MCPcopy Create free account
hub / github.com/ELMERIKH/PyinMemoryPE / value

Method value

windows/winobject/event_log.py:170–177  ·  view source on GitHub ↗

Retrieve a value from the event. ``name`` is an XPath expressions that uniquely identify a node or attribute in the event. (see https://msdn.microsoft.com/en-us/library/windows/desktop/aa385352(v=vs.85).aspx)

(self, name, **kwargs)

Source from the content-addressed store, hash-verified

168 return xml[:-1]
169
170 def value(self, name, **kwargs):
171 """Retrieve a value from the event.
172 ``name`` is an XPath expressions that uniquely identify a node or attribute in the event.
173 (see https://msdn.microsoft.com/en-us/library/windows/desktop/aa385352(v=vs.85).aspx)
174 """
175 values = self.get_values((name,), **kwargs)
176 assert len(values) == 1
177 return values[0]
178
179 def get_values(self, values, flags=gdef.EvtRenderContextValues):
180 nbelt = len(values)

Callers 8

idMethod · 0.95
versionMethod · 0.95
levelMethod · 0.95
opcodeMethod · 0.95
time_createdMethod · 0.95
pidMethod · 0.95
tidMethod · 0.95
error_payloadMethod · 0.95

Calls 1

get_valuesMethod · 0.95

Tested by

no test coverage detected