-
Notifications
You must be signed in to change notification settings - Fork 126
/
settings.py
72 lines (67 loc) · 2.75 KB
/
settings.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
# -*- coding: utf-8 -*-
from __future__ import unicode_literals
import os
import ctypes
OS = "Windows"
FASTIR_ROOT = os.path.normpath(os.path.join(os.path.abspath(os.path.dirname(__file__)), "."))
EXTRACT_DUMP = {
"mft": ["csv_mft", "json_mft"],
"dd": ["csv_export_dd", "json_export_dd"],
"ram": ["csv_export_ram", "json_export_ram"],
"mbr": ["csv_mbr", "json_mbr"],
"registry": ["csv_registry", "json_registry"]
}
FILTERS_MAGIC = {"application/msword",
"application/octet-stream",
"application/x-archive",
"application/x-dosexec",
"application/x-elc",
"application/x-executable, statically linked, stripped",
"application/x-gzip",
"application/x-object, not stripped",
"application/x-zip",
"image/bmp",
"image/gif",
"image/jpeg",
"image/png", "text/html",
"text/rtf",
"text/xml",
"UTF-8 Unicode HTML document text, with CRLF line terminators",
"UTF-8 Unicode HTML document text, with very long lines, with CRLF, LF line terminators"}
HASH_ALGO = "sha256"
VIRUS_TOTAL = "http://www.virustotal.com/en/file/%s/analysis"
NETWORK_ADAPTATER = {
0: "Ethernet 802.3",
1: "Token Ring 802.5",
2: "Fiber Distributed Data Interface (FDDI)",
3: "Wide Area Network (WAN)",
4: "LocalTalk",
5: "Ethernet using DIX header format",
6: "ARCNET",
7: "ARCNET (878.2)",
8: "ATM",
9: "Wireless",
10: "Infrared Wireless",
11: "Bpc",
13: "CoWan",
14: "1394",
15: "Tunnel"
}
LONGLONGSIZE = ctypes.sizeof(ctypes.c_longlong)
BYTESIZE = ctypes.sizeof(ctypes.c_byte)
WORDSIZE = 2
DWORDSIZE = 4
USERS_FOLDER = {
"Windows10": os.path.join(os.getenv('HOMEDRIVE', 'C:'), '\\Users'),
"Windows8": os.path.join(os.getenv('HOMEDRIVE', 'C:'), '\\Users'),
"Windows8_1": os.path.join(os.getenv('HOMEDRIVE', 'C:'), '\\Users'),
"Windows7": os.path.join(os.getenv('HOMEDRIVE', 'C:'), '\\Users'),
"Windows2012Server": os.path.join(os.getenv('HOMEDRIVE', 'C:'), '\\Users'),
"Windows2012ServerR2": os.path.join(os.getenv('HOMEDRIVE', 'C:'), '\\Users'),
"WindowsXP": os.path.join(os.getenv('HOMEDRIVE', 'C:'), '\\Documents and Settings'),
"WindowsVista": os.path.join(os.getenv('HOMEDRIVE', 'C:'), '\\Users'),
"Windows2008ServerR2": os.path.join(os.getenv('HOMEDRIVE', 'C:'), '\\Users'),
"Windows2008Server": os.path.join(os.getenv('HOMEDRIVE', 'C:'), '\\Users'),
"Windows2003Server": os.path.join(os.getenv('HOMEDRIVE', 'C:'), '\\Documents and Settings'),
"Windows2003ServerR2": os.path.join(os.getenv('HOMEDRIVE', 'C:'), '\\Documents and Settings')
}