Changed filestat parser to use dfVFS StatAttribute log2timeline#3804

joachimmetz · Oct 17, 2021 · bb671cc · bb671cc
1 parent babca12
commit bb671cc
Show file tree

Hide file tree

Showing 13 changed files with 101 additions and 76 deletions.
diff --git a/config/dpkg/control b/config/dpkg/control
@@ -17,7 +17,7 @@ Description: Data files for plaso (log2timeline)
 
 Package: python3-plaso
 Architecture: all
-Depends: plaso-data (>= ${binary:Version}), libbde-python3 (>= 20140531), libcreg-python3 (>= 20200725), libesedb-python3 (>= 20150409), libevt-python3 (>= 20191104), libevtx-python3 (>= 20210424), libewf-python3 (>= 20131210), libfsapfs-python3 (>= 20201107), libfsext-python3 (>= 20200819), libfshfs-python3 (>= 20201103), libfsntfs-python3 (>= 20200805), libfsxfs-python3 (>= 20201114), libfvde-python3 (>= 20160719), libfwnt-python3 (>= 20180117), libfwsi-python3 (>= 20150606), liblnk-python3 (>= 20150830), libluksde-python3 (>= 20200101), libmodi-python3 (>= 20210405), libmsiecf-python3 (>= 20150314), libolecf-python3 (>= 20151223), libqcow-python3 (>= 20131204), libregf-python3 (>= 20201002), libscca-python3 (>= 20190605), libsigscan-python3 (>= 20190629), libsmdev-python3 (>= 20140529), libsmraw-python3 (>= 20140612), libvhdi-python3 (>= 20131210), libvmdk-python3 (>= 20140421), libvsgpt-python3 (>= 20210115), libvshadow-python3 (>= 20160109), libvslvm-python3 (>= 20160109), python3-artifacts (>= 20211012), python3-bencode, python3-certifi (>= 2016.9.26), python3-cffi-backend (>= 1.9.1), python3-chardet (>= 2.0.1), python3-cryptography (>= 2.0.2), python3-dateutil (>= 1.5), python3-defusedxml (>= 0.5.0), python3-dfdatetime (>= 20210509), python3-dfvfs (>= 20210530), python3-dfwinreg (>= 20201002), python3-dtfabric (>= 20200621), python3-elasticsearch (>= 7.0), python3-future (>= 0.16.0), python3-idna (>= 2.5), python3-lz4 (>= 0.10.0), python3-pefile (>= 2021.5.24), python3-psutil (>= 5.4.3), python3-pyparsing (>= 2.3.0), python3-pytsk3 (>= 20160721), python3-pyxattr (>= 0.7.2), python3-redis (>= 3.4), python3-requests (>= 2.18.0), python3-six (>= 1.1.0), python3-tz, python3-urllib3 (>= 1.21.1), python3-xlsxwriter (>= 0.9.3), python3-yaml (>= 3.10), python3-yara (>= 3.4.0), python3-zmq (>= 2.1.11), ${python3:Depends}, ${misc:Depends}
+Depends: plaso-data (>= ${binary:Version}), libbde-python3 (>= 20140531), libcreg-python3 (>= 20200725), libesedb-python3 (>= 20150409), libevt-python3 (>= 20191104), libevtx-python3 (>= 20210424), libewf-python3 (>= 20131210), libfsapfs-python3 (>= 20201107), libfsext-python3 (>= 20200819), libfshfs-python3 (>= 20201103), libfsntfs-python3 (>= 20200805), libfsxfs-python3 (>= 20201114), libfvde-python3 (>= 20160719), libfwnt-python3 (>= 20180117), libfwsi-python3 (>= 20150606), liblnk-python3 (>= 20150830), libluksde-python3 (>= 20200101), libmodi-python3 (>= 20210405), libmsiecf-python3 (>= 20150314), libolecf-python3 (>= 20151223), libqcow-python3 (>= 20131204), libregf-python3 (>= 20201002), libscca-python3 (>= 20190605), libsigscan-python3 (>= 20190629), libsmdev-python3 (>= 20140529), libsmraw-python3 (>= 20140612), libvhdi-python3 (>= 20131210), libvmdk-python3 (>= 20140421), libvsgpt-python3 (>= 20210115), libvshadow-python3 (>= 20160109), libvslvm-python3 (>= 20160109), python3-artifacts (>= 20211012), python3-bencode, python3-certifi (>= 2016.9.26), python3-cffi-backend (>= 1.9.1), python3-chardet (>= 2.0.1), python3-cryptography (>= 2.0.2), python3-dateutil (>= 1.5), python3-defusedxml (>= 0.5.0), python3-dfdatetime (>= 20210509), python3-dfvfs (>= 20210918), python3-dfwinreg (>= 20201002), python3-dtfabric (>= 20200621), python3-elasticsearch (>= 7.0), python3-future (>= 0.16.0), python3-idna (>= 2.5), python3-lz4 (>= 0.10.0), python3-pefile (>= 2021.5.24), python3-psutil (>= 5.4.3), python3-pyparsing (>= 2.3.0), python3-pytsk3 (>= 20160721), python3-pyxattr (>= 0.7.2), python3-redis (>= 3.4), python3-requests (>= 2.18.0), python3-six (>= 1.1.0), python3-tz, python3-urllib3 (>= 1.21.1), python3-xlsxwriter (>= 0.9.3), python3-yaml (>= 3.10), python3-yara (>= 3.4.0), python3-zmq (>= 2.1.11), ${python3:Depends}, ${misc:Depends}
 Description: Python 3 module of plaso (log2timeline)
  Plaso (log2timeline) is a framework to create super timelines. Its
  purpose is to extract timestamps from various files found on typical

diff --git a/data/formatters/generic.yaml b/data/formatters/generic.yaml
@@ -136,6 +136,10 @@ boolean_helpers:
 message:
 - '{display_name}'
 - 'Type: {file_entry_type}'
+- 'Owner identifier: {owner_identifier}'
+- 'Group identifier: {group_identifier}'
+- 'Mode: 0o{mode:03o}'
+- 'Number of links: {number_of_links}'
 - '({unallocated})'
 short_message:
 - '{filename}'

diff --git a/dependencies.ini b/dependencies.ini
@@ -58,7 +58,7 @@ version_property: __version__
 
 [dfvfs]
 dpkg_name: python3-dfvfs
-minimum_version: 20210530
+minimum_version: 20210918
 rpm_name: python3-dfvfs
 version_property: __version__
 

diff --git a/docs/requirements.txt b/docs/requirements.txt
@@ -1,6 +1,6 @@
 docutils
 pyparsing
 recommonmark
-sphinx < 4.1.0
+sphinx >= 2.0.1,< 4.1.0
 sphinx-markdown-tables
 sphinx-rtd-theme >= 0.5.1
diff --git a/plaso/dependencies.py b/plaso/dependencies.py
@@ -23,7 +23,7 @@
     'dateutil': ('__version__', '1.5', None, True),
     'defusedxml': ('__version__', '0.5.0', None, True),
     'dfdatetime': ('__version__', '20210509', None, True),
-    'dfvfs': ('__version__', '20210530', None, True),
+    'dfvfs': ('__version__', '20210918', None, True),
     'dfwinreg': ('__version__', '20201002', None, True),
     'dtfabric': ('__version__', '20200621', None, True),
     'elasticsearch': ('__versionstr__', '7.0', None, False),

diff --git a/plaso/parsers/filestat.py b/plaso/parsers/filestat.py
@@ -4,6 +4,7 @@
 import pytsk3
 
 from dfvfs.lib import definitions as dfvfs_definitions
+from dfvfs.vfs import attribute as dfvfs_attribute
 
 from plaso.containers import events
 from plaso.containers import time_events
@@ -21,8 +22,13 @@ class FileStatEventData(events.EventData):
     file_size (int): file size in bytes.
     file_system_type (str): file system type.
     filename (str): name of the file.
+    group_identifier (int): group identifier (GID), equivalent to st_gid.
     inode (int): inode of the file.
     is_allocated (bool): True if the file is allocated.
+    mode (int): access mode, equivalent to st_mode & 0x0fff.
+    number_of_links (int): number of hard links, equivalent to st_nlink.
+    owner_identifier (int): user identifier (UID) of the owner, equivalent to
+        st_uid.
   """
 
   DATA_TYPE = 'fs:stat'
@@ -35,8 +41,12 @@ def __init__(self):
     self.file_size = None
     self.file_system_type = None
     self.filename = None
+    self.group_identifier = None
     self.inode = None
     self.is_allocated = None
+    self.mode = None
+    self.number_of_links = None
+    self.owner_identifier = None
 
 
 class FileStatParser(interface.FileEntryParser):
@@ -109,23 +119,30 @@ def ParseFileEntry(self, parser_mediator, file_entry):
           and other components, such as storage and dfvfs.
       file_entry (dfvfs.FileEntry): a file entry.
     """
-    stat_object = file_entry.GetStat()
-    if not stat_object:
-      return
-
     file_system_type = self._GetFileSystemTypeFromFileEntry(file_entry)
 
+    stat_attribute = None
+    for attribute in file_entry.attributes:
+      if isinstance(attribute, dfvfs_attribute.StatAttribute):
+        stat_attribute = attribute
+
     event_data = FileStatEventData()
     event_data.display_name = parser_mediator.GetDisplayNameForPathSpec(
         file_entry.path_spec)
-    event_data.file_entry_type = stat_object.type
-    event_data.file_size = getattr(stat_object, 'size', None)
+    event_data.file_entry_type = file_entry.entry_type
+    event_data.file_size = file_entry.size
     event_data.file_system_type = file_system_type
     event_data.filename = parser_mediator.GetRelativePathForPathSpec(
         file_entry.path_spec)
-    event_data.inode = getattr(stat_object, 'ino', None)
     event_data.is_allocated = file_entry.IsAllocated()
 
+    if stat_attribute:
+      event_data.group_identifier = stat_attribute.group_identifier
+      event_data.inode = stat_attribute.inode_number
+      event_data.mode = stat_attribute.mode
+      event_data.number_of_links = stat_attribute.number_of_links
+      event_data.owner_identifier = stat_attribute.owner_identifier
+
     if file_entry.access_time:
       event = time_events.DateTimeValuesEvent(
           file_entry.access_time, definitions.TIME_DESCRIPTION_LAST_ACCESS)

diff --git a/requirements.txt b/requirements.txt
@@ -8,7 +8,7 @@ cffi >= 1.9.1
 cryptography >= 2.0.2
 defusedxml >= 0.5.0
 dfdatetime >= 20210509
-dfvfs >= 20210530
+dfvfs >= 20210918
 dfwinreg >= 20201002
 dtfabric >= 20200621
 elasticsearch >= 7.0

diff --git a/setup.cfg b/setup.cfg
@@ -57,7 +57,7 @@ requires = libbde-python3 >= 20140531
            python3-dateutil >= 1.5
            python3-defusedxml >= 0.5.0
            python3-dfdatetime >= 20210509
-           python3-dfvfs >= 20210530
+           python3-dfvfs >= 20210918
            python3-dfwinreg >= 20201002
            python3-dtfabric >= 20200621
            python3-elasticsearch >= 7.0

diff --git a/test_data/end_to_end/extract_and_output_with_filter_file1.log b/test_data/end_to_end/extract_and_output_with_filter_file1.log
@@ -1,10 +1,10 @@
 datetime,timestamp_desc,source,source_long,message,parser,display_name,tag
-2019-10-31T13:23:48+00:00,Content Modification Time,FILE,File stat,EXT:/bin/bzcat Type: file,filestat,EXT:/bin/bzcat,-
-2019-10-31T13:23:48+00:00,Last Access Time,FILE,File stat,EXT:/bin/bzcat Type: file,filestat,EXT:/bin/bzcat,-
-2019-10-31T13:23:48+00:00,Metadata Modification Time,FILE,File stat,EXT:/bin/bzcat Type: file,filestat,EXT:/bin/bzcat,-
-2019-10-31T13:23:48+00:00,Content Modification Time,FILE,File stat,EXT:/sbin/tune2fs Type: file,filestat,EXT:/sbin/tune2fs,-
-2019-10-31T13:23:48+00:00,Last Access Time,FILE,File stat,EXT:/sbin/tune2fs Type: file,filestat,EXT:/sbin/tune2fs,-
-2019-10-31T13:23:48+00:00,Metadata Modification Time,FILE,File stat,EXT:/sbin/tune2fs Type: file,filestat,EXT:/sbin/tune2fs,-
-2019-10-31T13:23:48+00:00,Content Modification Time,FILE,File stat,EXT:/sbin/visudo Type: file,filestat,EXT:/sbin/visudo,-
-2019-10-31T13:23:48+00:00,Last Access Time,FILE,File stat,EXT:/sbin/visudo Type: file,filestat,EXT:/sbin/visudo,-
-2019-10-31T13:23:48+00:00,Metadata Modification Time,FILE,File stat,EXT:/sbin/visudo Type: file,filestat,EXT:/sbin/visudo,-
+2019-10-31T13:23:48+00:00,Content Modification Time,FILE,File stat,EXT:/bin/bzcat Type: file Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 1,filestat,EXT:/bin/bzcat,-
+2019-10-31T13:23:48+00:00,Last Access Time,FILE,File stat,EXT:/bin/bzcat Type: file Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 1,filestat,EXT:/bin/bzcat,-
+2019-10-31T13:23:48+00:00,Metadata Modification Time,FILE,File stat,EXT:/bin/bzcat Type: file Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 1,filestat,EXT:/bin/bzcat,-
+2019-10-31T13:23:48+00:00,Content Modification Time,FILE,File stat,EXT:/sbin/tune2fs Type: file Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 1,filestat,EXT:/sbin/tune2fs,-
+2019-10-31T13:23:48+00:00,Last Access Time,FILE,File stat,EXT:/sbin/tune2fs Type: file Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 1,filestat,EXT:/sbin/tune2fs,-
+2019-10-31T13:23:48+00:00,Metadata Modification Time,FILE,File stat,EXT:/sbin/tune2fs Type: file Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 1,filestat,EXT:/sbin/tune2fs,-
+2019-10-31T13:23:48+00:00,Content Modification Time,FILE,File stat,EXT:/sbin/visudo Type: file Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 1,filestat,EXT:/sbin/visudo,-
+2019-10-31T13:23:48+00:00,Last Access Time,FILE,File stat,EXT:/sbin/visudo Type: file Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 1,filestat,EXT:/sbin/visudo,-
+2019-10-31T13:23:48+00:00,Metadata Modification Time,FILE,File stat,EXT:/sbin/visudo Type: file Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 1,filestat,EXT:/sbin/visudo,-
diff --git a/test_data/end_to_end/extract_and_output_with_filter_file2.log b/test_data/end_to_end/extract_and_output_with_filter_file2.log
@@ -1,10 +1,10 @@
 datetime,timestamp_desc,source,source_long,message,parser,display_name,tag
-2019-10-31T13:23:48+00:00,Content Modification Time,FILE,File stat,EXT:/bin/bzcat Type: file,filestat,EXT:/bin/bzcat,-
-2019-10-31T13:23:48+00:00,Last Access Time,FILE,File stat,EXT:/bin/bzcat Type: file,filestat,EXT:/bin/bzcat,-
-2019-10-31T13:23:48+00:00,Metadata Modification Time,FILE,File stat,EXT:/bin/bzcat Type: file,filestat,EXT:/bin/bzcat,-
-2019-10-31T13:23:48+00:00,Content Modification Time,FILE,File stat,EXT:/sbin/tune2fs Type: file,filestat,EXT:/sbin/tune2fs,-
-2019-10-31T13:23:48+00:00,Last Access Time,FILE,File stat,EXT:/sbin/tune2fs Type: file,filestat,EXT:/sbin/tune2fs,-
-2019-10-31T13:23:48+00:00,Metadata Modification Time,FILE,File stat,EXT:/sbin/tune2fs Type: file,filestat,EXT:/sbin/tune2fs,-
-2019-10-31T13:23:48+00:00,Content Modification Time,FILE,File stat,EXT:/sbin/visudo Type: file,filestat,EXT:/sbin/visudo,-
-2019-10-31T13:23:48+00:00,Last Access Time,FILE,File stat,EXT:/sbin/visudo Type: file,filestat,EXT:/sbin/visudo,-
-2019-10-31T13:23:48+00:00,Metadata Modification Time,FILE,File stat,EXT:/sbin/visudo Type: file,filestat,EXT:/sbin/visudo,-
+2019-10-31T13:23:48+00:00,Content Modification Time,FILE,File stat,EXT:/bin/bzcat Type: file Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 1,filestat,EXT:/bin/bzcat,-
+2019-10-31T13:23:48+00:00,Last Access Time,FILE,File stat,EXT:/bin/bzcat Type: file Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 1,filestat,EXT:/bin/bzcat,-
+2019-10-31T13:23:48+00:00,Metadata Modification Time,FILE,File stat,EXT:/bin/bzcat Type: file Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 1,filestat,EXT:/bin/bzcat,-
+2019-10-31T13:23:48+00:00,Content Modification Time,FILE,File stat,EXT:/sbin/tune2fs Type: file Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 1,filestat,EXT:/sbin/tune2fs,-
+2019-10-31T13:23:48+00:00,Last Access Time,FILE,File stat,EXT:/sbin/tune2fs Type: file Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 1,filestat,EXT:/sbin/tune2fs,-
+2019-10-31T13:23:48+00:00,Metadata Modification Time,FILE,File stat,EXT:/sbin/tune2fs Type: file Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 1,filestat,EXT:/sbin/tune2fs,-
+2019-10-31T13:23:48+00:00,Content Modification Time,FILE,File stat,EXT:/sbin/visudo Type: file Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 1,filestat,EXT:/sbin/visudo,-
+2019-10-31T13:23:48+00:00,Last Access Time,FILE,File stat,EXT:/sbin/visudo Type: file Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 1,filestat,EXT:/sbin/visudo,-
+2019-10-31T13:23:48+00:00,Metadata Modification Time,FILE,File stat,EXT:/sbin/visudo Type: file Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 1,filestat,EXT:/sbin/visudo,-
diff --git a/test_data/end_to_end/extract_and_output_with_filter_file3.log b/test_data/end_to_end/extract_and_output_with_filter_file3.log
@@ -1,19 +1,19 @@
 datetime,timestamp_desc,source,source_long,message,parser,display_name,tag
-2019-10-31T13:23:21+00:00,Content Modification Time,FILE,File stat,EXT:/lost+found Type: directory,filestat,EXT:/lost+found,-
-2019-10-31T13:23:21+00:00,Last Access Time,FILE,File stat,EXT:/lost+found Type: directory,filestat,EXT:/lost+found,-
-2019-10-31T13:23:21+00:00,Metadata Modification Time,FILE,File stat,EXT:/lost+found Type: directory,filestat,EXT:/lost+found,-
-2019-10-31T13:23:48+00:00,Content Modification Time,FILE,File stat,EXT:/bin Type: directory,filestat,EXT:/bin,-
-2019-10-31T13:23:48+00:00,Last Access Time,FILE,File stat,EXT:/bin Type: directory,filestat,EXT:/bin,-
-2019-10-31T13:23:48+00:00,Metadata Modification Time,FILE,File stat,EXT:/bin Type: directory,filestat,EXT:/bin,-
-2019-10-31T13:23:48+00:00,Content Modification Time,FILE,File stat,EXT:/bin/echo Type: file,filestat,EXT:/bin/echo,-
-2019-10-31T13:23:48+00:00,Last Access Time,FILE,File stat,EXT:/bin/echo Type: file,filestat,EXT:/bin/echo,-
-2019-10-31T13:23:48+00:00,Metadata Modification Time,FILE,File stat,EXT:/bin/echo Type: file,filestat,EXT:/bin/echo,-
-2019-10-31T13:23:48+00:00,Content Modification Time,FILE,File stat,EXT:/home Type: directory,filestat,EXT:/home,-
-2019-10-31T13:23:48+00:00,Last Access Time,FILE,File stat,EXT:/home Type: directory,filestat,EXT:/home,-
-2019-10-31T13:23:48+00:00,Metadata Modification Time,FILE,File stat,EXT:/home Type: directory,filestat,EXT:/home,-
-2019-10-31T13:23:48+00:00,Content Modification Time,FILE,File stat,EXT:/home/echo Type: file,filestat,EXT:/home/echo,-
-2019-10-31T13:23:48+00:00,Last Access Time,FILE,File stat,EXT:/home/echo Type: file,filestat,EXT:/home/echo,-
-2019-10-31T13:23:48+00:00,Metadata Modification Time,FILE,File stat,EXT:/home/echo Type: file,filestat,EXT:/home/echo,-
-2019-10-31T13:23:48+00:00,Content Modification Time,FILE,File stat,EXT:/sbin Type: directory,filestat,EXT:/sbin,-
-2019-10-31T13:23:48+00:00,Last Access Time,FILE,File stat,EXT:/sbin Type: directory,filestat,EXT:/sbin,-
-2019-10-31T13:23:48+00:00,Metadata Modification Time,FILE,File stat,EXT:/sbin Type: directory,filestat,EXT:/sbin,-
+2019-10-31T13:23:21+00:00,Content Modification Time,FILE,File stat,EXT:/lost+found Type: directory Owner identifier: 0 Group identifier: 0 Mode: 0o700 Number of links: 2,filestat,EXT:/lost+found,-
+2019-10-31T13:23:21+00:00,Last Access Time,FILE,File stat,EXT:/lost+found Type: directory Owner identifier: 0 Group identifier: 0 Mode: 0o700 Number of links: 2,filestat,EXT:/lost+found,-
+2019-10-31T13:23:21+00:00,Metadata Modification Time,FILE,File stat,EXT:/lost+found Type: directory Owner identifier: 0 Group identifier: 0 Mode: 0o700 Number of links: 2,filestat,EXT:/lost+found,-
+2019-10-31T13:23:48+00:00,Content Modification Time,FILE,File stat,EXT:/bin Type: directory Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 2,filestat,EXT:/bin,-
+2019-10-31T13:23:48+00:00,Last Access Time,FILE,File stat,EXT:/bin Type: directory Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 2,filestat,EXT:/bin,-
+2019-10-31T13:23:48+00:00,Metadata Modification Time,FILE,File stat,EXT:/bin Type: directory Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 2,filestat,EXT:/bin,-
+2019-10-31T13:23:48+00:00,Content Modification Time,FILE,File stat,EXT:/bin/echo Type: file Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 1,filestat,EXT:/bin/echo,-
+2019-10-31T13:23:48+00:00,Last Access Time,FILE,File stat,EXT:/bin/echo Type: file Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 1,filestat,EXT:/bin/echo,-
+2019-10-31T13:23:48+00:00,Metadata Modification Time,FILE,File stat,EXT:/bin/echo Type: file Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 1,filestat,EXT:/bin/echo,-
+2019-10-31T13:23:48+00:00,Content Modification Time,FILE,File stat,EXT:/home Type: directory Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 2,filestat,EXT:/home,-
+2019-10-31T13:23:48+00:00,Last Access Time,FILE,File stat,EXT:/home Type: directory Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 2,filestat,EXT:/home,-
+2019-10-31T13:23:48+00:00,Metadata Modification Time,FILE,File stat,EXT:/home Type: directory Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 2,filestat,EXT:/home,-
+2019-10-31T13:23:48+00:00,Content Modification Time,FILE,File stat,EXT:/home/echo Type: file Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 1,filestat,EXT:/home/echo,-
+2019-10-31T13:23:48+00:00,Last Access Time,FILE,File stat,EXT:/home/echo Type: file Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 1,filestat,EXT:/home/echo,-
+2019-10-31T13:23:48+00:00,Metadata Modification Time,FILE,File stat,EXT:/home/echo Type: file Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 1,filestat,EXT:/home/echo,-
+2019-10-31T13:23:48+00:00,Content Modification Time,FILE,File stat,EXT:/sbin Type: directory Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 2,filestat,EXT:/sbin,-
+2019-10-31T13:23:48+00:00,Last Access Time,FILE,File stat,EXT:/sbin Type: directory Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 2,filestat,EXT:/sbin,-
+2019-10-31T13:23:48+00:00,Metadata Modification Time,FILE,File stat,EXT:/sbin Type: directory Owner identifier: 0 Group identifier: 0 Mode: 0o755 Number of links: 2,filestat,EXT:/sbin,-