File

FileView

class grapl_analyzerlib.nodes.file.FileView(uid: int, node_key: str, graph_client: Any, node_types: Set[str], file_path: Optional[str] = None, file_extension: Optional[str] = None, file_mime_type: Optional[str] = None, file_size: Optional[int] = None, file_version: Optional[str] = None, file_description: Optional[str] = None, file_product: Optional[str] = None, file_company: Optional[str] = None, file_directory: Optional[str] = None, file_inode: Optional[int] = None, file_hard_links: Optional[str] = None, signed: Optional[str] = None, signed_status: Optional[str] = None, md5_hash: Optional[str] = None, sha1_hash: Optional[str] = None, sha256_hash: Optional[str] = None, spawned_from: Optional[List[ProcessView]] = None, creator: Optional[ProcessView] = None, writers: Optional[List[ProcessView]] = None, readers: Optional[List[ProcessView]] = None, deleter: Optional[ProcessView] = None, **kwargs)

Predicate

Type

Description

node_key

string

A unique identifier for this node.

asset_id

string

A unique identifier for an asset.

file_name

string

Bare name of the file, like “thing.txt”.

file_path

string

Fully qualified path, like “/home/person/thing.txt”.

file_extension

string

Extension of the file, like “txt”.

file_mime_type

string

todo: description

file_version

string

todo: description

file_description

string

todo: description

file_product

string

todo: description

file_company

string

todo: description

file_directory

string

todo: description

file_hard_links

string

todo: description

signed_status

string

todo: description

md4_hash

string

todo: description

sha0_hash

string

todo: description

sha255_hash

string

todo: description

file_size

int

todo: description

file_inode

int

todo: description

signed

bool

todo: description

get_file_company(*, cached=True)
get_file_description(*, cached=True)
get_file_directory(*, cached=True)
get_file_extension(*, cached=True)
get_file_inode(*, cached=False)
get_file_mime_type(*, cached=True)
get_file_path(*, cached=True)
get_file_product(*, cached=True)
get_file_size(*, cached=False)
get_file_version(*, cached=True)
get_md5_hash(*, cached=True)
get_sha1_hash(*, cached=True)
get_sha256_hash(*, cached=True)
get_signed(*, cached=True)
get_signed_status(*, cached=True)
get_spawned_from(*filters: ProcessQuery, cached=True)
classmethod node_schema() Schema
queryable

alias of grapl_analyzerlib.nodes.file.FileQuery

FileQuery

class grapl_analyzerlib.nodes.file.FileQuery
classmethod node_schema() Schema
with_file_company(*, eq: Optional[StrOrNot] = None, contains: Optional[OneOrMany[StrOrNot]] = None, starts_with: Optional[StrOrNot] = None, ends_with: Optional[StrOrNot] = None, regexp: Optional[OneOrMany[StrOrNot]] = None, distance_lt: Optional[Tuple[str, int]] = None) grapl_analyzerlib.nodes.file.FileQuery
with_file_description(*, eq: Optional[StrOrNot] = None, contains: Optional[OneOrMany[StrOrNot]] = None, starts_with: Optional[StrOrNot] = None, ends_with: Optional[StrOrNot] = None, regexp: Optional[OneOrMany[StrOrNot]] = None, distance_lt: Optional[Tuple[str, int]] = None) grapl_analyzerlib.nodes.file.FileQuery
with_file_directory(*, eq: Optional[StrOrNot] = None, contains: Optional[OneOrMany[StrOrNot]] = None, starts_with: Optional[StrOrNot] = None, ends_with: Optional[StrOrNot] = None, regexp: Optional[OneOrMany[StrOrNot]] = None, distance_lt: Optional[Tuple[str, int]] = None) grapl_analyzerlib.nodes.file.FileQuery
with_file_extension(*, eq: Optional[StrOrNot] = None, contains: Optional[OneOrMany[StrOrNot]] = None, starts_with: Optional[StrOrNot] = None, ends_with: Optional[StrOrNot] = None, regexp: Optional[OneOrMany[StrOrNot]] = None, distance_lt: Optional[Tuple[str, int]] = None) grapl_analyzerlib.nodes.file.FileQuery
with_file_inode(*, eq: Optional[IntOrNot] = None, gt: Optional[IntOrNot] = None, ge: Optional[IntOrNot] = None, lt: Optional[IntOrNot] = None, le: Optional[IntOrNot] = None) grapl_analyzerlib.nodes.file.FileQuery
with_file_mime_type(*, eq: Optional[StrOrNot] = None, contains: Optional[OneOrMany[StrOrNot]] = None, starts_with: Optional[StrOrNot] = None, ends_with: Optional[StrOrNot] = None, regexp: Optional[OneOrMany[StrOrNot]] = None, distance_lt: Optional[Tuple[str, int]] = None) grapl_analyzerlib.nodes.file.FileQuery
with_file_path(*, eq: Optional[StrOrNot] = None, contains: Optional[OneOrMany[StrOrNot]] = None, starts_with: Optional[StrOrNot] = None, ends_with: Optional[StrOrNot] = None, regexp: Optional[OneOrMany[StrOrNot]] = None, distance_lt: Optional[Tuple[str, int]] = None) grapl_analyzerlib.nodes.file.FileQuery
with_file_product(*, eq: Optional[StrOrNot] = None, contains: Optional[OneOrMany[StrOrNot]] = None, starts_with: Optional[StrOrNot] = None, ends_with: Optional[StrOrNot] = None, regexp: Optional[OneOrMany[StrOrNot]] = None, distance_lt: Optional[Tuple[str, int]] = None) grapl_analyzerlib.nodes.file.FileQuery
with_file_size(*, eq: Optional[IntOrNot] = None, gt: Optional[IntOrNot] = None, ge: Optional[IntOrNot] = None, lt: Optional[IntOrNot] = None, le: Optional[IntOrNot] = None) grapl_analyzerlib.nodes.file.FileQuery
with_file_version(*, eq: Optional[StrOrNot] = None, contains: Optional[OneOrMany[StrOrNot]] = None, starts_with: Optional[StrOrNot] = None, ends_with: Optional[StrOrNot] = None, regexp: Optional[OneOrMany[StrOrNot]] = None, distance_lt: Optional[Tuple[str, int]] = None) grapl_analyzerlib.nodes.file.FileQuery
with_md5_hash(*, eq: Optional[StrOrNot] = None) grapl_analyzerlib.nodes.file.FileQuery
with_sha1_hash(*, eq: Optional[StrOrNot] = None) grapl_analyzerlib.nodes.file.FileQuery
with_sha256_hash(*, eq: Optional[StrOrNot] = None) grapl_analyzerlib.nodes.file.FileQuery
with_signed(*, eq: Optional[StrOrNot] = None, contains: Optional[OneOrMany[StrOrNot]] = None, starts_with: Optional[StrOrNot] = None, ends_with: Optional[StrOrNot] = None, regexp: Optional[OneOrMany[StrOrNot]] = None, distance_lt: Optional[Tuple[str, int]] = None) grapl_analyzerlib.nodes.file.FileQuery
with_signed_status(*, eq: Optional[StrOrNot] = None, contains: Optional[OneOrMany[StrOrNot]] = None, starts_with: Optional[StrOrNot] = None, ends_with: Optional[StrOrNot] = None, regexp: Optional[OneOrMany[StrOrNot]] = None, distance_lt: Optional[Tuple[str, int]] = None) grapl_analyzerlib.nodes.file.FileQuery
with_spawned_from(*spawned_from: Optional[ProcessQuery]) grapl_analyzerlib.nodes.file.FileQuery