZNOTE INTEGER,'
'ZNOTEUSINGTITLEFORNOTETITLE INTEGER, ZPARENTATTACHMENT INTEGER,'
'ZAPPEARANCETYPE INTEGER, ZSCALEWHENDRAWING INTEGER, ZVERSION INTEGER,'
'ZAPPEARANCETYPE INTEGER, ZSCALEWHENDRAWING INTEGER,'
'ZVERSION INTEGER,'
'ZVERSIONOUTOFDATE INTEGER, ZATTACHMENT INTEGER, ZSTATE INTEGER,'
'ZACCOUNT1 INTEGER, ZACCOUNT2 INTEGER, ZMENTIONNOTIFICATIONATTEMPTCOUNT'
'ZACCOUNT1 INTEGER, ZACCOUNT2 INTEGER,'
'ZMENTIONNOTIFICATIONATTEMPTCOUNT'
'INTEGER, ZMENTIONNOTIFICATIONSTATE INTEGER, ZNOTE1 INTEGER,'
'ZPARENTATTACHMENT1 INTEGER, ZTYPE INTEGER, ZACCOUNT3 INTEGER,'
'ZATTACHMENT1 INTEGER, ZATTACHMENTVIEWTYPE INTEGER, ZISPINNED INTEGER,'
'ZATTACHMENT1 INTEGER, ZATTACHMENTVIEWTYPE INTEGER,'
'ZISPINNED INTEGER,'
'ZISSYSTEMPAPER INTEGER, ZLEGACYNOTEWASPLAINTEXT INTEGER,'
'ZNOTEHASCHANGES INTEGER, ZPAPERSTYLETYPE INTEGER,'
'ZPREFERREDBACKGROUNDTYPE INTEGER, ZACCOUNT4 INTEGER, ZFOLDER INTEGER,'
'ZPREFERREDBACKGROUNDTYPE INTEGER, ZACCOUNT4 INTEGER,'
'ZFOLDER INTEGER,'
'ZNOTEDATA INTEGER, ZTITLESOURCEATTACHMENT INTEGER,'
'ZISHIDDENNOTECONTAINER INTEGER, ZSORTORDER INTEGER, ZOWNER INTEGER,'
'ZACCOUNTTYPE INTEGER, ZDIDCHOOSETOMIGRATE INTEGER, ZDIDFINISHMIGRATION'
'ZACCOUNTTYPE INTEGER, ZDIDCHOOSETOMIGRATE INTEGER,'
'ZDIDFINISHMIGRATION'
'INTEGER, ZDIDMIGRATEONMAC INTEGER, ZSERVERSIDEUPDATETASKFAILURECOUNT'
'INTEGER, ZSTOREDATASEPARATELY INTEGER, ZACCOUNTDATA INTEGER,'
'ZCUSTOMNOTESORTTYPEVALUE INTEGER, ZFOLDERTYPE INTEGER,'
Expand All @@ -82,27 +89,36 @@ class IOSNotesPlugin(interface.SQLitePlugin):
'ZCROPPINGQUADBOTTOMRIGHTY FLOAT, ZCROPPINGQUADTOPLEFTX FLOAT,'
'ZCROPPINGQUADTOPLEFTY FLOAT, ZCROPPINGQUADTOPRIGHTX FLOAT,'
'ZCROPPINGQUADTOPRIGHTY FLOAT, ZDURATION FLOAT, ZMODIFICATIONDATE'
'TIMESTAMP, ZORIGINX FLOAT, ZORIGINY FLOAT, ZPREVIEWUPDATEDATE TIMESTAMP,'
'TIMESTAMP, ZORIGINX FLOAT, ZORIGINY FLOAT,'
'ZPREVIEWUPDATEDATE TIMESTAMP,'
'ZSIZEHEIGHT FLOAT, ZSIZEWIDTH FLOAT, ZHEIGHT FLOAT, ZMODIFIEDDATE'
'TIMESTAMP, ZSCALE FLOAT, ZWIDTH FLOAT, ZSTATEMODIFICATIONDATE TIMESTAMP,'
'TIMESTAMP, ZSCALE FLOAT, ZWIDTH FLOAT,'
'ZSTATEMODIFICATIONDATE TIMESTAMP,'
'ZCREATIONDATE1 TIMESTAMP, ZCREATIONDATE2 TIMESTAMP,'
'ZMODIFICATIONDATEATIMPORT TIMESTAMP, ZCREATIONDATE3 TIMESTAMP,'
'ZFOLDERMODIFICATIONDATE TIMESTAMP, ZLASTACTIVITYRECENTUPDATESVIEWEDDATE'
'ZFOLDERMODIFICATIONDATE TIMESTAMP,'
'ZLASTACTIVITYRECENTUPDATESVIEWEDDATE'
'TIMESTAMP, ZLASTACTIVITYSUMMARYVIEWEDDATE TIMESTAMP,'
'ZLASTATTRIBUTIONSVIEWEDDATE TIMESTAMP, ZLASTNOTIFIEDDATE TIMESTAMP,'
'ZLASTOPENEDDATE TIMESTAMP, ZLASTVIEWEDMODIFICATIONDATE TIMESTAMP,'
'ZLEGACYMODIFICATIONDATEATIMPORT TIMESTAMP, ZMODIFICATIONDATE1 TIMESTAMP,'
'ZLEGACYMODIFICATIONDATEATIMPORT TIMESTAMP,'
'ZMODIFICATIONDATE1 TIMESTAMP,'
'ZCUSTOMNOTESORTTYPEMODIFICATIONDATE TIMESTAMP,'
'ZDATEFORLASTTITLEMODIFICATION TIMESTAMP, ZPARENTMODIFICATIONDATE TIMESTAMP,'
'ZDATEFORLASTTITLEMODIFICATION TIMESTAMP,'
'ZPARENTMODIFICATIONDATE TIMESTAMP,'
'ZIDENTIFIER VARCHAR, ZPASSWORDHINT VARCHAR, ZZONEOWNERNAME VARCHAR,'
'ZADDITIONALINDEXABLETEXT VARCHAR, ZFALLBACKSUBTITLEIOS VARCHAR,'
'ZFALLBACKSUBTITLEMAC VARCHAR, ZFALLBACKTITLE VARCHAR,'
'ZHANDWRITINGSUMMARY VARCHAR, ZIMAGECLASSIFICATIONSUMMARY VARCHAR,'
'ZOCRSUMMARY VARCHAR, ZREMOTEFILEURLSTRING VARCHAR, ZSUMMARY VARCHAR,'
'ZTITLE VARCHAR, ZTYPEUTI VARCHAR, ZURLSTRING VARCHAR, ZUSERTITLE VARCHAR,'
'ZDEVICEIDENTIFIER VARCHAR, ZDISPLAYTEXT VARCHAR, ZSTANDARDIZEDCONTENT VARCHAR,'
'ZALTTEXT VARCHAR, ZTOKENCONTENTIDENTIFIER VARCHAR, ZTYPEUTI1 VARCHAR,'
'ZCONTENTHASHATIMPORT VARCHAR, ZFILENAME VARCHAR, ZLEGACYCONTENTHASHATIMPORT'
'ZTITLE VARCHAR, ZTYPEUTI VARCHAR, ZURLSTRING VARCHAR,'
'ZUSERTITLE VARCHAR,'
'ZDEVICEIDENTIFIER VARCHAR, ZDISPLAYTEXT VARCHAR,'
'ZSTANDARDIZEDCONTENT VARCHAR,'
'ZALTTEXT VARCHAR, ZTOKENCONTENTIDENTIFIER VARCHAR,'
'ZTYPEUTI1 VARCHAR,'
'ZCONTENTHASHATIMPORT VARCHAR, ZFILENAME VARCHAR,'
'ZLEGACYCONTENTHASHATIMPORT'
'VARCHAR, ZLEGACYIMPORTDEVICEIDENTIFIER VARCHAR,'
'ZLEGACYMANAGEDOBJECTIDURIREPRESENTATION VARCHAR,'
'ZSELECTEDINKCOLORSTRING VARCHAR, ZSELECTEDINKIDENTIFIER VARCHAR,'
Expand All @@ -123,13 +139,15 @@ class IOSNotesPlugin(interface.SQLitePlugin):
'ZSERVERSHAREDATA BLOB, ZUNAPPLIEDENCRYPTEDRECORD BLOB,'
'ZUSERSPECIFICSERVERRECORDDATA BLOB, ZMERGEABLEDATA BLOB,'
'ZFALLBACKIMAGECRYPTOINITIALIZATIONVECTOR BLOB,'
'ZFALLBACKIMAGECRYPTOTAG BLOB, ZLINKPRESENTATIONARCHIVEDMETADATA BLOB,'
'ZFALLBACKIMAGECRYPTOTAG BLOB,'
'ZLINKPRESENTATIONARCHIVEDMETADATA BLOB,'
'ZMARKUPMODELDATA BLOB, ZMERGEABLEDATA1 BLOB, ZMETADATADATA BLOB,'
'ZSYNAPSEDATA BLOB, ZCRYPTOMETADATAINITIALIZATIONVECTOR BLOB,'
'ZCRYPTOMETADATATAG BLOB, ZENCRYPTEDMETADATA BLOB, ZMETADATA BLOB,'
'ZLASTNOTIFIEDTIMESTAMPDATA BLOB, ZLASTVIEWEDTIMESTAMPDATA BLOB,'
'ZREPLICAIDTOUSERIDDICTDATA BLOB, ZCRYPTOVERIFIER BLOB,'
'ZSERVERSIDEUPDATETASKCONTINUATIONTOKEN BLOB, ZMERGEABLEDATA2 BLOB )')}]
'ZSERVERSIDEUPDATETASKCONTINUATIONTOKEN BLOB,'
'ZMERGEABLEDATA2 BLOB )')}]

def _GetDateTimeRowValue(self, query_hash, row, value_name):
"""Retrieves a date and time value from the row.
Expand Down Expand Up @@ -162,7 +180,7 @@ def ParseNoteRow(self, parser_mediator, query, row, **unused_kwargs):
event_data = IOSNotesEventData()
event_data.creation_time = self._GetDateTimeRowValue(
query_hash, row, 'ZCREATIONDATE3')
event_data.modification_time = self._GetDateTimeRowValue(
event_data.modification_time = self._GetDateTimeRowValue(
query_hash, row, 'ZMODIFICATIONDATE1')
event_data.title = self._GetRowValue(query_hash, row, 'ZTITLE1')
event_data.snippet = self._GetRowValue(query_hash, row, 'ZSNIPPET')
Expand Down
6 changes: 3 additions & 3 deletions tests/parsers/sqlite_plugins/ios_notes.py
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ def testProcess(self):
plugin = ios_notes.IOSNotesPlugin()
storage_writer = self._ParseDatabaseFileWithPlugin(
['NotesStore.sqlite'], plugin)

number_of_event_data = storage_writer.GetNumberOfAttributeContainers(
'event_data')
self.assertEqual(number_of_event_data, 28)
Expand All @@ -34,10 +34,10 @@ def testProcess(self):
'modification_time': '2023-05-10T00:57:01.178374',
'title': 'iOS 15 Note',
'snippet': 'Here is the test iOS 15 note.'}

event_data = storage_writer.GetAttributeContainerByIndex('event_data', 25)
self.CheckEventData(event_data, expected_event_values)


if __name__ == '__main__':
unittest.main()
21 changes: 0 additions & 21 deletions timeline.csv

This file was deleted.

Binary file removed timeline.plaso
Binary file not shown.

0 comments on commit c35d10c

Please # to comment.