1. Framework Core

These modules form the foundation which the rest of the framework is built. The following modules are documented in this chapter:

• 1.1. lf.dec — Digital Evidence Containers
  • 1.1.1. Containers
  • 1.1.2. StreamInfo Objects
  • 1.1.3. Stream Objects
• 1.2. lf.dtypes — Data Types
  • 1.2.1. Overview
  • 1.2.2. Describing data types
    • 1.2.2.1. Class Hierarchy
    • 1.2.2.2. Primitive data types
    • 1.2.2.3. Basic data types
    • 1.2.2.4. Composite data types
  • 1.2.3. The Data Access Layer (DAL)
    • 1.2.3.1. Value Objects and Entities
    • 1.2.3.2. Converters
  • 1.2.4. Standard protocol for the ctypes wrappers and the DAL
  • 1.2.5. Base data types
  • 1.2.6. Basic data types
  • 1.2.7. Native data types
  • 1.2.8. Bit-oriented data types
  • 1.2.9. Composite data types
  • 1.2.10. Data Access Layer (DAL) Support
    • 1.2.10.1. Structuple classes
    • 1.2.10.2. Converter classes
    • 1.2.10.3. Reader classes
• 1.3. lf.dtypes.ctypes — Extract native ctypes types
• 1.4. lf.time — Converters for various time formats