acquire 3.20.dev6__tar.gz → 3.20.dev7__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (72) hide show
  1. {acquire-3.20.dev6 → acquire-3.20.dev7}/PKG-INFO +1 -1
  2. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/acquire.py +1 -0
  3. acquire-3.20.dev7/acquire/version.py +34 -0
  4. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire.egg-info/PKG-INFO +1 -1
  5. acquire-3.20.dev6/acquire/version.py +0 -21
  6. {acquire-3.20.dev6 → acquire-3.20.dev7}/.git-blame-ignore-revs +0 -0
  7. {acquire-3.20.dev6 → acquire-3.20.dev7}/.gitattributes +0 -0
  8. {acquire-3.20.dev6 → acquire-3.20.dev7}/COPYRIGHT +0 -0
  9. {acquire-3.20.dev6 → acquire-3.20.dev7}/LICENSE +0 -0
  10. {acquire-3.20.dev6 → acquire-3.20.dev7}/MANIFEST.in +0 -0
  11. {acquire-3.20.dev6 → acquire-3.20.dev7}/README.md +0 -0
  12. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/__init__.py +0 -0
  13. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/collector.py +0 -0
  14. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/crypt.py +0 -0
  15. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/dynamic/__init__.py +0 -0
  16. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/dynamic/windows/__init__.py +0 -0
  17. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/dynamic/windows/collect.py +0 -0
  18. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/dynamic/windows/exceptions.py +0 -0
  19. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/dynamic/windows/handles.py +0 -0
  20. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/dynamic/windows/named_objects.py +0 -0
  21. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/dynamic/windows/ntdll.py +0 -0
  22. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/dynamic/windows/types.py +0 -0
  23. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/esxi.py +0 -0
  24. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/gui/__init__.py +0 -0
  25. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/gui/base.py +0 -0
  26. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/gui/win32.py +0 -0
  27. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/hashes.py +0 -0
  28. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/log.py +0 -0
  29. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/outputs/__init__.py +0 -0
  30. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/outputs/base.py +0 -0
  31. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/outputs/dir.py +0 -0
  32. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/outputs/tar.py +0 -0
  33. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/outputs/zip.py +0 -0
  34. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/tools/__init__.py +0 -0
  35. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/tools/decrypter.py +0 -0
  36. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/uploaders/__init__.py +0 -0
  37. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/uploaders/minio.py +0 -0
  38. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/uploaders/plugin.py +0 -0
  39. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/uploaders/plugin_registry.py +0 -0
  40. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/utils.py +0 -0
  41. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire/volatilestream.py +0 -0
  42. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire.egg-info/SOURCES.txt +0 -0
  43. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire.egg-info/dependency_links.txt +0 -0
  44. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire.egg-info/entry_points.txt +0 -0
  45. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire.egg-info/requires.txt +0 -0
  46. {acquire-3.20.dev6 → acquire-3.20.dev7}/acquire.egg-info/top_level.txt +0 -0
  47. {acquire-3.20.dev6 → acquire-3.20.dev7}/pyproject.toml +0 -0
  48. {acquire-3.20.dev6 → acquire-3.20.dev7}/setup.cfg +0 -0
  49. {acquire-3.20.dev6 → acquire-3.20.dev7}/tests/__init__.py +0 -0
  50. {acquire-3.20.dev6 → acquire-3.20.dev7}/tests/_data/private_key.pem +0 -0
  51. {acquire-3.20.dev6 → acquire-3.20.dev7}/tests/_data/public_key.pem +0 -0
  52. {acquire-3.20.dev6 → acquire-3.20.dev7}/tests/_docs/Makefile +0 -0
  53. {acquire-3.20.dev6 → acquire-3.20.dev7}/tests/_docs/conf.py +0 -0
  54. {acquire-3.20.dev6 → acquire-3.20.dev7}/tests/_docs/index.rst +0 -0
  55. {acquire-3.20.dev6 → acquire-3.20.dev7}/tests/conftest.py +0 -0
  56. {acquire-3.20.dev6 → acquire-3.20.dev7}/tests/test_acquire_command.py +0 -0
  57. {acquire-3.20.dev6 → acquire-3.20.dev7}/tests/test_acquire_modules.py +0 -0
  58. {acquire-3.20.dev6 → acquire-3.20.dev7}/tests/test_acquire_profiles.py +0 -0
  59. {acquire-3.20.dev6 → acquire-3.20.dev7}/tests/test_collector.py +0 -0
  60. {acquire-3.20.dev6 → acquire-3.20.dev7}/tests/test_decryptor_funcs.py +0 -0
  61. {acquire-3.20.dev6 → acquire-3.20.dev7}/tests/test_esxi_memory.py +0 -0
  62. {acquire-3.20.dev6 → acquire-3.20.dev7}/tests/test_file_sorting.py +0 -0
  63. {acquire-3.20.dev6 → acquire-3.20.dev7}/tests/test_gui.py +0 -0
  64. {acquire-3.20.dev6 → acquire-3.20.dev7}/tests/test_minio_uploader.py +0 -0
  65. {acquire-3.20.dev6 → acquire-3.20.dev7}/tests/test_misc_users.py +0 -0
  66. {acquire-3.20.dev6 → acquire-3.20.dev7}/tests/test_outputs_dir.py +0 -0
  67. {acquire-3.20.dev6 → acquire-3.20.dev7}/tests/test_outputs_tar.py +0 -0
  68. {acquire-3.20.dev6 → acquire-3.20.dev7}/tests/test_outputs_zip.py +0 -0
  69. {acquire-3.20.dev6 → acquire-3.20.dev7}/tests/test_plugin.py +0 -0
  70. {acquire-3.20.dev6 → acquire-3.20.dev7}/tests/test_utils.py +0 -0
  71. {acquire-3.20.dev6 → acquire-3.20.dev7}/tests/test_volatile.py +0 -0
  72. {acquire-3.20.dev6 → acquire-3.20.dev7}/tox.ini +0 -0
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.4
2
2
  Name: acquire
3
- Version: 3.20.dev6
3
+ Version: 3.20.dev7
4
4
  Summary: A tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container
5
5
  Author-email: Dissect Team <dissect@fox-it.com>
6
6
  License: Affero General Public License v3
@@ -1091,6 +1091,7 @@ class AV(Module):
1091
1091
  # McAfee
1092
1092
  ("path", "Application Data/McAfee/DesktopProtection", from_user_home),
1093
1093
  ("path", "sysvol/ProgramData/McAfee/DesktopProtection"),
1094
+ ("path", "sysvol/ProgramData/McAfee/Endpoint Security/ATP"),
1094
1095
  ("path", "sysvol/ProgramData/McAfee/Endpoint Security/Logs"),
1095
1096
  ("path", "sysvol/ProgramData/McAfee/Endpoint Security/Logs_Old"),
1096
1097
  ("path", "sysvol/ProgramData/Mcafee/VirusScan"),
@@ -0,0 +1,34 @@
1
+ # file generated by setuptools-scm
2
+ # don't change, don't track in version control
3
+
4
+ __all__ = [
5
+ "__version__",
6
+ "__version_tuple__",
7
+ "version",
8
+ "version_tuple",
9
+ "__commit_id__",
10
+ "commit_id",
11
+ ]
12
+
13
+ TYPE_CHECKING = False
14
+ if TYPE_CHECKING:
15
+ from typing import Tuple
16
+ from typing import Union
17
+
18
+ VERSION_TUPLE = Tuple[Union[int, str], ...]
19
+ COMMIT_ID = Union[str, None]
20
+ else:
21
+ VERSION_TUPLE = object
22
+ COMMIT_ID = object
23
+
24
+ version: str
25
+ __version__: str
26
+ __version_tuple__: VERSION_TUPLE
27
+ version_tuple: VERSION_TUPLE
28
+ commit_id: COMMIT_ID
29
+ __commit_id__: COMMIT_ID
30
+
31
+ __version__ = version = '3.20.dev7'
32
+ __version_tuple__ = version_tuple = (3, 20, 'dev7')
33
+
34
+ __commit_id__ = commit_id = 'gc243af820'
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.4
2
2
  Name: acquire
3
- Version: 3.20.dev6
3
+ Version: 3.20.dev7
4
4
  Summary: A tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container
5
5
  Author-email: Dissect Team <dissect@fox-it.com>
6
6
  License: Affero General Public License v3
@@ -1,21 +0,0 @@
1
- # file generated by setuptools-scm
2
- # don't change, don't track in version control
3
-
4
- __all__ = ["__version__", "__version_tuple__", "version", "version_tuple"]
5
-
6
- TYPE_CHECKING = False
7
- if TYPE_CHECKING:
8
- from typing import Tuple
9
- from typing import Union
10
-
11
- VERSION_TUPLE = Tuple[Union[int, str], ...]
12
- else:
13
- VERSION_TUPLE = object
14
-
15
- version: str
16
- __version__: str
17
- __version_tuple__: VERSION_TUPLE
18
- version_tuple: VERSION_TUPLE
19
-
20
- __version__ = version = '3.20.dev6'
21
- __version_tuple__ = version_tuple = (3, 20, 'dev6')
File without changes
File without changes
File without changes
File without changes
File without changes
File without changes
File without changes
File without changes
File without changes
File without changes