From ab8f5e542a1b67f8d24debfdbdc95eef73027965 Mon Sep 17 00:00:00 2001 From: Joachim Metz Date: Fri, 29 Mar 2024 06:06:29 +0100 Subject: [PATCH] Changes to support event values container --- tests/multi_process/analysis_process.py | 29 +++++++++++++++---------- 1 file changed, 17 insertions(+), 12 deletions(-) diff --git a/tests/multi_process/analysis_process.py b/tests/multi_process/analysis_process.py index b8a7897166..ddcb327bda 100644 --- a/tests/multi_process/analysis_process.py +++ b/tests/multi_process/analysis_process.py @@ -21,30 +21,35 @@ class TestAnalysisPlugin(analysis_interface.AnalysisPlugin): NAME = 'test_plugin' - # pylint: disable=arguments-renamed - # pylint: disable=unused-argument - def CompileReport(self, mediator): + # pylint: disable=redundant-returns-doc,unused-argument + + def CompileReport(self, analysis_mediator): """Compiles a report of the analysis. - After the plugin has received every copy of an event to - analyze this function will be called so that the report - can be assembled. + After the plugin has received every copy of an event to analyze this + function will be called so that the report can be assembled. Args: - mediator (AnalysisMediator): mediates interactions between - analysis plugins and other components, such as storage and dfvfs. + analysis_mediator (AnalysisMediator): mediates interactions between + analysis plugins and other components, such as storage and dfVFS. + + Returns: + AnalysisReport: report. """ - return + return None - def ExamineEvent(self, mediator, event, event_data, event_data_stream): + def ExamineEvent( + self, analysis_mediator, event, event_data, event_data_stream, + event_values): """Analyzes an event. Args: - mediator (AnalysisMediator): mediates interactions between analysis - plugins and other components, such as storage and dfvfs. + analysis_mediator (AnalysisMediator): mediates interactions between + analysis plugins and other components, such as storage and dfVFS. event (EventObject): event. event_data (EventData): event data. event_data_stream (EventDataStream): event data stream. + event_values (AttributeContainer): event values attribute container. """ return