Security Data

Warning

V1 file events, saved searches, and queries are deprecated.

For details on using the new file event data model, see the V2 File Events User Guide.

class py42.clients.securitydata.SecurityDataClient(file_event_service, preservation_data_service, saved_search_service, storage_service_factory)

Bases: object

property savedsearches

A collection of methods related to retrieving forensic search data.

Returns

class: py42.services.savedsearch.SavedSearchService

search_all_file_events(query, page_token='')

Searches for all file events, returning a page of events with a token in the response to retrieve next page. REST Documentation

Parameters
  • query (str or py42.sdk.queries.fileevents.v2.file_event_query.FileEventQuery) – The file event query to filter search results.

  • page_token (str, optional) – A token used to indicate the starting point for additional page results. For the first page, do not pass page_token. For all consecutive pages, pass the token from the previous response from field nextPgToken. Defaults to empty string.

Returns

A response containing a page of events.

Return type

py42.response.Py42Response

search_file_events(query)

Searches for file events, returns up to the first 10,000 events. REST Documentation

Parameters

query (str or py42.sdk.queries.fileevents.v2.file_event_query.FileEventQuery) – The file event query to filter search results.

Returns

A response containing the first 10,000 events.

Return type

py42.response.Py42Response

stream_file_by_md5(checksum)

Stream file based on MD5 checksum.

Parameters

checksum (str) – MD5 hash of the file.

Returns

Returns a stream of the requested file.

stream_file_by_sha256(checksum)

Stream file based on SHA256 checksum.

Parameters

checksum (str) – SHA256 hash of the file.

Returns

Returns a stream of the requested file.