MetaFS is for generating a datastore of file metadata for rapid complex searches
Build Status
Installation
To install metafs, simply:
$ pip install metafs
or using easy_install:
$ easy_install metafs
or from source:
$ python setup.py install
Getting Started
The Filer will not parse files above the max_parse_size provided when initializing (Default: 100000000) and can use a specific magic file using magic_file when initializing.
>>> import metafs
>>> filer = metafs.SQLiteFiler("./test.db")
>>> filer.update("/")
>>> filer.search("SELECT * FROM files")
>>> filer.close()
SQLiteFiler Tables
hashes |
|
|---|---|
hash_id INTEGER |
hash TEXT |
magics |
|
|---|---|
magic_id INTEGER |
magic TEXT |
paths |
||||
|---|---|---|---|---|
path_id INTEGER |
path TEXT |
mtime REAL |
atime REAL |
ctime REAL |
files |
|||
|---|---|---|---|
file_id INTEGER |
path_id INTEGER |
filename TEXT |
magic_id INTEGER |
size INTEGER |
mtime REAL |
ctime REAL |
atime REAL |
peheaders |
|||
|---|---|---|---|
file_id INTEGER |
export_dll_id INTEGER |
compile_time INTEGER |
petype TEXT |
dlls |
|
|---|---|
dll_id INTEGER |
name TEXT |
functions |
||
|---|---|---|
function_id INTEGER |
name TEXT |
from_dll_id INTEGER |
file_export_dlls |
|
|---|---|
file_id INTEGER |
dll_id INTEGER |
file_import_dlls |
|
|---|---|
file_id INTEGER |
dll_id INTEGER |
file_export_functions |
|
|---|---|
file_id INTEGER |
function_id INTEGER |
file_import_functions |
|
|---|---|
file_id INTEGER |
function_id INTEGER |
file_version_info |
||
|---|---|---|
file_id INTEGER |
version_info_field_id INTEGER |
version_info_value_id INTEGER |
version_info_fields |
|
|---|---|
version_info_field_id INTEGER |
version_info_field TEXT |
version_info_values |
|
|---|---|
version_info_value_id INTEGER |
version_info_value TEXT |
sections |
||||
|---|---|---|---|---|
file_id INTEGER |
name TEXT |
size INTEGER |
v_size INTEGER |
entropy REAL |
anomalies |
|
|---|---|
file_id INTEGER |
anomaly TEXT |
More Information
Free software: BSD license, see LICENSE.txt for details
Release files for metafs 0.0.16
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| metafs-0.0.16.tar.gz | 8.7 kB | Details |
Release files / metafs-0.0.16.tar.gz
| Download URL | metafs-0.0.16.tar.gz |
|---|---|
| Size | 8.7 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
662f071051f03ae4fc351b69eebc2f75df32042eb22c2f6b18dd857aa1627f44
|
|
BLAKE2b-256 checksum How to use checksums |
0edc2bdce76fd5454a1b1a52017619135dab31d09371c3672bc92c741d304663
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |