dissect.target 3.14.dev20__py3-none-any.whl → 3.14.dev23__py3-none-any.whl

dissect/target/plugins/os/windows/regf/userassist.py

@@ -2,7 +2,6 @@ import codecs
 
 from dissect import cstruct
 from dissect.util.ts import wintimestamp
-from flow.record.fieldtypes import path
 
 from dissect.target.exceptions import RegistryValueNotFoundError, UnsupportedPluginError
 from dissect.target.helpers.descriptor_extensions import (
@@ -128,7 +127,7 @@ class UserAssistPlugin(Plugin):
 
                         yield UserAssistRecord(
                             ts=wintimestamp(timestamp),
-                            path=path.from_windows(value),
+                            path=self.target.fs.path(value),
                             number_of_executions=number_of_executions,
                             application_focus_count=application_focus_count,
                             application_focus_duration=application_focus_duration,

dissect/target/plugins/os/windows/services.py

@@ -1,7 +1,5 @@
 import re
 
-from flow.record.fieldtypes import path
-
 from dissect.target.exceptions import (
     RegistryError,
     RegistryValueNotFoundError,
@@ -100,7 +98,7 @@ class ServicesPlugin(Plugin):
 
                 try:
                     servicedll = key.subkey("Parameters").value("ServiceDll").value
-                    servicedll = path.from_windows(servicedll)
+                    servicedll = self.target.fs.path(servicedll)
                 except RegistryError:
                     pass
 
@@ -138,7 +136,7 @@ class ServicesPlugin(Plugin):
                                 image_path = image_path[: m.end(0)].strip()
                             else:
                                 pass
-                        image_path = path.from_windows(image_path)
+                        image_path = self.target.fs.path(image_path)
                 except RegistryError:
                     pass
 

dissect/target/plugins/os/windows/sru.py

@@ -1,6 +1,5 @@
 from dissect.esedb.exceptions import Error
 from dissect.esedb.tools import sru
-from flow.record.fieldtypes import path
 
 from dissect.target.exceptions import UnsupportedPluginError
 from dissect.target.helpers.record import TargetRecordDescriptor
@@ -329,7 +328,6 @@ def transform_app_id(value):
             value = value.decode()
         else:
             value = str(value)
-        value = path.from_windows(value)
     return value
 
 
@@ -355,7 +353,7 @@ class SRUPlugin(Plugin):
         super().__init__(target)
         self._sru = None
 
-        srupath = self.target.fs.path("sysvol/Windows/System32/sru/SRUDB.dat")
+        srupath = target.fs.path("sysvol/Windows/System32/sru/SRUDB.dat")
         if srupath.exists():
             try:
                 self._sru = sru.SRU(srupath.open())
@@ -382,7 +380,9 @@ class SRUPlugin(Plugin):
 
             record_values = {}
             for column, value in column_values:
-                new_value = TRANSFORMS[column](value) if column in TRANSFORMS else value
+                new_value = value
+                if new_value and (transform := TRANSFORMS.get(column)):
+                    new_value = self.target.fs.path(transform(new_value))
                 new_column = FIELD_MAPPINGS.get(column, column)
                 record_values[new_column] = new_value
 

dissect/target/plugins/os/windows/startupinfo.py

@@ -1,7 +1,6 @@
 import datetime
 
 from defusedxml import ElementTree
-from flow.record.fieldtypes import path
 
 from dissect.target.exceptions import UnsupportedPluginError
 from dissect.target.helpers.record import TargetRecordDescriptor
@@ -65,8 +64,8 @@ class StartupInfoPlugin(Plugin):
         References:
             - https://www.trustedsec.com/blog/who-left-the-backdoor-open-using-startupinfo-for-the-win/
         """
-        for file in self._files:
-            fh = file.open("rb")
+        for path in self._files:
+            fh = path.open("rb")
 
             try:
                 root = ElementTree.fromstring(fh.read().decode("utf-16-le"), forbid_dtd=True)
@@ -76,12 +75,12 @@ class StartupInfoPlugin(Plugin):
 
                     yield StartupInfoRecord(
                         ts=parse_ts(start_time),
-                        path=path.from_windows(process.get("Name")),
-                        commandline=path.from_windows(process.findtext("CommandLine")),
+                        path=self.target.fs.path(process.get("Name")),
+                        commandline=self.target.fs.path(process.findtext("CommandLine")),
                         pid=process.get("PID"),
                         parent_pid=process.findtext("ParentPID"),
                         parent_start_time=parse_ts(parent_start_time),
-                        parent_name=path.from_windows(process.findtext("ParentName")),
+                        parent_name=self.target.fs.path(process.findtext("ParentName")),
                         disk_usage=process.findtext("DiskUsage"),
                         cpu_usage=process.findtext("CpuUsage"),
                         _target=self.target,

dissect/target/plugins/os/windows/syscache.py

@@ -1,5 +1,4 @@
 from dissect.ntfs import ntfs
-from flow.record.fieldtypes import path
 
 from dissect.target.exceptions import RegistryValueNotFoundError, UnsupportedPluginError
 from dissect.target.helpers import regutil
@@ -76,7 +75,7 @@ class SyscachePlugin(Plugin):
                 full_path = None
                 if mft:
                     try:
-                        full_path = path.from_windows("\\".join(["sysvol", mft.mft(file_segment).fullpath()]))
+                        full_path = self.target.fs.path("\\".join(["sysvol", mft.mft(file_segment).fullpath()]))
                     except ntfs.Error:
                         pass
 

dissect/target/target.py

@@ -426,7 +426,8 @@ class Target:
             if isinstance(os_plugin, plugin.OSPlugin):
                 self._os_plugin = os_plugin.__class__
             elif issubclass(os_plugin, plugin.OSPlugin):
-                os_plugin = os_plugin.create(self, os_plugin.detect(self))
+                if fs := os_plugin.detect(self):
+                    os_plugin = os_plugin.create(self, fs)
 
             self._os = self.add_plugin(os_plugin)
             return

{dissect.target-3.14.dev20.dist-info → dissect.target-3.14.dev23.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: dissect.target
-Version: 3.14.dev20
+Version: 3.14.dev23
 Summary: This module ties all other Dissect modules together, it provides a programming API and command line tools which allow easy access to various data sources inside disk images or file collections (a.k.a. targets)
 Author-email: Dissect Team <dissect@fox-it.com>
 License: Affero General Public License v3

{dissect.target-3.14.dev20.dist-info → dissect.target-3.14.dev23.dist-info}/RECORD

@@ -1,11 +1,11 @@
 dissect/target/__init__.py,sha256=Oc7ounTgq2hE4nR6YcNabetc7SQA40ldSa35VEdZcQU,63
 dissect/target/container.py,sha256=9ixufT1_0WhraqttBWwQjG80caToJqvCX8VjFk8d5F0,9307
 dissect/target/exceptions.py,sha256=VVW_Rq_vQinapz-2mbJ3UkxBEZpb2pE_7JlhMukdtrY,2877
-dissect/target/filesystem.py,sha256=_7hxYD34P5Dxnc7WZZsAHvQcF8KxGUJfGgc1gCyQZA8,53412
+dissect/target/filesystem.py,sha256=8qbXNbhnE9Y1cz-5OH-67Z5eDJMXKQwy7dNYTw1ST5o,53410
 dissect/target/loader.py,sha256=4ZdX-QJY83NPswTyNG31LUwYXdV1tuByrR2vKKg7d5k,7214
 dissect/target/plugin.py,sha256=5EtUEU8feYSak7NRWocByPFWKsU0yeUJio6L72Ekw5c,40914
 dissect/target/report.py,sha256=06uiP4MbNI8cWMVrC1SasNS-Yg6ptjVjckwj8Yhe0Js,7958
-dissect/target/target.py,sha256=C-IGftviTWRoLIEQjX9IM124ZHCDLKb8DH0LVYdNFb4,31871
+dissect/target/target.py,sha256=QMuqP4EYA8boTPgHwN6_LmCRFMNETKwEcu5jb11Mg-c,31904
 dissect/target/volume.py,sha256=aQZAJiny8jjwkc9UtwIRwy7nINXjCxwpO-_UDfh6-BA,15801
 dissect/target/containers/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 dissect/target/containers/asdf.py,sha256=DJp0QEFwUjy2MFwKYcYqIR_BS1fQT1Yi9Kcmqt0aChM,1366
@@ -22,7 +22,7 @@ dissect/target/containers/vmdk.py,sha256=5fQGkJy4esXONXrKLbhpkQDt8Fwx19YENK2mOm7
 dissect/target/data/autocompletion/target_bash_completion.sh,sha256=wrOQ_ED-h8WFcjCmY6n4qKl84tWJv9l8ShFHDfJqJyA,3592
 dissect/target/filesystems/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 dissect/target/filesystems/ad1.py,sha256=nEPzaaRsb6bL4ItFo0uLdmdLvrmK9BjqHeD3FOp3WQI,2413
-dissect/target/filesystems/btrfs.py,sha256=X8HUZJHzArpo04v_A42LM4SQIfQt07TZJJNsYiSvXOE,6247
+dissect/target/filesystems/btrfs.py,sha256=5MBi193ZvclkEQcxDr_sDHfj_FYU_hyYNRL4YqpDu4M,6243
 dissect/target/filesystems/cb.py,sha256=kFyZ7oFMkICSEGGFna2vhKnZx9KQKZ2ZSG_ckEWTIBE,5329
 dissect/target/filesystems/config.py,sha256=Xih61MoEup1rCwQu66SezmTDG4XLOn1hC8ECn_WxX7I,5949
 dissect/target/filesystems/dir.py,sha256=1RVT0-lomceRLQG5sXHpiyii4Vu7S1MGeQSyT-7BCPY,3851
@@ -39,13 +39,13 @@ dissect/target/filesystems/vmfs.py,sha256=sRtYBUAKTKcHrjCXqpFJ8GIVU-ERjqxhB2zXBn
 dissect/target/filesystems/xfs.py,sha256=kIyFGKYlyFYC7H3jaEv-lNKtBW4ZkD92H0WpfGcr1ww,4498
 dissect/target/filesystems/zip.py,sha256=WT1bQhzX_1MXXVZTKrJniae4xqRqMZ8FsfbvhgGQRTQ,4462
 dissect/target/helpers/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-dissect/target/helpers/cache.py,sha256=3_akK2L4-aWhRJh_TxP8Eks3jY-PwpWBi-0R6MjAZPk,8390
+dissect/target/helpers/cache.py,sha256=_0w_iPD1OM066Ueyadb70erQW05jNnpJe-bDDN1UyXc,8444
 dissect/target/helpers/config.py,sha256=6917CZ6eDHaK_tOoiVEIndyhRXO6r6eCBIleq6f47PQ,2346
 dissect/target/helpers/configutil.py,sha256=PgbQahZKCcf1xGkgz10e9d1C_bgVIbS_zH9PCdND0Xk,13149
 dissect/target/helpers/descriptor_extensions.py,sha256=uT8GwznfDAiIgMM7JKKOY0PXKMv2c0GCqJTCkWFgops,2605
 dissect/target/helpers/docs.py,sha256=J5U65Y3yOTqxDEZRCdrEmO63XQCeDzOJea1PwPM6Cyc,5146
-dissect/target/helpers/fsutil.py,sha256=qN8YsDG1HfdgwBHhnMPM6jEgdYaMyBoai75eQopyiJY,33570
-dissect/target/helpers/hashutil.py,sha256=jPAuIFXjByqUg6OM87wVE6S4zEcvULNbvkACRlnYyWs,3603
+dissect/target/helpers/fsutil.py,sha256=pFYy9e3HWaXgUfmzX7PsHSpPItto-x6Cin8Z-h7TTJc,33646
+dissect/target/helpers/hashutil.py,sha256=FYvcb-a01tdL1amcj2ugk6Ki-vhOasvcGdWLn81wRNc,3481
 dissect/target/helpers/keychain.py,sha256=tL7B7gqwG2oWE1c3RHCbIfs_jV4OcThk1uaUD_K6HAc,3310
 dissect/target/helpers/lazy.py,sha256=823VtmdWsbJyVZvNWopDhQdqq2i1xtj6b8IKfveboKw,1771
 dissect/target/helpers/loaderutil.py,sha256=8a-72AuUWdF1fSv9D1DZ_b-a5XQqeopkTQy6EZfl25Y,2444
@@ -68,7 +68,7 @@ dissect/target/loaders/hyperv.py,sha256=_IOUJEO0BXaCBZ6sjIX0DZTkG9UNW5Vs9VcNHYv0
 dissect/target/loaders/itunes.py,sha256=69aMTQiiGYpmD_EYSmf9mO1re8C3jAZIEStmwlMxdAk,13146
 dissect/target/loaders/kape.py,sha256=t5TfrGLqPeIpUUpXzIl6aHsqXMEGDqJ5YwDCs07DiBA,1237
 dissect/target/loaders/local.py,sha256=Ul-LCd_fY7SyWOVR6nH-NqbkuNpxoZVmffwrkvQElU8,16453
-dissect/target/loaders/log.py,sha256=_Mo44icM_4qQ05pjgcowrSnLeUHkwAGVYlYrHiIXLJw,1234
+dissect/target/loaders/log.py,sha256=2u02JfBjJaEVRBP_i1uU3Mgd_aUhrMexLdJwxPxccW8,1277
 dissect/target/loaders/multiraw.py,sha256=4a3ZST0NwjnfPDxHkcEfAcX2ddUlT_C-rcrMHNg1wp4,1046
 dissect/target/loaders/ova.py,sha256=6h4O-7i87J394C6KgLsPkdXRAKNwtPubzLNS3vBGs7U,744
 dissect/target/loaders/ovf.py,sha256=ELMq6J2y6cPKbp7pjWAqMMnFYefWxXNqzIiAQdvGGXQ,1061
@@ -79,7 +79,7 @@ dissect/target/loaders/pvs.py,sha256=dMqdYSBQtH9QLM3tdu0mokLBcn73edg_HUtYtqrdi6E
 dissect/target/loaders/raw.py,sha256=03OXVlvkqwR29XYu7WPg3pmGtYd_4QJEGnkAuvIrdPs,355
 dissect/target/loaders/remote.py,sha256=AoI7-RxH2UMjNWnuHbNaieZycApTY3YZmk4wkQAwFt0,8820
 dissect/target/loaders/res.py,sha256=8b178x05t9K31wOeP8yGD1IdR3RpiMGz7wcvtHmmHjk,8819
-dissect/target/loaders/smb.py,sha256=OWptpqy1CIQNkauKVcQxcDyyksR8paglNfxgilra-Es,12658
+dissect/target/loaders/smb.py,sha256=qP8m4Jq7hvAvUCF9jB4yr2Zut7p_R02_vxziNN3R1to,13070
 dissect/target/loaders/tanium.py,sha256=P9euiQzvVaQQtMQlEmNe0V25w1BkQFRZBuS-0-ksHpY,1585
 dissect/target/loaders/tar.py,sha256=4-ouVKnNCmW1o3I0OhF4DUyjvpZ7qLIon848gmRWR1M,3103
 dissect/target/loaders/target.py,sha256=Bp3kcfW-ntkgDZ9IpYPMoR-4FDBPqcLD_W88Z9IU--o,692
@@ -96,15 +96,15 @@ dissect/target/plugins/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3
 dissect/target/plugins/apps/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 dissect/target/plugins/apps/av/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 dissect/target/plugins/apps/av/mcafee.py,sha256=4lro9iwcL2Vl9Lyy69Sk1D9JWSRTXv5yjpV6NJbbZXE,5409
-dissect/target/plugins/apps/av/sophos.py,sha256=6a4N44VPwrXucGcTspwkCEhKPw5cfmqi-AQrXXDBKps,4140
+dissect/target/plugins/apps/av/sophos.py,sha256=gSfTvjBZMuT0hsL-p4oYxuYmakbqApoOYvL0lKYkSV4,4102
 dissect/target/plugins/apps/av/symantec.py,sha256=RFLyNW6FyuoGcirJ4xHbQM8oGjua9W4zXmC7YDF-H20,14109
-dissect/target/plugins/apps/av/trendmicro.py,sha256=SDSFcjbabP3IORuVovoZNxTEpMw_rPxbm_JQ5Yg9xeQ,4649
+dissect/target/plugins/apps/av/trendmicro.py,sha256=jloy_N4hHAqF1sVIEeD5Q7LRYal3_os14Umk-hGaAR4,4613
 dissect/target/plugins/apps/browser/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 dissect/target/plugins/apps/browser/browser.py,sha256=LpGs4IXpO5t7A3QDxP3zv5Cb0DQXwh3h1vcBKAWT2HY,2187
 dissect/target/plugins/apps/browser/chrome.py,sha256=fUnvPxqieAXwbmNLv4qRKpkDhiF2AQ0goYZytFxneT8,2117
-dissect/target/plugins/apps/browser/chromium.py,sha256=5Zo5l7qtbNub4jvyfWbJOiiW_ak13he3RqazsQvxz3I,16224
+dissect/target/plugins/apps/browser/chromium.py,sha256=HQJrN-JfPAM-R7U6AH455UZPxROAo7N-oi0RZl33I20,15844
 dissect/target/plugins/apps/browser/edge.py,sha256=TbWMX56KACVn5wn3_dGA2dxbDRr65rT_s_H26gcq_aE,1958
-dissect/target/plugins/apps/browser/firefox.py,sha256=yH0WSbPOQsEUXNJfl4ATk5iWdleodEh9B-uI3Wx3WtQ,9556
+dissect/target/plugins/apps/browser/firefox.py,sha256=L_1_-hBdJaf5LaWo_hwQIMXpAdzbBcNwNy2Mp3uoILk,9342
 dissect/target/plugins/apps/browser/iexplore.py,sha256=HGoTCs4sUeIALZY4bypaJKlDUXYH111nlYPwgAJSHs8,8753
 dissect/target/plugins/apps/container/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 dissect/target/plugins/apps/container/docker.py,sha256=guFPqRLbeP4p8R6lDIZVKWnva5_S7rQUVKG21QDz-B4,6416
@@ -130,24 +130,24 @@ dissect/target/plugins/apps/webserver/nginx.py,sha256=nO-YGx68Hw_meSqp2u_d8hQB7N
 dissect/target/plugins/apps/webserver/webserver.py,sha256=_rkI0FRF4b3cUqSix_c00NoPYCfc6_GErt72sP2Jngk,2156
 dissect/target/plugins/child/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 dissect/target/plugins/child/esxi.py,sha256=GfgQzxntcHcyxAE2QjMJ-TrFhklweSXLbYh0uuv-klg,693
-dissect/target/plugins/child/hyperv.py,sha256=IUy1ekymwCpzY89Y3dzElABudJkX0mVCuXGcwweauFY,2274
+dissect/target/plugins/child/hyperv.py,sha256=R2qVeu4p_9V53jO-65znN0LwX9v3FVA-9jbbtOQcEz8,2236
 dissect/target/plugins/child/virtuozzo.py,sha256=Mx4ZxEl21g7IYkzraw4FBZup5EfrkFDv4WuTE3hxguw,1206
-dissect/target/plugins/child/vmware_workstation.py,sha256=tFjvDdL-xQuT0F6P9cVLis0O3dKxWt95yvJziKetSfY,1609
+dissect/target/plugins/child/vmware_workstation.py,sha256=8wkA_tSufvBUyp4XQHzRzFETf5ROlyyO_MVS3TExyfw,1570
 dissect/target/plugins/child/wsl.py,sha256=1opdsZdR6p3-8nhvKRaKgQTFLDL_a_-y-HwwNUjFCfE,2485
 dissect/target/plugins/filesystem/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-dissect/target/plugins/filesystem/acquire_handles.py,sha256=9CEfbfAAgHbyexBG9tecOa0fnD-gMLlKoA-UilHzx4g,1619
-dissect/target/plugins/filesystem/acquire_hash.py,sha256=6gQta1fXlgV1oZUx7d0xeb7RnceHyiA-zV2UTas_xgc,1616
+dissect/target/plugins/filesystem/acquire_handles.py,sha256=-pX_akH5GrYe0HofXOa2Il75knZH6ZKgru4BFcrElkM,1731
+dissect/target/plugins/filesystem/acquire_hash.py,sha256=OVxI19-Bl1tdqCiFMscFMLmyoiBOsuAjL-Q8aQpEwl0,1441
 dissect/target/plugins/filesystem/icat.py,sha256=bOMi04IlljnKwxTWTZJKtK7RxKnabFu3WcXyUwzkE-4,4090
-dissect/target/plugins/filesystem/resolver.py,sha256=dGVuoXHDuXwp9b9xL0-s5XBWwInHWCMncinvtOFg9eM,4631
-dissect/target/plugins/filesystem/walkfs.py,sha256=Wx9MNCn6cbustwsYIlcEVqVJyWNZcoHGPdj3LJ_V6cE,1988
-dissect/target/plugins/filesystem/yara.py,sha256=FlcKTTx-2fREm57ZvepF5VS6fi09RKL_v_kEIeDDZAs,2237
+dissect/target/plugins/filesystem/resolver.py,sha256=_Sn-qTtvEoiDAap1ltBiWR0wzEr8dtrQ4RrFkPDocX8,4676
+dissect/target/plugins/filesystem/walkfs.py,sha256=xsxDR3db66LGUxXzVyGfjmf5Xt_ZcxSShlrioKz7hVc,2203
+dissect/target/plugins/filesystem/yara.py,sha256=q_pbrQArNaWP4ILRzK7VQhukIw16LhUvntoviHmZ38Q,2241
 dissect/target/plugins/filesystem/ntfs/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 dissect/target/plugins/filesystem/ntfs/mft.py,sha256=O5OHo2WDVhvflsQq8DcUaDRgDeWPcJs_1C_bqfm1PO0,8806
 dissect/target/plugins/filesystem/ntfs/mft_timeline.py,sha256=EJr_SFNkCrGx0VKIQFu-0zhNYuNv_7PpaXsYjE6UzE4,6033
-dissect/target/plugins/filesystem/ntfs/usnjrnl.py,sha256=Y91lUhxFh9V_U9HTREqlNXUVQ5K8YhzOkXHFyhracU8,2986
+dissect/target/plugins/filesystem/ntfs/usnjrnl.py,sha256=2n64bhiBOuhVv9GsgFQcfMSE9CQ-RRfu2b3i9E2wzeQ,2938
 dissect/target/plugins/filesystem/ntfs/utils.py,sha256=9oRkmrByR1JPiIM0n_evORcK6NDQuDqrmiVIolupeck,2316
 dissect/target/plugins/filesystem/unix/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-dissect/target/plugins/filesystem/unix/capability.py,sha256=qdjk14w5jApVdjZ8XAJayBPhskfjlSgLyoHaxIwXTQ0,5143
+dissect/target/plugins/filesystem/unix/capability.py,sha256=oTJVEr8Yszejd-FxU0D8J49ATxNrJOcUnBFIc96k8kg,5920
 dissect/target/plugins/filesystem/unix/suid.py,sha256=Q0Y5CyPm34REruyZYP5siFAka4i7QEOOxZ9K2L-SxPY,1290
 dissect/target/plugins/general/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 dissect/target/plugins/general/config.py,sha256=RkcVX1l4Ss2cLCXknC7Mc6U6a3cHlGu5wRjaBpFah7s,2747
@@ -160,7 +160,7 @@ dissect/target/plugins/general/scrape.py,sha256=Fz7BNXflvuxlnVulyyDhLpyU8D_hJdH6
 dissect/target/plugins/general/users.py,sha256=IOqopQ9Y7CKGkALRUr16y8DwxsidYC5tcPErGZCXxyA,2845
 dissect/target/plugins/os/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 dissect/target/plugins/os/unix/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-dissect/target/plugins/os/unix/_os.py,sha256=33xAyHYG5vqpMupoIk_vbwsxAXBBRV1hqwkOOU5Gvg8,13409
+dissect/target/plugins/os/unix/_os.py,sha256=hAb0Ta0fWSABb5cTa-VQaCSH5k0byjSL_JdpGdEGAtY,13371
 dissect/target/plugins/os/unix/cronjobs.py,sha256=2ssj97UVJueyATVl7NMJmqd9uHflQ2tXUqdOCFIEje8,3182
 dissect/target/plugins/os/unix/datetime.py,sha256=gKfBdPyUirt3qmVYfOJ1oZXRPn8wRzssbZxR_ARrtk8,1518
 dissect/target/plugins/os/unix/etc.py,sha256=HoPEC1hxqurSnAXQAK-jf_HxdBIDe-1z_qSw_n-ViI4,258
@@ -180,9 +180,9 @@ dissect/target/plugins/os/unix/bsd/openbsd/__init__.py,sha256=47DEQpj8HBSa-_TImW
 dissect/target/plugins/os/unix/bsd/openbsd/_os.py,sha256=9npz-osM-wHmjOACUqof5N5HJeps7J8KuyenUS5MZDs,923
 dissect/target/plugins/os/unix/bsd/osx/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 dissect/target/plugins/os/unix/bsd/osx/_os.py,sha256=KvP7YJ7apVwoIop7MR-8q5QbVGoB6MdR42l6ssEe6es,4081
-dissect/target/plugins/os/unix/bsd/osx/user.py,sha256=rNwl8-6UuL4AG1P_SQMnxgKeEfV6AeBEtCNB92iPmK4,2360
+dissect/target/plugins/os/unix/bsd/osx/user.py,sha256=qopB0s3n7e6Q7NjWzn8Z-dKtDtU7e6In4Vm7hIvvedo,2322
 dissect/target/plugins/os/unix/esxi/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-dissect/target/plugins/os/unix/esxi/_os.py,sha256=6V6nK22-qSYRI6qGso86rInal6pADvRzLNAjBaXCXFQ,15646
+dissect/target/plugins/os/unix/esxi/_os.py,sha256=V3HtCdlZ5gl-aUhrHhzmUwH29iMrIxZCg3l48MjdCYI,15610
 dissect/target/plugins/os/unix/linux/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 dissect/target/plugins/os/unix/linux/_os.py,sha256=YJYwuq_iAinOrPqTE49Q4DLYMWBeRCly1uTbDvPhp6Q,2796
 dissect/target/plugins/os/unix/linux/cmdline.py,sha256=XIvaTL42DzeQGhqHN_RTMI5g8hbI2_wjzb7KZ0kPOM0,1591
@@ -214,33 +214,33 @@ dissect/target/plugins/os/unix/log/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQe
 dissect/target/plugins/os/unix/log/atop.py,sha256=UmaqdnSmE8AO8bEj4drGSc1HH2n4Pdlxpwfa7RgraIY,16314
 dissect/target/plugins/os/unix/log/audit.py,sha256=OjorWTmCFvCI5RJq6m6WNW0Lhb-poB2VAggKOGZUHK4,3722
 dissect/target/plugins/os/unix/log/auth.py,sha256=l7gCuRdvv9gL0U1N0yrR9hVsMnr4t_k4t-n-f6PrOxg,2388
-dissect/target/plugins/os/unix/log/journal.py,sha256=FsSPZl7S5G-jkND1fSKdt3TYb7BDpMTJjmKE4dH5dKQ,17381
+dissect/target/plugins/os/unix/log/journal.py,sha256=eiNNVLmKWFj4dTQX8PNRNgKpVwzQWEHEsKyYfGUAPXQ,17376
 dissect/target/plugins/os/unix/log/lastlog.py,sha256=eL_dbB1sPoy0tyavIjT457ZLVfXcCr17GiwDrMEEh8A,2458
 dissect/target/plugins/os/unix/log/messages.py,sha256=W3CeI0tchdRql9SKLFDxk9AKwUvqIrnpCujcERvDt90,2846
 dissect/target/plugins/os/unix/log/utmp.py,sha256=21tvzG977LqzRShV6uAoU-83WDcLUrI_Tv__2ZVi9rw,7756
 dissect/target/plugins/os/windows/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-dissect/target/plugins/os/windows/_os.py,sha256=-a1fdUU0Kl4k2spTskJ3LOJP7MadB-8nkBw6edxbUDc,12106
+dissect/target/plugins/os/windows/_os.py,sha256=agGbApfaSrU2klBYJH_ncOOpBWm0a2dxb8r7b1R4d1w,12144
 dissect/target/plugins/os/windows/activitiescache.py,sha256=yY41YdCZk9e97Q8_rjZHknMUeOVDxgBG9VtXQHANUsQ,6710
 dissect/target/plugins/os/windows/adpolicy.py,sha256=rvsvywChfms7d2kMwXRVHZaf8zJ46WmMwYplGAYEax8,6984
-dissect/target/plugins/os/windows/amcache.py,sha256=HdgvgEN5Bue8fg_i6tvJINkMHO86N9HugtqvOIs4fto,27210
-dissect/target/plugins/os/windows/catroot.py,sha256=RYYVRCNDzX6ahrMwx6CMnhNue2fQRXbpodiT2wxmc7Q,5183
+dissect/target/plugins/os/windows/amcache.py,sha256=ZZNOs3bILTf0AGkDkhoatndl0j39DXkstN7oOyxJECU,27188
+dissect/target/plugins/os/windows/catroot.py,sha256=yphQ_98Qvi1kKifGj7RH8j20f1l70KIzV_kFVpwB5Pg,5179
 dissect/target/plugins/os/windows/cim.py,sha256=mVu2RipJNFc90r4nCpMr4xs5XZK7Mbglh5e1_fkU9fY,3001
 dissect/target/plugins/os/windows/clfs.py,sha256=begVsZ-CY97Ksh6S1g03LjyBgu8ERY2hfNDWYPj0GXI,4872
 dissect/target/plugins/os/windows/datetime.py,sha256=j2q53pIt5-fOXNZccUP3uuF-EBELpcfPl_oGabX4cVI,8803
 dissect/target/plugins/os/windows/defender.py,sha256=sLb0v8hTKZTJCq_v8xTzKphHFe4Y97m7RurmtcfNRWo,23736
 dissect/target/plugins/os/windows/env.py,sha256=-u9F9xWy6PUbQmu5Tv_MDoVmy6YB-7CbHokIK_T3S44,13891
-dissect/target/plugins/os/windows/generic.py,sha256=PvYUVL7NICyI3M3iZCvB_sFCnPesrL97Zs7Tfq4e5Pk,22293
-dissect/target/plugins/os/windows/lnk.py,sha256=f_x0z_K06vTB05jPzl8ANTiBVZxN5oCQN9_ZTR8MxcI,8178
+dissect/target/plugins/os/windows/generic.py,sha256=BSvDPfB9faU0uquMj0guw5tnR_97Nn0XAEE4k05BFSQ,22273
+dissect/target/plugins/os/windows/lnk.py,sha256=6_ciURYTa-LpgpHJsixoFUqkfSATHkEbk0xKiIZDGPU,8148
 dissect/target/plugins/os/windows/locale.py,sha256=yXVdclpUqss9h8Nq7N4kg3OHwWGDfjdfiLiUZR3wqv8,2324
 dissect/target/plugins/os/windows/notifications.py,sha256=64xHHueHwtJCc8RTAF70oa0RxvqfCu_DBPWRSZBnYZc,17386
-dissect/target/plugins/os/windows/prefetch.py,sha256=GGkb7oBnkokawlMFTAGkDeG6oF7SxRlxI3xL3NQpBN0,10449
-dissect/target/plugins/os/windows/recyclebin.py,sha256=wpaR_1RNytSytqir11h-z7tdmNfa1OFqpI9cn1gLCFI,4932
+dissect/target/plugins/os/windows/prefetch.py,sha256=5hRxdIP9sIV5Q9TAScMjLbl_mImZ37abvdE_pAd6rh4,10398
+dissect/target/plugins/os/windows/recyclebin.py,sha256=4GSj0Q3YvONufnqANbnG0ffiMQyToCiL5s35Wmu4JOQ,4898
 dissect/target/plugins/os/windows/registry.py,sha256=HqO8Yw2TDKhhkR7fOochzinJN_nQ4qKKx7fJ34qh7tw,12770
 dissect/target/plugins/os/windows/sam.py,sha256=kLOxOCF5Wt_6SZ9z3Uh0c7DRE0_Waa30H1M-cRZotTs,15226
-dissect/target/plugins/os/windows/services.py,sha256=cEjS4dbXL1rAsUfs63tywQbcW_vf3vcmzHfI9BqYiqk,6074
-dissect/target/plugins/os/windows/sru.py,sha256=TpBN9QdANJkuIAQmZ1wx11cLOArLl-LRxkKN_ft_IQQ,16831
-dissect/target/plugins/os/windows/startupinfo.py,sha256=N3aQ6II0agLX2MgPoKngpf5rd5gESa9ImAGzwIVeb3c,3440
-dissect/target/plugins/os/windows/syscache.py,sha256=qV3p3ggJf5Ue2pDYHXiPbHHyMAiSRffXZV46DX5G97M,3481
+dissect/target/plugins/os/windows/services.py,sha256=_6YkuoZD8LUxk72R3n1p1bOBab3A1wszdB1NuPavIGM,6037
+dissect/target/plugins/os/windows/sru.py,sha256=uE0DDguyTvbolfg1323tdYyOKlWgaqyPI2A0tr2pnqU,16836
+dissect/target/plugins/os/windows/startupinfo.py,sha256=kl8Y7M4nVfmJ71I33VCegtbHj-ZOeEsYAdlNbgwtUOA,3406
+dissect/target/plugins/os/windows/syscache.py,sha256=WBDx6rixaVnCRsJHLLN_9YWoTDbzkKGbTnk3XmHSSUM,3443
 dissect/target/plugins/os/windows/tasks.py,sha256=j2OUXC6eY72F1MuvEwL5psaoBaHwQOLRdGnxgD8c53A,5684
 dissect/target/plugins/os/windows/thumbcache.py,sha256=23YjOjTNoE7BYITmg8s9Zs8Wih2e73BkJJEaKlfotcI,4133
 dissect/target/plugins/os/windows/ual.py,sha256=TYF-R46klEa_HHb86UJd6mPrXwHlAMOUTzC0pZ8uiq0,9787
@@ -253,30 +253,30 @@ dissect/target/plugins/os/windows/dpapi/master_key.py,sha256=rgHSVT1_8BHffQ2frBr
 dissect/target/plugins/os/windows/exchange/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 dissect/target/plugins/os/windows/exchange/exchange.py,sha256=ofoapuDQXefIX4sTzwNboyk5RztN2JEyw1OWl5cx-wo,1564
 dissect/target/plugins/os/windows/log/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-dissect/target/plugins/os/windows/log/amcache.py,sha256=fThrDJQbBcxrzUa_UoQFW753h0G5wsiCYz3oAgj8my0,5927
+dissect/target/plugins/os/windows/log/amcache.py,sha256=TabtjNx9Ve-u-Fn0K95A0v_SLGzn2YeNPHrcQvjVKJc,5877
 dissect/target/plugins/os/windows/log/etl.py,sha256=9skhXdKvgmdKE1f3P9MhxvLprKvIGBv5RhOHq-XK91U,6966
 dissect/target/plugins/os/windows/log/evt.py,sha256=F93Kw_gzYbiiMKQPsjrax_fiuKY50miPqrCC-Yd7pSg,7065
 dissect/target/plugins/os/windows/log/evtx.py,sha256=Ue-6uX-vMfzmmSN5bQgEXks0E42Yx-zPl3Gy1TCa6Cg,6038
-dissect/target/plugins/os/windows/log/pfro.py,sha256=-dbkInBTijoKXmfvEp-tar9cldLHfM-u-ADtc4wE_Js,2745
-dissect/target/plugins/os/windows/regf/7zip.py,sha256=T9UlPqbj8pvbc0rQrvFwJxpJ86uWK3CVVq_MF9qjt6I,3254
+dissect/target/plugins/os/windows/log/pfro.py,sha256=BCjg3OZzkIP4-HzRa1b1dPkDv_B4sbd78fl40obUVkM,2706
+dissect/target/plugins/os/windows/regf/7zip.py,sha256=Vc336zhS6R8W98GGlLtPJ_OR0vEP014QnBtYwbx_HUo,3217
 dissect/target/plugins/os/windows/regf/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 dissect/target/plugins/os/windows/regf/appxdebugkeys.py,sha256=2GlbBZITBDhu3JKHgsGCd_6umHFgDw6OQA4g4rHg63E,3935
 dissect/target/plugins/os/windows/regf/auditpol.py,sha256=62WMlZwSzBb-99ujaeGkkOBui5qHOkvMHfACsqCmC0A,5140
-dissect/target/plugins/os/windows/regf/bam.py,sha256=XLW6qYh9F52i5zhWfe-gHxVNJJ9E8wMLQJbqM6deYxg,2091
-dissect/target/plugins/os/windows/regf/cit.py,sha256=-1sA9iwDoPtrlqT9paWrOiIEd6bcKewJdBVkk8Sad_M,38276
+dissect/target/plugins/os/windows/regf/bam.py,sha256=W46KjD2bQC52qSajc2lNX36lkjzylKzH7xulnhEKrL8,2053
+dissect/target/plugins/os/windows/regf/cit.py,sha256=vErcoGfslyuZsaZiGbSGm6KxnJmUjobMwoy03jb6774,38244
 dissect/target/plugins/os/windows/regf/clsid.py,sha256=OvvA7Rwm29c1wXarXWXOMkqspA44oOQrQ_0rAJGYAU0,3601
 dissect/target/plugins/os/windows/regf/firewall.py,sha256=aC7AG6GexD6o4g06GyDohCv638wfXOmwxmrDIUmO6zM,3140
 dissect/target/plugins/os/windows/regf/mru.py,sha256=xm4mZ9Jbb3QrTiBMKB3G6S5uT8qLnMAFVWkbe7J7hj8,13476
-dissect/target/plugins/os/windows/regf/muicache.py,sha256=kE9oo-1FkUj559nvAO9MeJdC5xUxz8k_PSlsvHJ1878,3746
+dissect/target/plugins/os/windows/regf/muicache.py,sha256=qoA7S8SiZakIreQqxc_QH1av6Lnlprf5SGr4s55b-8E,3707
 dissect/target/plugins/os/windows/regf/nethist.py,sha256=QHbG9fmZNmjSVhrgqMvMo12YBaQedzeToS7ZD9eIJ28,3111
-dissect/target/plugins/os/windows/regf/recentfilecache.py,sha256=3nLwg8_7bjSrFJXU9ddpWbWm0lZXcE61dnz-alQdmcI,1876
+dissect/target/plugins/os/windows/regf/recentfilecache.py,sha256=Wr6u7SajA9BtUiypztak9ASJZuimOtWfQUAlfvskjMg,1838
 dissect/target/plugins/os/windows/regf/regf.py,sha256=IbLnOurtlprXAo12iYRdw6fv5J45SuMAqt-mXVYaZi4,3357
 dissect/target/plugins/os/windows/regf/runkeys.py,sha256=qX-6xOrgBq7_B00C1BoQtI0Ovzou6Sx3XemV0Ra4JMs,4178
 dissect/target/plugins/os/windows/regf/shellbags.py,sha256=EKBWBjxvSfxc7WFKmICZs8QUJnjhsCKesjl_NHEnSUo,25621
-dissect/target/plugins/os/windows/regf/shimcache.py,sha256=dWI9zwRzpM-329znMDjtwH8b0CD2kUgmR0vmWnEwew0,10031
-dissect/target/plugins/os/windows/regf/trusteddocs.py,sha256=4g4m1FYljOpYqGG-7NGyj738Tfnz0uEaN2is2YzkMgg,3669
+dissect/target/plugins/os/windows/regf/shimcache.py,sha256=kgxs7NkP6uP0-RbpkQeBUGGIDPdqhZDx08oLhqsLlfQ,9993
+dissect/target/plugins/os/windows/regf/trusteddocs.py,sha256=V8S6YjRaP4edVd7ntuZ1ppBOfn-PADLeRjishvHahnc,3690
 dissect/target/plugins/os/windows/regf/usb.py,sha256=mfMQPKUct7fqpxJgquySrorPf5KWBzwWCLVKa9qSatc,7182
-dissect/target/plugins/os/windows/regf/userassist.py,sha256=h8xV-NcIopI-0Bpl-WbsuX7y2bWGJVaySWVQue2Muxc,5507
+dissect/target/plugins/os/windows/regf/userassist.py,sha256=kEthM9oDDBA6UbGxunbyTfXX320Z_2YlTMYoUQyxZyY,5469
 dissect/target/plugins/os/windows/task_helpers/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 dissect/target/plugins/os/windows/task_helpers/tasks_job.py,sha256=-dCkJnyEiWG9nCK378-GswM5EXelrA_g3zDHLhSQMu0,21199
 dissect/target/plugins/os/windows/task_helpers/tasks_records.py,sha256=vpCyKqLQSzI5ymD1h5P6RncLEE47YtmjDFwKA16dVZ4,4046
@@ -304,10 +304,10 @@ dissect/target/volumes/luks.py,sha256=v_mHW05KM5iG8JDe47i2V4Q9O0r4rnAMA9m_qc9cYw
 dissect/target/volumes/lvm.py,sha256=wwQVR9I3G9YzmY6UxFsH2Y4MXGBcKL9aayWGCDTiWMU,2269
 dissect/target/volumes/md.py,sha256=j1K1iKmspl0C_OJFc7-Q1BMWN2OCC5EVANIgVlJ_fIE,1673
 dissect/target/volumes/vmfs.py,sha256=-LoUbn9WNwTtLi_4K34uV_-wDw2W5hgaqxZNj4UmqAQ,1730
-dissect.target-3.14.dev20.dist-info/COPYRIGHT,sha256=m-9ih2RVhMiXHI2bf_oNSSgHgkeIvaYRVfKTwFbnJPA,301
-dissect.target-3.14.dev20.dist-info/LICENSE,sha256=DZak_2itbUtvHzD3E7GNUYSRK6jdOJ-GqncQ2weavLA,34523
-dissect.target-3.14.dev20.dist-info/METADATA,sha256=6q7oHrPbzb9yoSMX9C5dyJ6BrgGJa_8WsBdoHgbBS2Q,11042
-dissect.target-3.14.dev20.dist-info/WHEEL,sha256=oiQVh_5PnQM0E3gPdiz09WCNmwiHDMaGer_elqB3coM,92
-dissect.target-3.14.dev20.dist-info/entry_points.txt,sha256=tvFPa-Ap-gakjaPwRc6Fl6mxHzxEZ_arAVU-IUYeo_s,447
-dissect.target-3.14.dev20.dist-info/top_level.txt,sha256=Mn-CQzEYsAbkxrUI0TnplHuXnGVKzxpDw_po_sXpvv4,8
-dissect.target-3.14.dev20.dist-info/RECORD,,
+dissect.target-3.14.dev23.dist-info/COPYRIGHT,sha256=m-9ih2RVhMiXHI2bf_oNSSgHgkeIvaYRVfKTwFbnJPA,301
+dissect.target-3.14.dev23.dist-info/LICENSE,sha256=DZak_2itbUtvHzD3E7GNUYSRK6jdOJ-GqncQ2weavLA,34523
+dissect.target-3.14.dev23.dist-info/METADATA,sha256=_jE8mjqME4MpArxITqYU2uKM1cLqwwd0pmrOQKuBcps,11042
+dissect.target-3.14.dev23.dist-info/WHEEL,sha256=oiQVh_5PnQM0E3gPdiz09WCNmwiHDMaGer_elqB3coM,92
+dissect.target-3.14.dev23.dist-info/entry_points.txt,sha256=tvFPa-Ap-gakjaPwRc6Fl6mxHzxEZ_arAVU-IUYeo_s,447
+dissect.target-3.14.dev23.dist-info/top_level.txt,sha256=Mn-CQzEYsAbkxrUI0TnplHuXnGVKzxpDw_po_sXpvv4,8
+dissect.target-3.14.dev23.dist-info/RECORD,,