Initial release: offline NetScaler triage with Sigma rules and MIT license

typing_stubs/pyzipper/__init__.pyi

@@ -0,0 +1,25 @@
+"""Narrow pyzipper API used by extraction and encrypted archive tests.
+
+The constructor signature and WZ_AES constant are checked against pyzipper 0.4.0.
+Inherited ZipFile methods describe the compatible read/write interface.
+"""
+
+from os import PathLike
+from typing import IO, Literal
+from zipfile import ZipFile
+
+WZ_AES: Literal["WZ_AES"]
+
+class AESZipFile(ZipFile):
+    def __init__(
+        self,
+        file: str | PathLike[str] | IO[bytes],
+        mode: Literal["r", "w", "x", "a"] = ...,
+        compression: int = ...,
+        allowZip64: bool = ...,
+        compresslevel: int | None = ...,
+        *,
+        strict_timestamps: bool = ...,
+        encryption: str | None = ...,
+        encryption_kwargs: dict[str, int] | None = ...,
+    ) -> None: ...