Python development

libesedb comes with Python-bindings named pyesedb.

Below are examples how use pyesedb. They assume you have a working version of pyesedb on your system. To build pyesedb see Building.

Import

To be able to use pyesedb in your Python scripts add the following import:

import pyesedb

Get version

The get_version() module function can be used to retrieve the version of the pyesedb.

pyesedb.get_version()

This will return a textual string (Unicode) that contains the libesedb version. Since pyesedb is a wrapper around libesedb it does not have a separate version.

Open file

Open a file by path

esedb_file = pyesedb.file()

esedb_file.open("Windows.edb")

...

esedb_file.close()

The explicit call to esedb_file.close() is not required. Close only must be called once all operations on the file have been completed.

Open a file using a file-like object

file_object = open("Windows.edb", "rb")

esedb_file = pyesedb.file()

esedb_file.open_file_object(file_object)

...

esedb_file.close()

The explicit call to esedb_file.close() is not required. Close only must be called once all operations on the file have been completed and will not close the file-like object itself.

Also see

import pyesedb

help(pyesedb)
help(pyesedb.file)