modules.packages.ppt.PPT

Package modules :: Package packages :: Module ppt :: Class PPT |
[hide private]
[frames] | no frames]

# Class PPT

source code

                      object --+
                               |
    lib.common.abstracts.Package --+
                                   |
                                  PPT

PowerPoint analysis package.

Instance Methods | [hide private]
start(self, path) Run analysis package. | source code
Inherited from `lib.common.abstracts.Package`: `__init__`, `check`, `enum_paths`, `execute`, `finish`, `get_path`, `get_path_glob`, `init_regkeys`, `move_curdir`, `package_files`, `set_pids` Inherited from `object`: `__delattr__`, `__format__`, `__getattribute__`, `__hash__`, `__new__`, `__reduce__`, `__reduce_ex__`, `__repr__`, `__setattr__`, `__sizeof__`, `__str__`, `__subclasshook__`

Class Variables | [hide private]
| PATHS = `[("ProgramFiles", "Microsoft Office", "POWERPNT.EXE"),`...``
| REGKEYS = `[[HKEY_CURRENT_USER, "Software\\Microsoft\\Office\\1`...``

Properties | [hide private]
Inherited from `object`: `__class__`

Method Details | [hide private]

### start(self, path) | source code
Run analysis package. Raises: `NotImplementedError` - this method is abstract. Overrides: lib.common.abstracts.Package.start (inherited documentation)

Class Variable Details | [hide private]

  ### PATHS Value:
      [("ProgramFiles", "Microsoft Office", "POWERPNT.EXE"), ("ProgramFiles"
      , "Microsoft Office", "Office10", "POWERPNT.EXE"), ("ProgramFiles", "M
      icrosoft Office", "Office11", "POWERPNT.EXE"), ("ProgramFiles", "Micro
      soft Office", "Office12", "POWERPNT.EXE"), ("ProgramFiles", "Microsoft
       Office", "Office14", "POWERPNT.EXE"), ("ProgramFiles", "Microsoft Off
      ice", "Office15", "POWERPNT.EXE"), ("ProgramFiles", "Microsoft Office"
      , "Office16", "POWERPNT.EXE"), ("ProgramFiles", "Microsoft Office 15",
       "root", "office15", "POWERPNT.EXE"),]

  ### REGKEYS Value:
      [[HKEY_CURRENT_USER, "Software\\Microsoft\\Office\\12.0\\Common\\Gener
      al", {"ShownOptIn": 1,},], [HKEY_CURRENT_USER, "Software\\Microsoft\\O
      ffice\\12.0\\Powerpoint\\Security", {"VBAWarnings": 1, "AccessVBOM": 1
      , "ExtensionHardening": 0,},],]