require_relative 'single_evidence'
require_relative 'filesystem_evidence'

module RCS
  module FileopenProcessing
    extend SingleEvidence
    include FilesystemEvidenceMixin

    def type
      :file
    end

    def process
      return if unknown_entry?

      update_filesystem_evidence or create_filesystem_evidence
    end
  end
end