Module Expr Str ImportFrom alias ImportFrom alias ImportFrom alias ImportFrom alias identifier ImportFrom alias identifier ImportFrom alias identifier ClassDef bases AttributeLoad NameLoad attr body Expr Str Assign NameStore ListLoad Str Str FunctionDef arguments args NameParam defaults body Expr Call AttributeLoad AttributeLoad NameLoad attr attr Str NameLoad Assign NameStore ListLoad Str Str For NameStore NameLoad body Assign NameStore Call AttributeLoad NameLoad attr keyword NameLoad keyword AttributeLoad AttributeLoad AttributeLoad NameLoad attr attr attr Expr Call AttributeLoad NameLoad attr Str keyword NameLoad keyword Str decorator_list Call AttributeLoad NameLoad attr keyword Str FunctionDef arguments args NameParam NameParam defaults body Expr Str If UnaryOpNot AttributeLoad NameLoad attr body Return Assign NameStore ListLoad Str Str Str Str Str For NameStore NameLoad body If CompareIn SubscriptLoad AttributeLoad AttributeLoad NameLoad attr attr Slice Num NameLoad body Assign NameStore SubscriptLoad AttributeLoad AttributeLoad NameLoad attr attr Slice Num Num Assign NameStore BinOpMod Str TupleLoad NameLoad SubscriptLoad AttributeLoad AttributeLoad NameLoad attr attr Slice Num Assign NameStore Call AttributeLoad Call AttributeLoad NameLoad attr attr NameLoad Expr Call AttributeLoad NameLoad attr Call AttributeLoad NameLoad attr keyword NameLoad Assign AttributeStore AttributeLoad NameLoad attr attr NameLoad Break decorator_list Call AttributeLoad NameLoad attr FunctionDef arguments args NameParam NameParam defaults body If UnaryOpNot AttributeLoad AttributeLoad NameLoad attr attr body Raise Call AttributeLoad NameLoad attr Str Expr Call AttributeLoad Call NameLoad NameLoad NameLoad attr decorator_list Call AttributeLoad NameLoad attr decorator_list
N/A N/A Fallback flows for artifacts that couldn't be collected normally.

These flows subclass lib.artifact.ArtifactFallbackCollector.
 grr.lib artifact grr.lib flow grr.lib parsers grr.lib.rdfvalues client rdf_client grr.lib.rdfvalues paths rdf_paths grr.lib.rdfvalues protodict rdf_protodict SystemRootSystemDriveFallbackFlow N/A N/A artifact ArtifactFallbackCollector N/A N/A Flow that attempts to guess systemroot and systemdrive.

  This is the fallback flow for the SystemRoot and
  SystemDriveEnvironmentVariable artifacts.  These values underpin many other
  artifact values so we want to make an educated guess if we can't collect by
  normal means.
   N/A artifacts N/A SystemRoot SystemDriveEnvironmentVariable Start N/A N/A self N/A N/A N/A N/A N/A N/A self state Register success False N/A system_drive_opts N/A C: D: N/A drive system_drive_opts N/A N/A pathspec N/A N/A rdf_paths PathSpec path drive pathtype N/A N/A N/A rdf_paths PathSpec PathType OS N/A N/A N/A self CallClient ListDirectory pathspec pathspec next_state ProcessFileStats N/A N/A N/A flow StateHandler next_state ProcessFileStats ProcessFileStats N/A N/A self responses N/A N/A N/A Extract DataBlob from Stat response. N/A N/A N/A responses success N/A N/A N/A system_root_paths N/A Windows WinNT WINNT35 WTSRV WINDOWS N/A response responses N/A N/A N/A N/A N/A N/A response pathspec path N/A 4 system_root_paths N/A N/A systemdrive N/A N/A N/A response pathspec path N/A 1 3 N/A systemroot N/A %s\%s N/A systemdrive N/A N/A N/A response pathspec path N/A 4 N/A data N/A N/A N/A N/A rdf_protodict DataBlob SetValue systemroot N/A N/A N/A self SendReply N/A N/A rdf_client StatEntry registry_data data N/A N/A N/A self state success True N/A N/A N/A N/A flow StateHandler End N/A N/A self responses N/A N/A N/A N/A N/A N/A self state success N/A N/A N/A N/A flow FlowError Couldn't guess the system root and drive location N/A N/A N/A N/A super SystemRootSystemDriveFallbackFlow self End N/A N/A N/A flow StateHandler N/A