Source code for dfvfs.analyzer.cs_analyzer_helper

"""The Core Storage (CS) format analyzer helper implementation."""

from dfvfs.analyzer import analyzer
from dfvfs.analyzer import analyzer_helper
from dfvfs.analyzer import specification
from dfvfs.lib import definitions



[docs]
class CSAnalyzerHelper(analyzer_helper.AnalyzerHelper):
    """Core Storage (CS) analyzer helper."""

    FORMAT_CATEGORIES = frozenset([definitions.FORMAT_CATEGORY_VOLUME_SYSTEM])

    TYPE_INDICATOR = definitions.TYPE_INDICATOR_CS


[docs]
    def GetFormatSpecification(self):
        """Retrieves the format specification.

        Returns:
          FormatSpecification: format specification or None if the format cannot
              be defined by a specification object.
        """
        format_specification = specification.FormatSpecification(self.type_indicator)

        # Core Storage signature.
        format_specification.AddNewSignature(b"CS", offset=88)

        return format_specification




analyzer.Analyzer.RegisterHelper(CSAnalyzerHelper())