acquire 3.19.dev2__tar.gz → 3.19.dev4__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (70) hide show
  1. {acquire-3.19.dev2 → acquire-3.19.dev4}/PKG-INFO +1 -1
  2. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/acquire.py +9 -3
  3. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/version.py +2 -2
  4. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire.egg-info/PKG-INFO +1 -1
  5. {acquire-3.19.dev2 → acquire-3.19.dev4}/.git-blame-ignore-revs +0 -0
  6. {acquire-3.19.dev2 → acquire-3.19.dev4}/.gitattributes +0 -0
  7. {acquire-3.19.dev2 → acquire-3.19.dev4}/COPYRIGHT +0 -0
  8. {acquire-3.19.dev2 → acquire-3.19.dev4}/LICENSE +0 -0
  9. {acquire-3.19.dev2 → acquire-3.19.dev4}/MANIFEST.in +0 -0
  10. {acquire-3.19.dev2 → acquire-3.19.dev4}/README.md +0 -0
  11. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/__init__.py +0 -0
  12. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/collector.py +0 -0
  13. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/crypt.py +0 -0
  14. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/dynamic/__init__.py +0 -0
  15. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/dynamic/windows/__init__.py +0 -0
  16. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/dynamic/windows/collect.py +0 -0
  17. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/dynamic/windows/exceptions.py +0 -0
  18. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/dynamic/windows/handles.py +0 -0
  19. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/dynamic/windows/named_objects.py +0 -0
  20. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/dynamic/windows/ntdll.py +0 -0
  21. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/dynamic/windows/types.py +0 -0
  22. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/esxi.py +0 -0
  23. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/gui/__init__.py +0 -0
  24. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/gui/base.py +0 -0
  25. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/gui/win32.py +0 -0
  26. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/hashes.py +0 -0
  27. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/log.py +0 -0
  28. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/outputs/__init__.py +0 -0
  29. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/outputs/base.py +0 -0
  30. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/outputs/dir.py +0 -0
  31. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/outputs/tar.py +0 -0
  32. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/outputs/zip.py +0 -0
  33. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/tools/__init__.py +0 -0
  34. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/tools/decrypter.py +0 -0
  35. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/uploaders/__init__.py +0 -0
  36. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/uploaders/minio.py +0 -0
  37. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/uploaders/plugin.py +0 -0
  38. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/uploaders/plugin_registry.py +0 -0
  39. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/utils.py +0 -0
  40. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/volatilestream.py +0 -0
  41. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire.egg-info/SOURCES.txt +0 -0
  42. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire.egg-info/dependency_links.txt +0 -0
  43. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire.egg-info/entry_points.txt +0 -0
  44. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire.egg-info/requires.txt +0 -0
  45. {acquire-3.19.dev2 → acquire-3.19.dev4}/acquire.egg-info/top_level.txt +0 -0
  46. {acquire-3.19.dev2 → acquire-3.19.dev4}/pyproject.toml +0 -0
  47. {acquire-3.19.dev2 → acquire-3.19.dev4}/setup.cfg +0 -0
  48. {acquire-3.19.dev2 → acquire-3.19.dev4}/tests/__init__.py +0 -0
  49. {acquire-3.19.dev2 → acquire-3.19.dev4}/tests/_data/private_key.pem +0 -0
  50. {acquire-3.19.dev2 → acquire-3.19.dev4}/tests/_data/public_key.pem +0 -0
  51. {acquire-3.19.dev2 → acquire-3.19.dev4}/tests/_docs/Makefile +0 -0
  52. {acquire-3.19.dev2 → acquire-3.19.dev4}/tests/_docs/conf.py +0 -0
  53. {acquire-3.19.dev2 → acquire-3.19.dev4}/tests/_docs/index.rst +0 -0
  54. {acquire-3.19.dev2 → acquire-3.19.dev4}/tests/conftest.py +0 -0
  55. {acquire-3.19.dev2 → acquire-3.19.dev4}/tests/test_acquire_command.py +0 -0
  56. {acquire-3.19.dev2 → acquire-3.19.dev4}/tests/test_acquire_modules.py +0 -0
  57. {acquire-3.19.dev2 → acquire-3.19.dev4}/tests/test_collector.py +0 -0
  58. {acquire-3.19.dev2 → acquire-3.19.dev4}/tests/test_decryptor_funcs.py +0 -0
  59. {acquire-3.19.dev2 → acquire-3.19.dev4}/tests/test_esxi_memory.py +0 -0
  60. {acquire-3.19.dev2 → acquire-3.19.dev4}/tests/test_file_sorting.py +0 -0
  61. {acquire-3.19.dev2 → acquire-3.19.dev4}/tests/test_gui.py +0 -0
  62. {acquire-3.19.dev2 → acquire-3.19.dev4}/tests/test_minio_uploader.py +0 -0
  63. {acquire-3.19.dev2 → acquire-3.19.dev4}/tests/test_misc_users.py +0 -0
  64. {acquire-3.19.dev2 → acquire-3.19.dev4}/tests/test_outputs_dir.py +0 -0
  65. {acquire-3.19.dev2 → acquire-3.19.dev4}/tests/test_outputs_tar.py +0 -0
  66. {acquire-3.19.dev2 → acquire-3.19.dev4}/tests/test_outputs_zip.py +0 -0
  67. {acquire-3.19.dev2 → acquire-3.19.dev4}/tests/test_plugin.py +0 -0
  68. {acquire-3.19.dev2 → acquire-3.19.dev4}/tests/test_utils.py +0 -0
  69. {acquire-3.19.dev2 → acquire-3.19.dev4}/tests/test_volatile.py +0 -0
  70. {acquire-3.19.dev2 → acquire-3.19.dev4}/tox.ini +0 -0
{acquire-3.19.dev2 → acquire-3.19.dev4}/PKG-INFO RENAMED
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.4
2
2
  Name: acquire
3
- Version: 3.19.dev2
3
+ Version: 3.19.dev4
4
4
  Summary: A tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container
5
5
  Author-email: Dissect Team <dissect@fox-it.com>
6
6
  License: Affero General Public License v3
{acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/acquire.py RENAMED
@@ -1260,11 +1260,17 @@ class RemoteAccess(Module):
1260
1260
  ("glob", "Library/Logs/TeamViewer/*.log", from_user_home),
1261
1261
  # anydesk - Windows
1262
1262
  ("dir", "sysvol/ProgramData/AnyDesk"),
1263
- ("glob", "AppData/Roaming/AnyDesk/*.trace", from_user_home),
1264
- ("glob", "AppData/Roaming/AnyDesk/*/*.trace", from_user_home),
1263
+ ("dir", "AppData/Roaming/AnyDesk", from_user_home),
1265
1264
  # anydesk - Mac + Linux
1266
- ("glob", ".anydesk*/*.trace", from_user_home),
1265
+ ("glob", ".anydesk*/*", from_user_home),
1267
1266
  ("file", "/var/log/anydesk.trace"),
1267
+ # RustDesk - Windows
1268
+ ("dir", "sysvol/ProgramData/RustDesk"),
1269
+ ("dir", "AppData/Roaming/RustDesk/log/server/", from_user_home),
1270
+ # RustDesk - Mac + Linux
1271
+ ("dir", ".local/share/logs/RustDesk/server/", from_user_home),
1272
+ ("dir", "/var/log/RustDesk"),
1273
+ ("dir", "Library/Logs/RustDesk/Server", from_user_home),
1268
1274
  # zoho
1269
1275
  ("dir", "sysvol/ProgramData/ZohoMeeting/log"),
1270
1276
  ("dir", "AppData/Local/ZohoMeeting/log", from_user_home),
{acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/version.py RENAMED
@@ -17,5 +17,5 @@ __version__: str
17
17
  __version_tuple__: VERSION_TUPLE
18
18
  version_tuple: VERSION_TUPLE
19
19
 
20
- __version__ = version = '3.19.dev2'
21
- __version_tuple__ = version_tuple = (3, 19, 'dev2')
20
+ __version__ = version = '3.19.dev4'
21
+ __version_tuple__ = version_tuple = (3, 19, 'dev4')
{acquire-3.19.dev2 → acquire-3.19.dev4}/acquire.egg-info/PKG-INFO RENAMED
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.4
2
2
  Name: acquire
3
- Version: 3.19.dev2
3
+ Version: 3.19.dev4
4
4
  Summary: A tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container
5
5
  Author-email: Dissect Team <dissect@fox-it.com>
6
6
  License: Affero General Public License v3
{acquire-3.19.dev2 → acquire-3.19.dev4}/.gitattributes RENAMED
File without changes
{acquire-3.19.dev2 → acquire-3.19.dev4}/COPYRIGHT RENAMED
File without changes
{acquire-3.19.dev2 → acquire-3.19.dev4}/LICENSE RENAMED
File without changes
{acquire-3.19.dev2 → acquire-3.19.dev4}/MANIFEST.in RENAMED
File without changes
{acquire-3.19.dev2 → acquire-3.19.dev4}/README.md RENAMED
File without changes
{acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/esxi.py RENAMED
File without changes
{acquire-3.19.dev2 → acquire-3.19.dev4}/acquire/log.py RENAMED
File without changes
{acquire-3.19.dev2 → acquire-3.19.dev4}/pyproject.toml RENAMED
File without changes
{acquire-3.19.dev2 → acquire-3.19.dev4}/setup.cfg RENAMED
File without changes
{acquire-3.19.dev2 → acquire-3.19.dev4}/tox.ini RENAMED
File without changes