plaso icon indicating copy to clipboard operation
plaso copied to clipboard

Add SQLite parser for iOS Accounts (Accounts3.sqlite) file

Open studiawan opened this issue 11 months ago • 4 comments

One line description of pull request

Add SQLite parser for iOS Accounts (Accounts3.sqlite) file

Description:

I add/edit several files:

  • Add import ios_accounts to plaso/parsers/sqlite_plugins/init.py
  • Add a new parser plugin ios_accounts.py to plaso/parsers/sqlite_plugins/
  • Add Accounts3.db file to plaso/test_data/
  • Add unit test ios_accounts.py to plaso/tests/parsers/sqlite_plugins/
  • Modify ios.yaml to support iOS account parser plugin (plaso/data/formatters/ios.yaml)
  • Modify timeliner.yaml to support iOS account parser plugin (plaso/data/timeliner.yaml)
  • Add sqlite/ios_accounts in enabled_parser_names (tests/cli/pinfo_tool.py)

Related issue (if applicable): fixes #4135

Notes:

All contributions to Plaso undergo code review. This makes sure that the code has appropriate test coverage and conforms to the Plaso style guide.

One of the maintainers will examine your code, and may request changes. Check off the items below in order, and then a maintainer will review your code.

Checklist:

  • [x] Automated checks (GitHub Actions, AppVeyor) pass
  • [x] No new new dependencies are required or l2tdevtools has been updated
  • [x] Reviewer assigned
  • [ ] Test data has a Plaso compatible license

studiawan avatar Nov 26 '24 07:11 studiawan