1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
|
#!/usr/bin/env python3
# -*- coding: utf-8 -*-
"""Tests for the Windows Prefetch event formatter."""
from __future__ import unicode_literals
import unittest
from plaso.formatters import winprefetch
from tests.formatters import test_lib
class WinPrefetchExecutionFormatterTest(test_lib.EventFormatterTestCase):
"""Tests for the Windows Prefetch execution event formatter."""
def testInitialization(self):
"""Tests the initialization."""
event_formatter = winprefetch.WinPrefetchExecutionFormatter()
self.assertIsNotNone(event_formatter)
def testGetFormatStringAttributeNames(self):
"""Tests the GetFormatStringAttributeNames function."""
event_formatter = winprefetch.WinPrefetchExecutionFormatter()
expected_attribute_names = [
'executable',
'run_count',
'path_hints',
'prefetch_hash',
'volumes_string']
self._TestGetFormatStringAttributeNames(
event_formatter, expected_attribute_names)
# TODO: add test for GetMessages.
if __name__ == '__main__':
unittest.main()
|
