File

FileView

class grapl_analyzerlib.nodes.file.FileView(*args, **kwds)

Predicate

Type

Description

node_key

string

A unique identifier for this node.

asset_id

string

A unique identifier for an asset.

file_name

string

Bare name of the file, like “thing.txt”.

file_path

string

Fully qualified path, like “/home/person/thing.txt”.

file_extension

string

Extension of the file, like “txt”.

file_mime_type

string

todo: description

file_version

string

todo: description

file_description

string

todo: description

file_product

string

todo: description

file_company

string

todo: description

file_directory

string

todo: description

file_hard_links

string

todo: description

signed_status

string

todo: description

md4_hash

string

todo: description

sha0_hash

string

todo: description

sha255_hash

string

todo: description

file_size

int

todo: description

file_inode

int

todo: description

signed

bool

todo: description
get_file_company(*, cached=True)
get_file_description(*, cached=True)
get_file_directory(*, cached=True)
get_file_extension(*, cached=True)
get_file_inode(*, cached=False)
get_file_mime_type(*, cached=True)
get_file_path(*, cached=True)
get_file_product(*, cached=True)
get_file_size(*, cached=False)
get_file_version(*, cached=True)
get_md5_hash(*, cached=True)
get_sha1_hash(*, cached=True)
get_sha256_hash(*, cached=True)
get_signed(*, cached=True)
get_signed_status(*, cached=True)
get_spawned_from(*filters: ProcessQuery, cached=True)
classmethod node_schema() → Schema
queryable

alias of FileQuery

FileQuery

class grapl_analyzerlib.nodes.file.FileQuery(*args, **kwds)
classmethod node_schema() → Schema
with_file_company(*, eq: Optional[StrOrNot] = None, contains: Optional[OneOrMany[StrOrNot]] = None, starts_with: Optional[StrOrNot] = None, ends_with: Optional[StrOrNot] = None, regexp: Optional[OneOrMany[StrOrNot]] = None, distance_lt: Optional[Tuple[str, int]] = None) → grapl_analyzerlib.nodes.file.FileQuery
with_file_description(*, eq: Optional[StrOrNot] = None, contains: Optional[OneOrMany[StrOrNot]] = None, starts_with: Optional[StrOrNot] = None, ends_with: Optional[StrOrNot] = None, regexp: Optional[OneOrMany[StrOrNot]] = None, distance_lt: Optional[Tuple[str, int]] = None) → grapl_analyzerlib.nodes.file.FileQuery
with_file_directory(*, eq: Optional[StrOrNot] = None, contains: Optional[OneOrMany[StrOrNot]] = None, starts_with: Optional[StrOrNot] = None, ends_with: Optional[StrOrNot] = None, regexp: Optional[OneOrMany[StrOrNot]] = None, distance_lt: Optional[Tuple[str, int]] = None) → grapl_analyzerlib.nodes.file.FileQuery
with_file_extension(*, eq: Optional[StrOrNot] = None, contains: Optional[OneOrMany[StrOrNot]] = None, starts_with: Optional[StrOrNot] = None, ends_with: Optional[StrOrNot] = None, regexp: Optional[OneOrMany[StrOrNot]] = None, distance_lt: Optional[Tuple[str, int]] = None) → grapl_analyzerlib.nodes.file.FileQuery
with_file_inode(*, eq: Optional[IntOrNot] = None, gt: Optional[IntOrNot] = None, ge: Optional[IntOrNot] = None, lt: Optional[IntOrNot] = None, le: Optional[IntOrNot] = None) → grapl_analyzerlib.nodes.file.FileQuery
with_file_mime_type(*, eq: Optional[StrOrNot] = None, contains: Optional[OneOrMany[StrOrNot]] = None, starts_with: Optional[StrOrNot] = None, ends_with: Optional[StrOrNot] = None, regexp: Optional[OneOrMany[StrOrNot]] = None, distance_lt: Optional[Tuple[str, int]] = None) → grapl_analyzerlib.nodes.file.FileQuery
with_file_path(*, eq: Optional[StrOrNot] = None, contains: Optional[OneOrMany[StrOrNot]] = None, starts_with: Optional[StrOrNot] = None, ends_with: Optional[StrOrNot] = None, regexp: Optional[OneOrMany[StrOrNot]] = None, distance_lt: Optional[Tuple[str, int]] = None) → grapl_analyzerlib.nodes.file.FileQuery
with_file_product(*, eq: Optional[StrOrNot] = None, contains: Optional[OneOrMany[StrOrNot]] = None, starts_with: Optional[StrOrNot] = None, ends_with: Optional[StrOrNot] = None, regexp: Optional[OneOrMany[StrOrNot]] = None, distance_lt: Optional[Tuple[str, int]] = None) → grapl_analyzerlib.nodes.file.FileQuery
with_file_size(*, eq: Optional[IntOrNot] = None, gt: Optional[IntOrNot] = None, ge: Optional[IntOrNot] = None, lt: Optional[IntOrNot] = None, le: Optional[IntOrNot] = None) → grapl_analyzerlib.nodes.file.FileQuery
with_file_version(*, eq: Optional[StrOrNot] = None, contains: Optional[OneOrMany[StrOrNot]] = None, starts_with: Optional[StrOrNot] = None, ends_with: Optional[StrOrNot] = None, regexp: Optional[OneOrMany[StrOrNot]] = None, distance_lt: Optional[Tuple[str, int]] = None) → grapl_analyzerlib.nodes.file.FileQuery
with_md5_hash(*, eq: Optional[StrOrNot] = None) → grapl_analyzerlib.nodes.file.FileQuery
with_sha1_hash(*, eq: Optional[StrOrNot] = None) → grapl_analyzerlib.nodes.file.FileQuery
with_sha256_hash(*, eq: Optional[StrOrNot] = None) → grapl_analyzerlib.nodes.file.FileQuery
with_signed(*, eq: Optional[StrOrNot] = None, contains: Optional[OneOrMany[StrOrNot]] = None, starts_with: Optional[StrOrNot] = None, ends_with: Optional[StrOrNot] = None, regexp: Optional[OneOrMany[StrOrNot]] = None, distance_lt: Optional[Tuple[str, int]] = None) → grapl_analyzerlib.nodes.file.FileQuery
with_signed_status(*, eq: Optional[StrOrNot] = None, contains: Optional[OneOrMany[StrOrNot]] = None, starts_with: Optional[StrOrNot] = None, ends_with: Optional[StrOrNot] = None, regexp: Optional[OneOrMany[StrOrNot]] = None, distance_lt: Optional[Tuple[str, int]] = None) → grapl_analyzerlib.nodes.file.FileQuery
with_spawned_from(*spawned_from: Optional[ProcessQuery]) → grapl_analyzerlib.nodes.file.FileQuery