File tree Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Original file line number Diff line number Diff line change @@ -75,7 +75,7 @@ def export_event(self, event):
75
75
76
76
def export_session (self , session ):
77
77
"""Exports the given plaso storage Session into the graph."""
78
- instrument = self .document .create_uco_object (
78
+ instrument = self .document .create_CoreObject (
79
79
'Tool' ,
80
80
name = session .product_name ,
81
81
version = session .product_version ,
@@ -95,13 +95,13 @@ def export_session(self, session):
95
95
96
96
# TODO: How do we know who performed the Plaso action? That information
97
97
# is not in the plaso storage file...
98
- performer = self .document .create_uco_object ('Identity' )
98
+ performer = self .document .create_CoreObject ('Identity' )
99
99
performer .create_property_bundle (
100
100
'SimpleName' ,
101
101
givenName = 'John' ,
102
102
familyName = 'Doe' )
103
103
104
- action = self .document .create_uco_object (
104
+ action = self .document .create_CoreObject (
105
105
'ForensicAction' ,
106
106
startTime = lib .convert_timestamp (session .start_time ),
107
107
endTime = lib .convert_timestamp (session .completion_time ))
You can’t perform that action at this time.
0 commit comments