acquire 3.22.dev4__tar.gz → 3.22.dev5__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- {acquire-3.22.dev4 → acquire-3.22.dev5}/PKG-INFO +1 -1
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/acquire.py +1 -21
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/uploaders/plugin_registry.py +3 -17
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/utils.py +0 -5
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/version.py +3 -3
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire.egg-info/PKG-INFO +1 -1
- {acquire-3.22.dev4 → acquire-3.22.dev5}/tests/test_plugin.py +3 -4
- {acquire-3.22.dev4 → acquire-3.22.dev5}/.git-blame-ignore-revs +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/.gitattributes +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/COPYRIGHT +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/LICENSE +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/MANIFEST.in +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/README.md +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/__init__.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/collector.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/crypt.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/dynamic/__init__.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/dynamic/windows/__init__.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/dynamic/windows/collect.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/dynamic/windows/exceptions.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/dynamic/windows/handles.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/dynamic/windows/named_objects.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/dynamic/windows/ntdll.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/dynamic/windows/types.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/esxi.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/gui/__init__.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/gui/base.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/gui/win32.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/hashes.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/log.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/outputs/__init__.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/outputs/base.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/outputs/dir.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/outputs/tar.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/outputs/zip.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/tools/__init__.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/tools/decrypter.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/uploaders/__init__.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/uploaders/minio.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/uploaders/plugin.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire/volatilestream.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire.egg-info/SOURCES.txt +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire.egg-info/dependency_links.txt +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire.egg-info/entry_points.txt +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire.egg-info/requires.txt +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/acquire.egg-info/top_level.txt +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/pyproject.toml +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/setup.cfg +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/tests/__init__.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/tests/_data/private_key.pem +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/tests/_data/public_key.pem +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/tests/_docs/Makefile +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/tests/_docs/conf.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/tests/_docs/index.rst +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/tests/conftest.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/tests/test_acquire_command.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/tests/test_acquire_modules.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/tests/test_acquire_profiles.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/tests/test_collector.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/tests/test_decryptor_funcs.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/tests/test_esxi_memory.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/tests/test_file_sorting.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/tests/test_gui.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/tests/test_minio_uploader.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/tests/test_misc_users.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/tests/test_outputs_dir.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/tests/test_outputs_tar.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/tests/test_outputs_zip.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/tests/test_utils.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/tests/test_volatile.py +0 -0
- {acquire-3.22.dev4 → acquire-3.22.dev5}/tox.ini +0 -0
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
Metadata-Version: 2.4
|
|
2
2
|
Name: acquire
|
|
3
|
-
Version: 3.22.
|
|
3
|
+
Version: 3.22.dev5
|
|
4
4
|
Summary: A tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container
|
|
5
5
|
Author-email: Dissect Team <dissect@fox-it.com>
|
|
6
6
|
License-Expression: AGPL-3.0-or-later
|
|
@@ -867,20 +867,6 @@ class MSSQL(Module):
|
|
|
867
867
|
yield ("glob", f"{log_path}/ERRORLOG*")
|
|
868
868
|
|
|
869
869
|
|
|
870
|
-
@register_module("--iis")
|
|
871
|
-
class IIS(Module):
|
|
872
|
-
DESC = "IIS logs"
|
|
873
|
-
|
|
874
|
-
@classmethod
|
|
875
|
-
def get_spec_additions(cls, target: Target, cli_args: argparse.Namespace) -> Iterator[tuple]:
|
|
876
|
-
warnings.warn(
|
|
877
|
-
"--iis is deprecated in favor of --webserver-logs and will be removed in acquire 3.22",
|
|
878
|
-
DeprecationWarning,
|
|
879
|
-
stacklevel=2,
|
|
880
|
-
)
|
|
881
|
-
return Webserver.get_spec_additions(cls, target, cli_args)
|
|
882
|
-
|
|
883
|
-
|
|
884
870
|
@register_module("--webserver")
|
|
885
871
|
class Webserver(Module):
|
|
886
872
|
DESC = "Various webserver logs and configuration files"
|
|
@@ -2193,7 +2179,7 @@ class WindowsProfile:
|
|
|
2193
2179
|
QuarantinedFiles,
|
|
2194
2180
|
WindowsNotifications,
|
|
2195
2181
|
SSH,
|
|
2196
|
-
|
|
2182
|
+
Webserver,
|
|
2197
2183
|
SharePoint,
|
|
2198
2184
|
TextEditor,
|
|
2199
2185
|
Docker,
|
|
@@ -2388,12 +2374,6 @@ def main() -> None:
|
|
|
2388
2374
|
log.info("Default Arguments: %s", " ".join(args.config.get("arguments")))
|
|
2389
2375
|
log.info("")
|
|
2390
2376
|
|
|
2391
|
-
if any(arg in sys.argv for arg in ["--file", "--dir", "-f", "-d"]):
|
|
2392
|
-
warnings.warn(
|
|
2393
|
-
"--file and --dir are deprecated in favor of --path and will be removed in acquire 3.22",
|
|
2394
|
-
DeprecationWarning,
|
|
2395
|
-
stacklevel=2,
|
|
2396
|
-
)
|
|
2397
2377
|
if "--proc-net" in sys.argv:
|
|
2398
2378
|
warnings.warn(
|
|
2399
2379
|
"--proc-net will be merged with --proc and will be removed in acquire 3.23",
|
|
@@ -59,30 +59,16 @@ class PluginRegistry(Generic[T]):
|
|
|
59
59
|
def get(self, name: str) -> T:
|
|
60
60
|
return self.plugins.get(name)
|
|
61
61
|
|
|
62
|
-
def
|
|
63
|
-
"""Searches through the entrypoints to find specific entry_point names.
|
|
64
|
-
|
|
65
|
-
Args:
|
|
66
|
-
entry_point_name: The name to search for.
|
|
67
|
-
|
|
68
|
-
Returns:
|
|
69
|
-
A list with entry_points associated with that name."""
|
|
70
|
-
try:
|
|
71
|
-
entrypoint_plugins = metadata.entry_points()[entry_point_name]
|
|
72
|
-
except KeyError:
|
|
73
|
-
entrypoint_plugins = []
|
|
74
|
-
return entrypoint_plugins
|
|
75
|
-
|
|
76
|
-
def load_entrypoint_plugins(self, name: str) -> None:
|
|
62
|
+
def load_entrypoint_plugins(self, group_name: str) -> None:
|
|
77
63
|
"""Loads all classes defined in the entrypoints that use the specified ``name``.
|
|
78
64
|
|
|
79
65
|
Loads the class loaded from the entrypoint with the form: ``<name>=<path>:<class>``
|
|
80
66
|
as <name> <loaded class>
|
|
81
67
|
|
|
82
68
|
Args:
|
|
83
|
-
|
|
69
|
+
group_name: The entrypoint to search for.
|
|
84
70
|
"""
|
|
85
|
-
class_plugins =
|
|
71
|
+
class_plugins = metadata.entry_points(group=group_name)
|
|
86
72
|
|
|
87
73
|
for ep in class_plugins:
|
|
88
74
|
try:
|
|
@@ -125,12 +125,7 @@ def create_argument_parser(profiles: dict, volatile: dict, modules: dict) -> arg
|
|
|
125
125
|
parser.add_argument("-p", "--profile", choices=profiles.keys(), help="collection profile")
|
|
126
126
|
parser.add_argument("--volatile-profile", choices=volatile.keys(), help="volatile profile")
|
|
127
127
|
|
|
128
|
-
# Keep `--file` and `--dir` (-f, and -d) temporarily
|
|
129
128
|
parser.add_argument(
|
|
130
|
-
"-f",
|
|
131
|
-
"-d",
|
|
132
|
-
"--file",
|
|
133
|
-
"--dir",
|
|
134
129
|
"--path",
|
|
135
130
|
dest="path",
|
|
136
131
|
action="append",
|
|
@@ -28,7 +28,7 @@ version_tuple: VERSION_TUPLE
|
|
|
28
28
|
commit_id: COMMIT_ID
|
|
29
29
|
__commit_id__: COMMIT_ID
|
|
30
30
|
|
|
31
|
-
__version__ = version = '3.22.
|
|
32
|
-
__version_tuple__ = version_tuple = (3, 22, '
|
|
31
|
+
__version__ = version = '3.22.dev5'
|
|
32
|
+
__version_tuple__ = version_tuple = (3, 22, 'dev5')
|
|
33
33
|
|
|
34
|
-
__commit_id__ = commit_id = '
|
|
34
|
+
__commit_id__ = commit_id = 'g96b02931b'
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
Metadata-Version: 2.4
|
|
2
2
|
Name: acquire
|
|
3
|
-
Version: 3.22.
|
|
3
|
+
Version: 3.22.dev5
|
|
4
4
|
Summary: A tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container
|
|
5
5
|
Author-email: Dissect Team <dissect@fox-it.com>
|
|
6
6
|
License-Expression: AGPL-3.0-or-later
|
|
@@ -23,7 +23,7 @@ def test_registry_functionality_iterator() -> None:
|
|
|
23
23
|
|
|
24
24
|
def test_registry_entrypoint() -> None:
|
|
25
25
|
mocked_output = Mock()
|
|
26
|
-
with patch
|
|
26
|
+
with patch(f"{PluginRegistry.__module__}.metadata.entry_points", return_value=[mocked_output]):
|
|
27
27
|
data = PluginRegistry("<undefined>")
|
|
28
28
|
assert data.get(mocked_output.name) == mocked_output.load.return_value
|
|
29
29
|
|
|
@@ -33,6 +33,5 @@ def test_registry_entrypoint_failed() -> None:
|
|
|
33
33
|
mocked_output.load.side_effect = [ModuleNotFoundError]
|
|
34
34
|
data = PluginRegistry("-")
|
|
35
35
|
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
assert len(data.items()) == 0
|
|
36
|
+
data.load_entrypoint_plugins("test")
|
|
37
|
+
assert len(data.items()) == 0
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|