Skip to content

Commit 05272c0

Browse files
authored
ucoObject became CoreObject
Updating to match the official v0.1.0 Python API.
1 parent 2482084 commit 05272c0

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

case_plaso/plaso_exporter.py

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -75,7 +75,7 @@ def export_event(self, event):
7575

7676
def export_session(self, session):
7777
"""Exports the given plaso storage Session into the graph."""
78-
instrument = self.document.create_uco_object(
78+
instrument = self.document.create_CoreObject(
7979
'Tool',
8080
name=session.product_name,
8181
version=session.product_version,
@@ -95,13 +95,13 @@ def export_session(self, session):
9595

9696
# TODO: How do we know who performed the Plaso action? That information
9797
# is not in the plaso storage file...
98-
performer = self.document.create_uco_object('Identity')
98+
performer = self.document.create_CoreObject('Identity')
9999
performer.create_property_bundle(
100100
'SimpleName',
101101
givenName='John',
102102
familyName='Doe')
103103

104-
action = self.document.create_uco_object(
104+
action = self.document.create_CoreObject(
105105
'ForensicAction',
106106
startTime=lib.convert_timestamp(session.start_time),
107107
endTime=lib.convert_timestamp(session.completion_time))

0 commit comments

Comments
 (0)