dissect.target 3.16.dev25__py3-none-any.whl → 3.16.dev27__py3-none-any.whl
Sign up to get free protection for your applications and to get access to all the features.
- dissect/target/plugins/os/unix/locate/plocate.py +2 -3
- dissect/target/plugins/os/windows/defender.py +2 -1
- {dissect.target-3.16.dev25.dist-info → dissect.target-3.16.dev27.dist-info}/METADATA +1 -1
- {dissect.target-3.16.dev25.dist-info → dissect.target-3.16.dev27.dist-info}/RECORD +9 -9
- {dissect.target-3.16.dev25.dist-info → dissect.target-3.16.dev27.dist-info}/COPYRIGHT +0 -0
- {dissect.target-3.16.dev25.dist-info → dissect.target-3.16.dev27.dist-info}/LICENSE +0 -0
- {dissect.target-3.16.dev25.dist-info → dissect.target-3.16.dev27.dist-info}/WHEEL +0 -0
- {dissect.target-3.16.dev25.dist-info → dissect.target-3.16.dev27.dist-info}/entry_points.txt +0 -0
- {dissect.target-3.16.dev25.dist-info → dissect.target-3.16.dev27.dist-info}/top_level.txt +0 -0
@@ -1,7 +1,6 @@
|
|
1
1
|
from __future__ import annotations
|
2
2
|
|
3
3
|
import platform
|
4
|
-
import sys
|
5
4
|
from io import BytesIO
|
6
5
|
from typing import BinaryIO, Iterable
|
7
6
|
|
@@ -114,12 +113,12 @@ class PLocateFile:
|
|
114
113
|
self.buf = RangeStream(self.fh, self.fh.tell(), self.compressed_length_bytes)
|
115
114
|
|
116
115
|
def __iter__(self) -> Iterable[PLocateFile]:
|
117
|
-
# NOTE: This is a workaround for a PyPy
|
116
|
+
# NOTE: This is a workaround for a PyPy bug
|
118
117
|
# We don't know what breaks, but PyPy + zstandard = unhappy times
|
119
118
|
# You just get random garbage data back instead of the decompressed data
|
120
119
|
# This weird dance of using a decompressobj and unused data is the only way that seems to work
|
121
120
|
# It's more expensive on memory, but at least it doesn't break
|
122
|
-
if platform.python_implementation() == "PyPy"
|
121
|
+
if platform.python_implementation() == "PyPy":
|
123
122
|
obj = self.ctx.decompressobj()
|
124
123
|
buf = self.buf.read()
|
125
124
|
|
@@ -12,6 +12,7 @@ from dissect.target.exceptions import UnsupportedPluginError
|
|
12
12
|
from dissect.target.helpers.record import TargetRecordDescriptor
|
13
13
|
|
14
14
|
DEFENDER_EVTX_FIELDS = [
|
15
|
+
("datetime", "ts"),
|
15
16
|
("uint32", "EventID"),
|
16
17
|
("string", "Provider_Name"),
|
17
18
|
("string", "Action_ID"),
|
@@ -78,7 +79,7 @@ DEFENDER_EXCLUSION_KEY = "HKLM\\SOFTWARE\\Microsoft\\Windows Defender\\Exclusion
|
|
78
79
|
|
79
80
|
DefenderLogRecord = TargetRecordDescriptor(
|
80
81
|
"filesystem/windows/defender/evtx",
|
81
|
-
|
82
|
+
DEFENDER_EVTX_FIELDS,
|
82
83
|
)
|
83
84
|
|
84
85
|
DefenderExclusionRecord = TargetRecordDescriptor(
|
@@ -1,6 +1,6 @@
|
|
1
1
|
Metadata-Version: 2.1
|
2
2
|
Name: dissect.target
|
3
|
-
Version: 3.16.
|
3
|
+
Version: 3.16.dev27
|
4
4
|
Summary: This module ties all other Dissect modules together, it provides a programming API and command line tools which allow easy access to various data sources inside disk images or file collections (a.k.a. targets)
|
5
5
|
Author-email: Dissect Team <dissect@fox-it.com>
|
6
6
|
License: Affero General Public License v3
|
@@ -235,7 +235,7 @@ dissect/target/plugins/os/unix/locate/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCe
|
|
235
235
|
dissect/target/plugins/os/unix/locate/gnulocate.py,sha256=P-YbMFw901p2EBgTaZH6axShfIRRDrCx3APBy6Ii3lE,2934
|
236
236
|
dissect/target/plugins/os/unix/locate/locate.py,sha256=uXFcWAqoz_3eNWHhsGoEtkkhmT5J3F1GYvr4uQxi308,122
|
237
237
|
dissect/target/plugins/os/unix/locate/mlocate.py,sha256=DhrFgxDQF-fMZaA0WK8Z-5o9i9iDsuTHW7MHJtWwz6o,4485
|
238
|
-
dissect/target/plugins/os/unix/locate/plocate.py,sha256=
|
238
|
+
dissect/target/plugins/os/unix/locate/plocate.py,sha256=Skb24ba_MVzM4nuDaZHw-ZmomIEZ3TJ7g5kHCvQViko,6545
|
239
239
|
dissect/target/plugins/os/unix/log/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
240
240
|
dissect/target/plugins/os/unix/log/atop.py,sha256=UmaqdnSmE8AO8bEj4drGSc1HH2n4Pdlxpwfa7RgraIY,16314
|
241
241
|
dissect/target/plugins/os/unix/log/audit.py,sha256=OjorWTmCFvCI5RJq6m6WNW0Lhb-poB2VAggKOGZUHK4,3722
|
@@ -253,7 +253,7 @@ dissect/target/plugins/os/windows/catroot.py,sha256=yphQ_98Qvi1kKifGj7RH8j20f1l7
|
|
253
253
|
dissect/target/plugins/os/windows/cim.py,sha256=jsrpu6TZpBUh7VWI9AV2Ib5bebTwsvqOwRfa5gjJd7c,3056
|
254
254
|
dissect/target/plugins/os/windows/clfs.py,sha256=begVsZ-CY97Ksh6S1g03LjyBgu8ERY2hfNDWYPj0GXI,4872
|
255
255
|
dissect/target/plugins/os/windows/datetime.py,sha256=tuBOkewmbCW8sFXcYp5p82oM5RCsVwmtC79BDCTLz8k,9472
|
256
|
-
dissect/target/plugins/os/windows/defender.py,sha256=
|
256
|
+
dissect/target/plugins/os/windows/defender.py,sha256=Vp_IP6YKm4igR765WvXJrHQ3RMu7FJKM3VOoR8AybV8,23737
|
257
257
|
dissect/target/plugins/os/windows/env.py,sha256=-u9F9xWy6PUbQmu5Tv_MDoVmy6YB-7CbHokIK_T3S44,13891
|
258
258
|
dissect/target/plugins/os/windows/generic.py,sha256=BSvDPfB9faU0uquMj0guw5tnR_97Nn0XAEE4k05BFSQ,22273
|
259
259
|
dissect/target/plugins/os/windows/lnk.py,sha256=6_ciURYTa-LpgpHJsixoFUqkfSATHkEbk0xKiIZDGPU,8148
|
@@ -331,10 +331,10 @@ dissect/target/volumes/luks.py,sha256=OmCMsw6rCUXG1_plnLVLTpsvE1n_6WtoRUGQbpmu1z
|
|
331
331
|
dissect/target/volumes/lvm.py,sha256=wwQVR9I3G9YzmY6UxFsH2Y4MXGBcKL9aayWGCDTiWMU,2269
|
332
332
|
dissect/target/volumes/md.py,sha256=j1K1iKmspl0C_OJFc7-Q1BMWN2OCC5EVANIgVlJ_fIE,1673
|
333
333
|
dissect/target/volumes/vmfs.py,sha256=-LoUbn9WNwTtLi_4K34uV_-wDw2W5hgaqxZNj4UmqAQ,1730
|
334
|
-
dissect.target-3.16.
|
335
|
-
dissect.target-3.16.
|
336
|
-
dissect.target-3.16.
|
337
|
-
dissect.target-3.16.
|
338
|
-
dissect.target-3.16.
|
339
|
-
dissect.target-3.16.
|
340
|
-
dissect.target-3.16.
|
334
|
+
dissect.target-3.16.dev27.dist-info/COPYRIGHT,sha256=m-9ih2RVhMiXHI2bf_oNSSgHgkeIvaYRVfKTwFbnJPA,301
|
335
|
+
dissect.target-3.16.dev27.dist-info/LICENSE,sha256=DZak_2itbUtvHzD3E7GNUYSRK6jdOJ-GqncQ2weavLA,34523
|
336
|
+
dissect.target-3.16.dev27.dist-info/METADATA,sha256=9o6lqHzelv3DC665DCMS612hppizMIpX3p2cq0QYX8Q,11113
|
337
|
+
dissect.target-3.16.dev27.dist-info/WHEEL,sha256=oiQVh_5PnQM0E3gPdiz09WCNmwiHDMaGer_elqB3coM,92
|
338
|
+
dissect.target-3.16.dev27.dist-info/entry_points.txt,sha256=tvFPa-Ap-gakjaPwRc6Fl6mxHzxEZ_arAVU-IUYeo_s,447
|
339
|
+
dissect.target-3.16.dev27.dist-info/top_level.txt,sha256=Mn-CQzEYsAbkxrUI0TnplHuXnGVKzxpDw_po_sXpvv4,8
|
340
|
+
dissect.target-3.16.dev27.dist-info/RECORD,,
|
File without changes
|
File without changes
|
File without changes
|
{dissect.target-3.16.dev25.dist-info → dissect.target-3.16.dev27.dist-info}/entry_points.txt
RENAMED
File without changes
|
File without changes
|