Package modules :: Package packages :: Module ppt :: Class PPT
[hide private]
[frames] | no frames]

Class PPT

source code

                  object --+    
                           |    
lib.common.abstracts.Package --+
                               |
                              PPT

PowerPoint analysis package.

Instance Methods [hide private]
 
start(self, path)
Run analysis package.
source code

Inherited from lib.common.abstracts.Package: __init__, check, enum_paths, execute, finish, get_path, get_path_glob, init_regkeys, move_curdir, package_files, set_pids

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Class Variables [hide private]
  PATHS = [("ProgramFiles", "Microsoft Office", "POWERPNT.EXE"),...
  REGKEYS = [[HKEY_CURRENT_USER, "Software\\Microsoft\\Office\\1...
Properties [hide private]

Inherited from object: __class__

Method Details [hide private]

start(self, path)

source code 

Run analysis package.

Raises:
  • NotImplementedError - this method is abstract.
Overrides: lib.common.abstracts.Package.start
(inherited documentation)

Class Variable Details [hide private]

PATHS

Value:
[("ProgramFiles", "Microsoft Office", "POWERPNT.EXE"), ("ProgramFiles"\
, "Microsoft Office", "Office10", "POWERPNT.EXE"), ("ProgramFiles", "M\
icrosoft Office", "Office11", "POWERPNT.EXE"), ("ProgramFiles", "Micro\
soft Office", "Office12", "POWERPNT.EXE"), ("ProgramFiles", "Microsoft\
 Office", "Office14", "POWERPNT.EXE"), ("ProgramFiles", "Microsoft Off\
ice", "Office15", "POWERPNT.EXE"), ("ProgramFiles", "Microsoft Office"\
, "Office16", "POWERPNT.EXE"), ("ProgramFiles", "Microsoft Office 15",\
 "root", "office15", "POWERPNT.EXE"),]

REGKEYS

Value:
[[HKEY_CURRENT_USER, "Software\\Microsoft\\Office\\12.0\\Common\\Gener\
al", {"ShownOptIn": 1,},], [HKEY_CURRENT_USER, "Software\\Microsoft\\O\
ffice\\12.0\\Powerpoint\\Security", {"VBAWarnings": 1, "AccessVBOM": 1\
, "ExtensionHardening": 0,},],]