[analyze_and_output1]
case=analyze_and_output
analysis_options=--analysis file_hashes
output_file=analyze_and_output1.log
output_format=dynamic
reference_output_file=test_data/end_to_end/dynamic.log
source=test_data/psort_test.plaso

[extract_and_analyze1]
case=extract_and_analyze
analysis_options=--analysis windows_services --worker-timeout 1.0
output_file=extract_and_analyze1.log
output_format=dynamic
source=test_data/SYSTEM

[extract_and_output1]
case=extract_and_output
extract_options=--no-vss
output_file=extract_and_output1.log
output_format=dynamic
reference_output_file=test_data/end_to_end/extract_and_output.log
source=test_data/vsstest.qcow2

[extract_and_output2]
case=extract_and_output
extract_options=--no-vss --text C:
output_file=extract_and_output2.log
output_format=dynamic
reference_output_file=test_data/end_to_end/extract_and_output_with_text_prepend.log
source=test_data/vsstest.qcow2

[extract_and_output3]
case=extract_and_output_with_psteal
extract_options=--no-vss
output_file=extract_and_output3.log
output_format=dynamic
reference_output_file=test_data/end_to_end/extract_and_output.log
source=test_data/vsstest.qcow2

[extract_and_output_no_hashers1]
case=extract_and_output
extract_options=--no-vss --hashers=none
output_file=extract_and_output_no_hashers1.log
output_format=dynamic
reference_output_file=test_data/end_to_end/extract_and_output.log
source=test_data/vsstest.qcow2

[extract_and_output_with_filter_file1]
case=extract_and_output
filter_file=test_data/end_to_end/filter_file1.txt
output_file=extract_and_output_with_filter_file1.log
output_format=dynamic
reference_output_file=test_data/end_to_end/extract_and_output_with_filter_file1.log
source=test_data/ext4_with_binaries.dd

[extract_and_output_with_filter_file2]
case=extract_and_output
filter_file=test_data/end_to_end/filter_file2.yaml
output_file=extract_and_output_with_filter_file2.log
output_format=dynamic
reference_output_file=test_data/end_to_end/extract_and_output_with_filter_file2.log
source=test_data/ext4_with_binaries.dd

[extract_and_output_with_filter_file3]
case=extract_and_output
filter_file=test_data/end_to_end/filter_file3.yaml
output_file=extract_and_output_with_filter_file3.log
output_format=dynamic
reference_output_file=test_data/end_to_end/extract_and_output_with_filter_file3.log
source=test_data/ext4_with_binaries.dd

[extract_and_output_with_parsers1]
case=extract_and_output
extract_options=--parsers mft
output_file=extract_and_output_with_parsers1.log
output_format=dynamic
reference_output_file=test_data/end_to_end/extract_and_output_with_parsers1.log
source=test_data/vsstest.qcow2

[extract_and_tag1]
case=extract_and_tag
output_file=extract_and_tag1.log
output_format=dynamic
source=test_data/System.evtx
tagging_file=data/tag_windows.txt

[image_export1]
case=image_export
export_options=--signatures elf,exe_mz
hashes_file=image_export1.hashes
reference_hashes_file=test_data/end_to_end/image_export1.hashes
reference_hashes_json_file=test_data/end_to_end/image_export1-hashes.json
source=test_data/ext4_with_binaries.dd

[image_export2]
case=image_export
export_options=--no_vss --partitions all --signatures elf,exe_mz
hashes_file=image_export2.hashes
reference_hashes_file=test_data/end_to_end/image_export2.hashes
reference_hashes_json_file=test_data/end_to_end/image_export2-hashes.json
source=test_data/ext4_with_binaries.dd

[image_export_with_filter_file1]
case=image_export
filter_file=test_data/end_to_end/filter_file1.txt
hashes_file=image_export_with_filter_file1.hashes
reference_hashes_file=test_data/end_to_end/image_export_with_filter_file1.hashes
reference_hashes_json_file=test_data/end_to_end/image_export_with_filter_file1-hashes.json
source=test_data/ext4_with_binaries.dd

[image_export_with_filter_file2]
case=image_export
filter_file=test_data/end_to_end/filter_file2.yaml
hashes_file=image_export_with_filter_file2.hashes
reference_hashes_file=test_data/end_to_end/image_export_with_filter_file2.hashes
reference_hashes_json_file=test_data/end_to_end/image_export_with_filter_file2-hashes.json
source=test_data/ext4_with_binaries.dd

[image_export_with_filter_file3]
case=image_export
filter_file=test_data/end_to_end/filter_file3.yaml
hashes_file=image_export_with_filter_file3.hashes
reference_hashes_file=test_data/end_to_end/image_export_with_filter_file3.hashes
reference_hashes_json_file=test_data/end_to_end/image_export_with_filter_file3-hashes.json
source=test_data/ext4_with_binaries.dd

[multi_extract_and_output1]
case=multi_extract_and_output
output_file=multi_extract_and_output1.log
output_format=dynamic
source1=test_data/System.evtx
source2=test_data/mactime.body

[output_dynamic]
case=analyze_and_output
output_file=dynamic.log
output_format=dynamic
reference_output_file=test_data/end_to_end/dynamic.log
source=test_data/psort_test.plaso

[output_dynamic_with_slice]
case=analyze_and_output
output_file=dynamic_sliced.log
output_format=dynamic
output_options=--slice=2015-03-23T23:00:00
reference_output_file=test_data/end_to_end/dynamic_sliced.log
source=test_data/psort_test.plaso

[output_dynamic_with_event_filter]
case=analyze_and_output
output_file=dynamic_event_filter.log
output_format=dynamic
output_filter=(date >= '2014-01-01' AND date <= '2014-12-31')
reference_output_file=test_data/end_to_end/dynamic_event_filter.log
source=test_data/psort_test.plaso

[output_dynamic_with_time_zone]
case=analyze_and_output
output_file=dynamic_time_zone.log
output_format=dynamic
output_options=--output-time-zone CET
reference_output_file=test_data/end_to_end/dynamic_time_zone.log
source=test_data/psort_test.plaso

[output_json]
case=analyze_and_output
output_file=json.log
output_format=json
reference_output_file=test_data/end_to_end/json.log
source=test_data/psort_test.plaso

[output_json_line]
case=analyze_and_output
output_file=json_line.log
output_format=json_line
reference_output_file=test_data/end_to_end/json_line.log
source=test_data/psort_test.plaso

[output_l2tcsv]
case=analyze_and_output
output_file=l2tcsv.log
output_format=l2tcsv
reference_output_file=test_data/end_to_end/l2tcsv.log
source=test_data/psort_test.plaso

[output_l2tcsv_with_time_zone]
case=analyze_and_output
output_file=l2tcsv_time_zone.log
output_format=l2tcsv
output_options=--output-time-zone CET
reference_output_file=test_data/end_to_end/l2tcsv_time_zone.log
source=test_data/psort_test.plaso

[output_l2ttln]
case=analyze_and_output
output_file=l2ttln.log
output_format=l2ttln
reference_output_file=test_data/end_to_end/l2ttln.log
source=test_data/psort_test.plaso

[output_null]
case=analyze_and_output
output_format=null
source=test_data/psort_test.plaso

[output_rawpy]
case=analyze_and_output
output_file=rawpy.log
output_format=rawpy
reference_output_file=test_data/end_to_end/rawpy.log
source=test_data/psort_test.plaso

[output_tln]
case=analyze_and_output
output_file=tln.log
output_format=tln
reference_output_file=test_data/end_to_end/tln.log
source=test_data/psort_test.plaso

[output_xlsx]
case=analyze_and_output
output_file=output.xlsx
output_format=xlsx
source=test_data/psort_test.plaso

