dissect.target 3.17.dev3__tar.gz → 3.17.dev5__tar.gz

Sign up to get free protection for your applications and to get access to all the features.
Files changed (578) hide show
  1. {dissect.target-3.17.dev3/dissect.target.egg-info → dissect.target-3.17.dev5}/PKG-INFO +4 -1
  2. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loader.py +1 -0
  3. dissect.target-3.17.dev5/dissect/target/loaders/mqtt.py +295 -0
  4. dissect.target-3.17.dev5/dissect/target/plugins/apps/vpn/openvpn.py +215 -0
  5. dissect.target-3.17.dev5/dissect/target/plugins/child/mqtt.py +35 -0
  6. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/shell.py +10 -2
  7. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5/dissect.target.egg-info}/PKG-INFO +4 -1
  8. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect.target.egg-info/SOURCES.txt +3 -0
  9. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect.target.egg-info/requires.txt +4 -0
  10. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/pyproject.toml +5 -0
  11. dissect.target-3.17.dev5/tests/loaders/test_mqtt.py +81 -0
  12. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/vpn/test_openvpn.py +34 -6
  13. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tox.ini +3 -1
  14. dissect.target-3.17.dev3/dissect/target/plugins/apps/vpn/openvpn.py +0 -193
  15. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/COPYRIGHT +0 -0
  16. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/LICENSE +0 -0
  17. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/MANIFEST.in +0 -0
  18. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/README.md +0 -0
  19. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/__init__.py +0 -0
  20. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/container.py +0 -0
  21. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/containers/__init__.py +0 -0
  22. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/containers/asdf.py +0 -0
  23. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/containers/ewf.py +0 -0
  24. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/containers/hdd.py +0 -0
  25. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/containers/hds.py +0 -0
  26. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/containers/qcow2.py +0 -0
  27. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/containers/raw.py +0 -0
  28. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/containers/split.py +0 -0
  29. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/containers/vdi.py +0 -0
  30. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/containers/vhd.py +0 -0
  31. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/containers/vhdx.py +0 -0
  32. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/containers/vmdk.py +0 -0
  33. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/data/autocompletion/target_bash_completion.sh +0 -0
  34. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/exceptions.py +0 -0
  35. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystem.py +0 -0
  36. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/__init__.py +0 -0
  37. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/ad1.py +0 -0
  38. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/btrfs.py +0 -0
  39. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/cb.py +0 -0
  40. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/config.py +0 -0
  41. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/cpio.py +0 -0
  42. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/dir.py +0 -0
  43. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/exfat.py +0 -0
  44. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/extfs.py +0 -0
  45. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/fat.py +0 -0
  46. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/ffs.py +0 -0
  47. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/itunes.py +0 -0
  48. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/jffs.py +0 -0
  49. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/ntfs.py +0 -0
  50. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/smb.py +0 -0
  51. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/squashfs.py +0 -0
  52. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/tar.py +0 -0
  53. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/vmfs.py +0 -0
  54. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/vmtar.py +0 -0
  55. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/xfs.py +0 -0
  56. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/zip.py +0 -0
  57. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/__init__.py +0 -0
  58. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/cache.py +0 -0
  59. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/compat/__init__.py +0 -0
  60. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/compat/path_310.py +0 -0
  61. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/compat/path_311.py +0 -0
  62. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/compat/path_312.py +0 -0
  63. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/compat/path_39.py +0 -0
  64. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/compat/path_common.py +0 -0
  65. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/config.py +0 -0
  66. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/configutil.py +0 -0
  67. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/cyber.py +0 -0
  68. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/data/windowsZones.xml +0 -0
  69. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/descriptor_extensions.py +0 -0
  70. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/docs.py +0 -0
  71. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/fsutil.py +0 -0
  72. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/hashutil.py +0 -0
  73. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/keychain.py +0 -0
  74. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/lazy.py +0 -0
  75. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/loaderutil.py +0 -0
  76. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/localeutil.py +0 -0
  77. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/mount.py +0 -0
  78. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/mui.py +0 -0
  79. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/network_managers.py +0 -0
  80. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/polypath.py +0 -0
  81. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/protobuf.py +0 -0
  82. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/record.py +0 -0
  83. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/record_modifier.py +0 -0
  84. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/regutil.py +0 -0
  85. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/shell_folder_ids.py +0 -0
  86. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/ssh.py +0 -0
  87. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/targetd.py +0 -0
  88. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/utils.py +0 -0
  89. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/__init__.py +0 -0
  90. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/ad1.py +0 -0
  91. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/asdf.py +0 -0
  92. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/cb.py +0 -0
  93. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/cyber.py +0 -0
  94. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/dir.py +0 -0
  95. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/hyperv.py +0 -0
  96. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/itunes.py +0 -0
  97. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/kape.py +0 -0
  98. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/local.py +0 -0
  99. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/log.py +0 -0
  100. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/multiraw.py +0 -0
  101. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/ova.py +0 -0
  102. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/ovf.py +0 -0
  103. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/phobos.py +0 -0
  104. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/profile.py +0 -0
  105. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/pvm.py +0 -0
  106. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/pvs.py +0 -0
  107. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/raw.py +0 -0
  108. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/remote.py +0 -0
  109. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/res.py +0 -0
  110. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/smb.py +0 -0
  111. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/tanium.py +0 -0
  112. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/tar.py +0 -0
  113. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/target.py +0 -0
  114. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/targetd.py +0 -0
  115. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/utm.py +0 -0
  116. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/vb.py +0 -0
  117. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/vbox.py +0 -0
  118. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/velociraptor.py +0 -0
  119. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/vma.py +0 -0
  120. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/vmwarevm.py +0 -0
  121. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/vmx.py +0 -0
  122. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/xva.py +0 -0
  123. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugin.py +0 -0
  124. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/__init__.py +0 -0
  125. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/__init__.py +0 -0
  126. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/av/__init__.py +0 -0
  127. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/av/mcafee.py +0 -0
  128. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/av/sophos.py +0 -0
  129. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/av/symantec.py +0 -0
  130. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/av/trendmicro.py +0 -0
  131. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/browser/__init__.py +0 -0
  132. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/browser/brave.py +0 -0
  133. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/browser/browser.py +0 -0
  134. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/browser/chrome.py +0 -0
  135. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/browser/chromium.py +0 -0
  136. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/browser/edge.py +0 -0
  137. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/browser/firefox.py +0 -0
  138. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/browser/iexplore.py +0 -0
  139. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/container/__init__.py +0 -0
  140. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/container/docker.py +0 -0
  141. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/remoteaccess/__init__.py +0 -0
  142. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/remoteaccess/anydesk.py +0 -0
  143. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/remoteaccess/remoteaccess.py +0 -0
  144. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/remoteaccess/teamviewer.py +0 -0
  145. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/shell/__init__.py +0 -0
  146. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/shell/powershell.py +0 -0
  147. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/ssh/__init__.py +0 -0
  148. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/ssh/openssh.py +0 -0
  149. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/ssh/opensshd.py +0 -0
  150. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/ssh/putty.py +0 -0
  151. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/ssh/ssh.py +0 -0
  152. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/vpn/__init__.py +0 -0
  153. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/vpn/wireguard.py +0 -0
  154. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/webhosting/__init__.py +0 -0
  155. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/webhosting/cpanel.py +0 -0
  156. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/webserver/__init__.py +0 -0
  157. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/webserver/apache.py +0 -0
  158. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/webserver/caddy.py +0 -0
  159. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/webserver/citrix.py +0 -0
  160. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/webserver/iis.py +0 -0
  161. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/webserver/nginx.py +0 -0
  162. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/webserver/webserver.py +0 -0
  163. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/child/__init__.py +0 -0
  164. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/child/esxi.py +0 -0
  165. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/child/hyperv.py +0 -0
  166. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/child/virtuozzo.py +0 -0
  167. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/child/vmware_workstation.py +0 -0
  168. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/child/wsl.py +0 -0
  169. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/__init__.py +0 -0
  170. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/acquire_handles.py +0 -0
  171. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/acquire_hash.py +0 -0
  172. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/icat.py +0 -0
  173. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/ntfs/__init__.py +0 -0
  174. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/ntfs/mft.py +0 -0
  175. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/ntfs/mft_timeline.py +0 -0
  176. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/ntfs/usnjrnl.py +0 -0
  177. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/ntfs/utils.py +0 -0
  178. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/resolver.py +0 -0
  179. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/unix/__init__.py +0 -0
  180. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/unix/capability.py +0 -0
  181. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/unix/suid.py +0 -0
  182. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/walkfs.py +0 -0
  183. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/yara.py +0 -0
  184. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/general/__init__.py +0 -0
  185. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/general/config.py +0 -0
  186. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/general/default.py +0 -0
  187. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/general/example.py +0 -0
  188. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/general/loaders.py +0 -0
  189. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/general/osinfo.py +0 -0
  190. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/general/plugins.py +0 -0
  191. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/general/scrape.py +0 -0
  192. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/general/users.py +0 -0
  193. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/__init__.py +0 -0
  194. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/__init__.py +0 -0
  195. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/_os.py +0 -0
  196. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/__init__.py +0 -0
  197. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/_os.py +0 -0
  198. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/citrix/__init__.py +0 -0
  199. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/citrix/_os.py +0 -0
  200. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/citrix/history.py +0 -0
  201. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/freebsd/__init__.py +0 -0
  202. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/freebsd/_os.py +0 -0
  203. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/ios/__init__.py +0 -0
  204. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/ios/_os.py +0 -0
  205. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/openbsd/__init__.py +0 -0
  206. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/openbsd/_os.py +0 -0
  207. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/osx/__init__.py +0 -0
  208. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/osx/_os.py +0 -0
  209. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/osx/user.py +0 -0
  210. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/cronjobs.py +0 -0
  211. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/datetime.py +0 -0
  212. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/esxi/__init__.py +0 -0
  213. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/esxi/_os.py +0 -0
  214. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/etc.py +0 -0
  215. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/generic.py +0 -0
  216. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/history.py +0 -0
  217. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/__init__.py +0 -0
  218. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/_os.py +0 -0
  219. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/android/__init__.py +0 -0
  220. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/android/_os.py +0 -0
  221. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/cmdline.py +0 -0
  222. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/debian/__init__.py +0 -0
  223. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/debian/_os.py +0 -0
  224. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/debian/apt.py +0 -0
  225. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/debian/dpkg.py +0 -0
  226. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/debian/vyos/__init__.py +0 -0
  227. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/debian/vyos/_os.py +0 -0
  228. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/environ.py +0 -0
  229. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/fortios/__init__.py +0 -0
  230. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/fortios/_keys.py +0 -0
  231. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/fortios/_os.py +0 -0
  232. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/fortios/generic.py +0 -0
  233. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/fortios/locale.py +0 -0
  234. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/iptables.py +0 -0
  235. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/modules.py +0 -0
  236. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/netstat.py +0 -0
  237. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/proc.py +0 -0
  238. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/processes.py +0 -0
  239. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/redhat/__init__.py +0 -0
  240. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/redhat/_os.py +0 -0
  241. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/redhat/yum.py +0 -0
  242. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/services.py +0 -0
  243. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/sockets.py +0 -0
  244. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/suse/__init__.py +0 -0
  245. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/suse/_os.py +0 -0
  246. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/suse/zypper.py +0 -0
  247. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/locale.py +0 -0
  248. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/locate/__init__.py +0 -0
  249. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/locate/gnulocate.py +0 -0
  250. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/locate/locate.py +0 -0
  251. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/locate/mlocate.py +0 -0
  252. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/locate/plocate.py +0 -0
  253. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/log/__init__.py +0 -0
  254. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/log/atop.py +0 -0
  255. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/log/audit.py +0 -0
  256. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/log/auth.py +0 -0
  257. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/log/journal.py +0 -0
  258. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/log/lastlog.py +0 -0
  259. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/log/messages.py +0 -0
  260. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/log/utmp.py +0 -0
  261. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/packagemanager.py +0 -0
  262. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/shadow.py +0 -0
  263. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/__init__.py +0 -0
  264. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/_os.py +0 -0
  265. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/activitiescache.py +0 -0
  266. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/adpolicy.py +0 -0
  267. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/amcache.py +0 -0
  268. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/catroot.py +0 -0
  269. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/cim.py +0 -0
  270. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/clfs.py +0 -0
  271. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/datetime.py +0 -0
  272. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/defender.py +0 -0
  273. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/dpapi/__init__.py +0 -0
  274. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/dpapi/blob.py +0 -0
  275. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/dpapi/crypto.py +0 -0
  276. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/dpapi/dpapi.py +0 -0
  277. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/dpapi/master_key.py +0 -0
  278. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/env.py +0 -0
  279. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/exchange/__init__.py +0 -0
  280. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/exchange/exchange.py +0 -0
  281. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/generic.py +0 -0
  282. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/lnk.py +0 -0
  283. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/locale.py +0 -0
  284. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/log/__init__.py +0 -0
  285. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/log/amcache.py +0 -0
  286. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/log/etl.py +0 -0
  287. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/log/evt.py +0 -0
  288. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/log/evtx.py +0 -0
  289. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/log/pfro.py +0 -0
  290. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/log/schedlgu.py +0 -0
  291. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/notifications.py +0 -0
  292. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/prefetch.py +0 -0
  293. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/recyclebin.py +0 -0
  294. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/7zip.py +0 -0
  295. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/__init__.py +0 -0
  296. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/appxdebugkeys.py +0 -0
  297. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/auditpol.py +0 -0
  298. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/bam.py +0 -0
  299. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/cit.py +0 -0
  300. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/clsid.py +0 -0
  301. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/firewall.py +0 -0
  302. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/mru.py +0 -0
  303. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/muicache.py +0 -0
  304. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/nethist.py +0 -0
  305. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/recentfilecache.py +0 -0
  306. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/regf.py +0 -0
  307. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/runkeys.py +0 -0
  308. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/shellbags.py +0 -0
  309. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/shimcache.py +0 -0
  310. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/trusteddocs.py +0 -0
  311. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/usb.py +0 -0
  312. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/userassist.py +0 -0
  313. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/registry.py +0 -0
  314. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/sam.py +0 -0
  315. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/services.py +0 -0
  316. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/sru.py +0 -0
  317. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/startupinfo.py +0 -0
  318. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/syscache.py +0 -0
  319. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/task_helpers/__init__.py +0 -0
  320. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/task_helpers/tasks_job.py +0 -0
  321. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/task_helpers/tasks_records.py +0 -0
  322. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/task_helpers/tasks_xml.py +0 -0
  323. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/tasks.py +0 -0
  324. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/thumbcache.py +0 -0
  325. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/ual.py +0 -0
  326. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/wer.py +0 -0
  327. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/report.py +0 -0
  328. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/target.py +0 -0
  329. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/__init__.py +0 -0
  330. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/build_pluginlist.py +0 -0
  331. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/dd.py +0 -0
  332. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/dump/__init__.py +0 -0
  333. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/dump/run.py +0 -0
  334. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/dump/state.py +0 -0
  335. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/dump/utils.py +0 -0
  336. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/fs.py +0 -0
  337. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/info.py +0 -0
  338. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/logging.py +0 -0
  339. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/mount.py +0 -0
  340. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/query.py +0 -0
  341. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/reg.py +0 -0
  342. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/utils.py +0 -0
  343. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/volume.py +0 -0
  344. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/volumes/__init__.py +0 -0
  345. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/volumes/bde.py +0 -0
  346. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/volumes/ddf.py +0 -0
  347. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/volumes/disk.py +0 -0
  348. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/volumes/luks.py +0 -0
  349. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/volumes/lvm.py +0 -0
  350. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/volumes/md.py +0 -0
  351. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/volumes/vmfs.py +0 -0
  352. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect.target.egg-info/dependency_links.txt +0 -0
  353. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect.target.egg-info/entry_points.txt +0 -0
  354. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect.target.egg-info/top_level.txt +0 -0
  355. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/setup.cfg +0 -0
  356. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/__init__.py +0 -0
  357. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/_docs/Makefile +0 -0
  358. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/_docs/conf.py +0 -0
  359. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/_docs/index.rst +0 -0
  360. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/_utils.py +0 -0
  361. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/conftest.py +0 -0
  362. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/containers/__init__.py +0 -0
  363. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/containers/test_split.py +0 -0
  364. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/filesystems/__init__.py +0 -0
  365. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/filesystems/test_cb.py +0 -0
  366. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/filesystems/test_config.py +0 -0
  367. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/filesystems/test_cpio.py +0 -0
  368. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/filesystems/test_dir.py +0 -0
  369. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/filesystems/test_exfat.py +0 -0
  370. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/filesystems/test_fat.py +0 -0
  371. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/filesystems/test_ntfs.py +0 -0
  372. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/filesystems/test_smb.py +0 -0
  373. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/filesystems/test_tar.py +0 -0
  374. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/filesystems/test_vmtar.py +0 -0
  375. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/filesystems/test_zip.py +0 -0
  376. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/__init__.py +0 -0
  377. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_cache.py +0 -0
  378. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_config.py +0 -0
  379. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_configutil.py +0 -0
  380. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_docs.py +0 -0
  381. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_fsutil.py +0 -0
  382. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_hashutil.py +0 -0
  383. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_keychain.py +0 -0
  384. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_loaderutil.py +0 -0
  385. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_localeutil.py +0 -0
  386. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_modifier.py +0 -0
  387. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_protobuf.py +0 -0
  388. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_record.py +0 -0
  389. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_regutil.py +0 -0
  390. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_utils.py +0 -0
  391. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/__init__.py +0 -0
  392. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_asdf.py +0 -0
  393. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_cb.py +0 -0
  394. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_dir.py +0 -0
  395. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_hyperv.py +0 -0
  396. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_kape.py +0 -0
  397. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_local.py +0 -0
  398. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_log.py +0 -0
  399. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_multiraw.py +0 -0
  400. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_ova.py +0 -0
  401. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_ovf.py +0 -0
  402. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_phobos.py +0 -0
  403. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_pvm.py +0 -0
  404. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_pvs.py +0 -0
  405. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_remote.py +0 -0
  406. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_smb.py +0 -0
  407. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_tanium.py +0 -0
  408. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_tar.py +0 -0
  409. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_utm.py +0 -0
  410. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_vbox.py +0 -0
  411. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_velociraptor.py +0 -0
  412. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_vmwarevm.py +0 -0
  413. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/__init__.py +0 -0
  414. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/__init__.py +0 -0
  415. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/av/__init__.py +0 -0
  416. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/av/test_mcafee.py +0 -0
  417. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/av/test_sophos.py +0 -0
  418. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/av/test_symantec.py +0 -0
  419. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/av/test_trendmicro.py +0 -0
  420. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/browser/__init__.py +0 -0
  421. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/browser/test_brave.py +0 -0
  422. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/browser/test_chrome.py +0 -0
  423. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/browser/test_chromium.py +0 -0
  424. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/browser/test_edge.py +0 -0
  425. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/browser/test_firefox.py +0 -0
  426. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/browser/test_iexplore.py +0 -0
  427. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/container/__init__.py +0 -0
  428. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/container/test_docker.py +0 -0
  429. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/remoteaccess/__init__.py +0 -0
  430. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/remoteaccess/test_anydesk.py +0 -0
  431. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/remoteaccess/test_teamviewer.py +0 -0
  432. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/shell/__init__.py +0 -0
  433. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/shell/test_powershell.py +0 -0
  434. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/ssh/__init__.py +0 -0
  435. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/ssh/test_openssh.py +0 -0
  436. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/ssh/test_opensshd.py +0 -0
  437. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/ssh/test_putty.py +0 -0
  438. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/vpn/__init__.py +0 -0
  439. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/vpn/test_wireguard.py +0 -0
  440. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/webhosting/__init__.py +0 -0
  441. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/webhosting/test_cpanel.py +0 -0
  442. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/webserver/__init__.py +0 -0
  443. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/webserver/test_apache.py +0 -0
  444. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/webserver/test_caddy.py +0 -0
  445. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/webserver/test_citrix.py +0 -0
  446. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/webserver/test_iis.py +0 -0
  447. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/webserver/test_nginx.py +0 -0
  448. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/webserver/test_webserver.py +0 -0
  449. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/child/__init__.py +0 -0
  450. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/child/test_hyperv.py +0 -0
  451. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/child/test_virtuozzo.py +0 -0
  452. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/child/test_wsl.py +0 -0
  453. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/filesystem/__init__.py +0 -0
  454. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/filesystem/ntfs/__init__.py +0 -0
  455. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/filesystem/ntfs/test_mft.py +0 -0
  456. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/filesystem/ntfs/test_usnjrnl.py +0 -0
  457. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/filesystem/test_acquire_handles.py +0 -0
  458. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/filesystem/test_acquire_hash.py +0 -0
  459. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/filesystem/test_icat.py +0 -0
  460. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/filesystem/test_resolver.py +0 -0
  461. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/filesystem/test_walkfs.py +0 -0
  462. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/filesystem/test_yara.py +0 -0
  463. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/filesystem/unix/__init__.py +0 -0
  464. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/filesystem/unix/test_capability.py +0 -0
  465. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/filesystem/unix/test_suid.py +0 -0
  466. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/general/__init__.py +0 -0
  467. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/general/test_config.py +0 -0
  468. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/general/test_default.py +0 -0
  469. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/general/test_plugins.py +0 -0
  470. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/general/test_scrape.py +0 -0
  471. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/general/test_users.py +0 -0
  472. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/__init__.py +0 -0
  473. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/__init__.py +0 -0
  474. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/bsd/__init__.py +0 -0
  475. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/bsd/citrix/__init__.py +0 -0
  476. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/bsd/citrix/test__os.py +0 -0
  477. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/bsd/citrix/test_history.py +0 -0
  478. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/bsd/osx/__init__.py +0 -0
  479. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/bsd/osx/test__os.py +0 -0
  480. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/bsd/osx/test_user.py +0 -0
  481. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/esxi/__init__.py +0 -0
  482. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/esxi/test__os.py +0 -0
  483. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/__init__.py +0 -0
  484. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/android/__init__.py +0 -0
  485. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/android/test__os.py +0 -0
  486. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/debian/__init__.py +0 -0
  487. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/debian/test_apt.py +0 -0
  488. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/debian/test_dpkg.py +0 -0
  489. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/fortios/test_keys.py +0 -0
  490. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/redhat/__init__.py +0 -0
  491. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/redhat/test_yum.py +0 -0
  492. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/suse/__init__.py +0 -0
  493. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/suse/test_zypper.py +0 -0
  494. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/test_cmdline.py +0 -0
  495. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/test_environ.py +0 -0
  496. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/test_iptables.py +0 -0
  497. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/test_modules.py +0 -0
  498. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/test_netstat.py +0 -0
  499. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/test_proc.py +0 -0
  500. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/test_processes.py +0 -0
  501. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/test_services.py +0 -0
  502. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/test_sockets.py +0 -0
  503. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/locate/__init__.py +0 -0
  504. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/locate/test_gnulocate.py +0 -0
  505. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/locate/test_mlocate.py +0 -0
  506. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/locate/test_plocate.py +0 -0
  507. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/log/__init__.py +0 -0
  508. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/log/test_atop.py +0 -0
  509. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/log/test_audit.py +0 -0
  510. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/log/test_auth.py +0 -0
  511. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/log/test_lastlog.py +0 -0
  512. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/log/test_messages.py +0 -0
  513. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/log/test_utmp.py +0 -0
  514. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/test__os.py +0 -0
  515. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/test_generic.py +0 -0
  516. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/test_history.py +0 -0
  517. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/test_ips.py +0 -0
  518. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/test_journal.py +0 -0
  519. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/test_locale.py +0 -0
  520. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/test_packagemanager.py +0 -0
  521. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/test_shadow.py +0 -0
  522. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/test_users.py +0 -0
  523. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/test_version.py +0 -0
  524. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/__init__.py +0 -0
  525. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/log/test_etl.py +0 -0
  526. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/log/test_evt.py +0 -0
  527. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/log/test_evtx.py +0 -0
  528. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/log/test_schedlgu.py +0 -0
  529. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/regf/__init__.py +0 -0
  530. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/regf/test_appxdebugkeys.py +0 -0
  531. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/regf/test_cit.py +0 -0
  532. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/regf/test_clsid.py +0 -0
  533. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/regf/test_muicache.py +0 -0
  534. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/regf/test_trusteddocs.py +0 -0
  535. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/regf/test_userassist.py +0 -0
  536. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test__os.py +0 -0
  537. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_adpolicy.py +0 -0
  538. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_amcache.py +0 -0
  539. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_catroot.py +0 -0
  540. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_clfs.py +0 -0
  541. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_datetime.py +0 -0
  542. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_defender.py +0 -0
  543. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_dpapi.py +0 -0
  544. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_env.py +0 -0
  545. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_generic.py +0 -0
  546. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_lnk.py +0 -0
  547. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_locale.py +0 -0
  548. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_mru.py +0 -0
  549. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_notifications.py +0 -0
  550. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_prefetch.py +0 -0
  551. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_recyclebin.py +0 -0
  552. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_registry.py +0 -0
  553. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_sam.py +0 -0
  554. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_shimcache.py +0 -0
  555. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_sru.py +0 -0
  556. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_syscache.py +0 -0
  557. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_tasks.py +0 -0
  558. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_thumbcache.py +0 -0
  559. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_ual.py +0 -0
  560. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_wer.py +0 -0
  561. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/test_container.py +0 -0
  562. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/test_filesystem.py +0 -0
  563. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/test_plugin.py +0 -0
  564. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/test_registration.py +0 -0
  565. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/test_report.py +0 -0
  566. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/test_target.py +0 -0
  567. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/test_volume.py +0 -0
  568. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/tools/__init__.py +0 -0
  569. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/tools/test_dump.py +0 -0
  570. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/tools/test_fs.py +0 -0
  571. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/tools/test_mount.py +0 -0
  572. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/tools/test_query.py +0 -0
  573. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/tools/test_reg.py +0 -0
  574. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/tools/test_shell.py +0 -0
  575. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/tools/test_utils.py +0 -0
  576. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/volumes/__init__.py +0 -0
  577. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/volumes/test_bde.py +0 -0
  578. {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/volumes/test_md.py +0 -0
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.1
2
2
  Name: dissect.target
3
- Version: 3.17.dev3
3
+ Version: 3.17.dev5
4
4
  Summary: This module ties all other Dissect modules together, it provides a programming API and command line tools which allow easy access to various data sources inside disk images or file collections (a.k.a. targets)
5
5
  Author-email: Dissect Team <dissect@fox-it.com>
6
6
  License: Affero General Public License v3
@@ -64,6 +64,9 @@ Requires-Dist: impacket==0.10.0; extra == "smb"
64
64
  Provides-Extra: cb
65
65
  Requires-Dist: dissect.target[full]; extra == "cb"
66
66
  Requires-Dist: carbon-black-cloud-sdk~=1.4.3; extra == "cb"
67
+ Provides-Extra: mqtt
68
+ Requires-Dist: dissect.target[full]; extra == "mqtt"
69
+ Requires-Dist: paho-mqtt==1.6.1; extra == "mqtt"
67
70
 
68
71
  # dissect.target
69
72
 
@@ -176,6 +176,7 @@ def open(item: Union[str, Path], *args, **kwargs) -> Loader:
176
176
 
177
177
  register("local", "LocalLoader")
178
178
  register("remote", "RemoteLoader")
179
+ register("mqtt", "MQTTLoader")
179
180
  register("targetd", "TargetdLoader")
180
181
  register("asdf", "AsdfLoader")
181
182
  register("tar", "TarLoader")
@@ -0,0 +1,295 @@
1
+ from __future__ import annotations
2
+
3
+ import logging
4
+ import ssl
5
+ import time
6
+ import urllib
7
+ from dataclasses import dataclass
8
+ from functools import lru_cache
9
+ from io import BytesIO
10
+ from pathlib import Path
11
+ from struct import pack, unpack_from
12
+ from typing import Any, Callable, Optional, Union
13
+
14
+ import paho.mqtt.client as mqtt
15
+ from dissect.util.stream import AlignedStream
16
+
17
+ from dissect.target.containers.raw import RawContainer
18
+ from dissect.target.exceptions import LoaderError
19
+ from dissect.target.filesystem import VirtualFilesystem
20
+ from dissect.target.loader import Loader
21
+ from dissect.target.plugin import arg
22
+ from dissect.target.target import Target
23
+
24
+ log = logging.getLogger(__name__)
25
+
26
+ DISK_INDEX_OFFSET = 9
27
+
28
+
29
+ def suppress(func: Callable) -> Callable:
30
+ def suppressed(*args, **kwargs):
31
+ try:
32
+ return func(*args, **kwargs)
33
+ except Exception:
34
+ return
35
+
36
+ return suppressed
37
+
38
+
39
+ @dataclass
40
+ class InfoMessage:
41
+ disks: list[DiskMessage]
42
+
43
+
44
+ @dataclass
45
+ class DiskMessage:
46
+ index: int = 0
47
+ sector_size: int = 0
48
+ total_size: int = 0
49
+
50
+
51
+ @dataclass
52
+ class SeekMessage:
53
+ data: bytes = b""
54
+
55
+
56
+ class MQTTStream(AlignedStream):
57
+ def __init__(self, stream: MQTTConnection, disk_id: int, size: Optional[int] = None):
58
+ self.stream = stream
59
+ self.disk_id = disk_id
60
+ super().__init__(size)
61
+
62
+ def _read(self, offset: int, length: int, optimization_strategy: int = 0) -> bytes:
63
+ data = self.stream.read(self.disk_id, offset, length, optimization_strategy)
64
+ return data
65
+
66
+
67
+ class MQTTConnection:
68
+ broker = None
69
+ host = None
70
+
71
+ def __init__(self, broker: Broker, host: str):
72
+ self.broker = broker
73
+ self.host = str(host)
74
+ self.info = lru_cache(128)(self.info)
75
+ self.read = lru_cache(128)(self.read)
76
+
77
+ def topo(self, peers: int):
78
+ self.broker.topology(self.host)
79
+
80
+ while len(self.broker.peers(self.host)) < peers:
81
+ self.broker.topology(self.host)
82
+ time.sleep(1)
83
+ return self.broker.peers(self.host)
84
+
85
+ def info(self) -> list[MQTTStream]:
86
+ disks = []
87
+ self.broker.info(self.host)
88
+
89
+ message = None
90
+ while message is None:
91
+ message = self.broker.disk(self.host)
92
+
93
+ for idx, disk in enumerate(message.disks):
94
+ disks.append(MQTTStream(self, idx, disk.total_size))
95
+
96
+ return disks
97
+
98
+ def read(self, disk_id: int, offset: int, length: int, optimization_strategy: int) -> bytes:
99
+ message = None
100
+ self.broker.seek(self.host, disk_id, offset, length, optimization_strategy)
101
+
102
+ attempts = 0
103
+ while True:
104
+ message = self.broker.read(self.host, disk_id, offset, length)
105
+ # don't waste time with sleep if we have a response
106
+ if message:
107
+ break
108
+
109
+ attempts += 1
110
+ time.sleep(0.01)
111
+ if attempts > 100:
112
+ # message might have not reached agent, resend...
113
+ self.broker.seek(self.host, disk_id, offset, length, optimization_strategy)
114
+ attempts = 0
115
+
116
+ return message.data
117
+
118
+
119
+ class Broker:
120
+ broker_host = None
121
+ broker_port = None
122
+ private_key_file = None
123
+ certificate_file = None
124
+ cacert_file = None
125
+ mqtt_client = None
126
+ connected = False
127
+ case = None
128
+
129
+ diskinfo = {}
130
+ index = {}
131
+ topo = {}
132
+
133
+ def __init__(self, broker: Broker, port: str, key: str, crt: str, ca: str, case: str, **kwargs):
134
+ self.broker_host = broker
135
+ self.broker_port = int(port)
136
+ self.private_key_file = key
137
+ self.certificate_file = crt
138
+ self.cacert_file = ca
139
+ self.case = case
140
+
141
+ @suppress
142
+ def read(self, host: str, disk_id: int, seek_address: int, read_length: int) -> SeekMessage:
143
+ key = f"{host}-{disk_id}-{seek_address}-{read_length}"
144
+ return self.index.pop(key)
145
+
146
+ @suppress
147
+ def disk(self, host: str) -> DiskMessage:
148
+ return self.diskinfo[host]
149
+
150
+ def peers(self, host: str) -> int:
151
+ return self.topo[host]
152
+
153
+ def _on_disk(self, hostname: str, payload: bytes) -> None:
154
+ (num_of_disks,) = unpack_from("<B", payload, offset=0)
155
+ disks = []
156
+ for disk_index in range(num_of_disks):
157
+ (
158
+ sector_size,
159
+ total_size,
160
+ ) = unpack_from("<IQ", payload, offset=1 + (disk_index * DISK_INDEX_OFFSET))
161
+ disks.append(DiskMessage(index=disk_index, sector_size=sector_size, total_size=total_size))
162
+
163
+ self.diskinfo[hostname] = InfoMessage(disks=disks)
164
+
165
+ def _on_read(self, hostname: str, tokens: list[str], payload: bytes) -> None:
166
+ disk_id = tokens[3]
167
+ seek_address = int(tokens[4], 16)
168
+ read_length = int(tokens[5], 16)
169
+ msg = SeekMessage(data=payload)
170
+
171
+ key = f"{hostname}-{disk_id}-{seek_address}-{read_length}"
172
+
173
+ if key in self.index:
174
+ return
175
+
176
+ self.index[key] = msg
177
+
178
+ def _on_id(self, hostname: str, payload: bytes) -> None:
179
+ key = hostname
180
+ host = payload.decode("utf-8")
181
+ if host not in self.topo[key]:
182
+ self.topo[key].append(payload.decode("utf-8"))
183
+ self.mqtt_client.subscribe(f"{self.case}/{host}/DISKS")
184
+ self.mqtt_client.subscribe(f"{self.case}/{host}/READ/#")
185
+ time.sleep(1)
186
+
187
+ def _on_log(self, client: mqtt.Client, userdata: Any, log_level: int, message: str) -> None:
188
+ log.debug(message)
189
+
190
+ def _on_connect(self, client: mqtt.Client, userdata: Any, flags: dict, rc: int) -> None:
191
+ self.connected = True
192
+
193
+ def _on_message(self, client: mqtt.Client, userdata: Any, msg: mqtt.client.MQTTMessage) -> None:
194
+ tokens = msg.topic.split("/")
195
+ casename, hostname, response, *_ = tokens
196
+ if casename != self.case:
197
+ return
198
+
199
+ if response == "DISKS":
200
+ self._on_disk(hostname, msg.payload)
201
+ elif response == "READ":
202
+ self._on_read(hostname, tokens, msg.payload)
203
+ elif response == "ID":
204
+ self._on_id(hostname, msg.payload)
205
+
206
+ def seek(self, host: str, disk_id: int, offset: int, length: int, optimization_strategy: int) -> None:
207
+ self.mqtt_client.publish(
208
+ f"{self.case}/{host}/SEEK/{disk_id}/{hex(offset)}/{hex(length)}", pack("<I", optimization_strategy)
209
+ )
210
+
211
+ def info(self, host: str) -> None:
212
+ self.mqtt_client.publish(f"{self.case}/{host}/INFO")
213
+
214
+ def topology(self, host: str) -> None:
215
+ self.topo[host] = []
216
+ self.mqtt_client.subscribe(f"{self.case}/{host}/ID")
217
+ time.sleep(1) # need some time to avoid race condition, i.e. MQTT might react too fast
218
+ self.mqtt_client.publish(f"{self.case}/{host}/TOPO")
219
+
220
+ def connect(self) -> None:
221
+ self.mqtt_client = mqtt.Client(
222
+ client_id="", clean_session=True, userdata=None, protocol=mqtt.MQTTv311, transport="tcp"
223
+ )
224
+ self.mqtt_client.tls_set(
225
+ ca_certs=self.cacert_file,
226
+ certfile=self.certificate_file,
227
+ keyfile=self.private_key_file,
228
+ cert_reqs=ssl.CERT_REQUIRED,
229
+ tls_version=ssl.PROTOCOL_TLS,
230
+ ciphers=None,
231
+ )
232
+ self.mqtt_client.tls_insecure_set(True) # merely having the correct cert is ok
233
+ self.mqtt_client.on_connect = self._on_connect
234
+ self.mqtt_client.on_message = self._on_message
235
+ if log.getEffectiveLevel() == logging.DEBUG:
236
+ self.mqtt_client.on_log = self._on_log
237
+ self.mqtt_client.connect(self.broker_host, port=self.broker_port, keepalive=60)
238
+ self.mqtt_client.loop_start()
239
+
240
+
241
+ @arg("--mqtt-peers", type=int, dest="peers", help="minimum number of peers to await for first alias")
242
+ @arg("--mqtt-case", dest="case", help="case name (broker will determine if you are allowed to access this data)")
243
+ @arg("--mqtt-port", type=int, dest="port", help="broker connection port")
244
+ @arg("--mqtt-broker", dest="broker", help="broker ip-address")
245
+ @arg("--mqtt-key", dest="key", help="private key file")
246
+ @arg("--mqtt-crt", dest="crt", help="client certificate file")
247
+ @arg("--mqtt-ca", dest="ca", help="certificate authority file")
248
+ class MQTTLoader(Loader):
249
+ """Load remote targets through a broker."""
250
+
251
+ PATH = "/remote/data/hosts.txt"
252
+ FOLDER = "/remote/hosts"
253
+
254
+ connection = None
255
+ broker = None
256
+ peers = []
257
+
258
+ def __init__(self, path: Union[Path, str], **kwargs):
259
+ super().__init__(path)
260
+ cls = MQTTLoader
261
+
262
+ if str(path).startswith("/remote/hosts/host"):
263
+ self.path = path.read_text() # update path to reflect the resolved host
264
+
265
+ num_peers = 1
266
+ if cls.broker is None:
267
+ if (uri := kwargs.get("parsed_path")) is None:
268
+ raise LoaderError("No URI connection details has been passed.")
269
+ options = dict(urllib.parse.parse_qsl(uri.query, keep_blank_values=True))
270
+ cls.broker = Broker(**options)
271
+ cls.broker.connect()
272
+ num_peers = int(options.get("peers", 1))
273
+
274
+ self.broker = cls.broker
275
+ self.connection = MQTTConnection(self.broker, self.path)
276
+ self.peers = self.connection.topo(num_peers)
277
+
278
+ def map(self, target: Target) -> None:
279
+ if len(self.peers) == 1 and self.peers[0] == str(self.path):
280
+ target.path = Path(str(self.path))
281
+ for disk in self.connection.info():
282
+ target.disks.add(RawContainer(disk))
283
+ else:
284
+ target.mqtt = True
285
+ vfs = VirtualFilesystem()
286
+ vfs.map_file_fh(self.PATH, BytesIO("\n".join(self.peers).encode("utf-8")))
287
+ for index, peer in enumerate(self.peers):
288
+ vfs.map_file_fh(f"{self.FOLDER}/host{index}-{peer}", BytesIO(peer.encode("utf-8")))
289
+
290
+ target.fs.mount("/data", vfs)
291
+ target.filesystems.add(vfs)
292
+
293
+ @staticmethod
294
+ def detect(path: Path) -> bool:
295
+ return str(path).startswith("/remote/hosts/host")
@@ -0,0 +1,215 @@
1
+ from __future__ import annotations
2
+
3
+ import io
4
+ import itertools
5
+ from itertools import product
6
+ from typing import Iterable, Iterator, Optional, Union
7
+
8
+ from dissect.target.exceptions import ConfigurationParsingError, UnsupportedPluginError
9
+ from dissect.target.helpers import fsutil
10
+ from dissect.target.helpers.configutil import Default, ListUnwrapper, _update_dictionary
11
+ from dissect.target.helpers.record import TargetRecordDescriptor
12
+ from dissect.target.plugin import OperatingSystem, Plugin, arg, export
13
+
14
+ COMMON_ELEMENTS = [
15
+ ("string", "name"), # basename of .conf file
16
+ ("string", "proto"),
17
+ ("string", "dev"),
18
+ ("string", "ca"),
19
+ ("string", "cert"),
20
+ ("string", "key"),
21
+ ("boolean", "redacted_key"),
22
+ ("string", "tls_auth"),
23
+ ("string", "status"),
24
+ ("string", "log"),
25
+ ("string", "source"),
26
+ ]
27
+
28
+ OpenVPNServer = TargetRecordDescriptor(
29
+ "application/vpn/openvpn/server",
30
+ [
31
+ ("net.ipaddress", "local"),
32
+ ("uint16", "port"),
33
+ ("string", "dh"),
34
+ ("string", "topology"),
35
+ ("string", "server"),
36
+ ("string", "ifconfig_pool_persist"),
37
+ ("string[]", "pushed_options"),
38
+ ("boolean", "client_to_client"),
39
+ ("boolean", "duplicate_cn"),
40
+ *COMMON_ELEMENTS,
41
+ ],
42
+ )
43
+
44
+ OpenVPNClient = TargetRecordDescriptor(
45
+ "application/vpn/openvpn/client",
46
+ [
47
+ ("string[]", "remote"),
48
+ *COMMON_ELEMENTS,
49
+ ],
50
+ )
51
+
52
+
53
+ class OpenVPNParser(Default):
54
+ def __init__(self, *args, **kwargs):
55
+ boolean_fields = OpenVPNServer.getfields("boolean") + OpenVPNClient.getfields("boolean")
56
+ self.boolean_field_names = set(field.name.replace("_", "-") for field in boolean_fields)
57
+
58
+ super().__init__(*args, separator=(r"\s",), collapse=["key", "ca", "cert"], **kwargs)
59
+
60
+ def parse_file(self, fh: io.TextIOBase) -> None:
61
+ root = {}
62
+ iterator = self.line_reader(fh)
63
+ for line in iterator:
64
+ if line.startswith("<"):
65
+ key = line.strip().strip("<>")
66
+ value = self._read_blob(iterator)
67
+ _update_dictionary(root, key, value)
68
+ continue
69
+
70
+ self._parse_line(root, line)
71
+
72
+ self.parsed_data = ListUnwrapper.unwrap(root)
73
+
74
+ def _read_blob(self, lines: Iterable[str]) -> str | list[dict]:
75
+ """Read the whole section between <data></data> sections"""
76
+ output = ""
77
+ with io.StringIO() as buffer:
78
+ for line in lines:
79
+ if "</" in line:
80
+ break
81
+
82
+ buffer.write(line)
83
+ output = buffer.getvalue()
84
+
85
+ # Check for connection profile blocks
86
+ if not output.startswith("-----"):
87
+ profile_dict = dict()
88
+ for line in output.splitlines():
89
+ self._parse_line(profile_dict, line)
90
+
91
+ # We put it as a list as _update_dictionary appends data in a list.
92
+ output = [profile_dict]
93
+
94
+ return output
95
+
96
+ def _parse_line(self, root: dict, line: str) -> None:
97
+ key, *value = self.SEPARATOR.split(line, 1)
98
+ # Unquote data
99
+ value = value[0].strip() if value else ""
100
+
101
+ value = value.strip("'\"")
102
+
103
+ if key in self.boolean_field_names:
104
+ value = True
105
+
106
+ _update_dictionary(root, key, value)
107
+
108
+
109
+ class OpenVPNPlugin(Plugin):
110
+ """OpenVPN configuration parser.
111
+
112
+ References:
113
+ - man (8) openvpn
114
+ """
115
+
116
+ __namespace__ = "openvpn"
117
+
118
+ config_globs = [
119
+ # This catches openvpn@, openvpn-client@, and openvpn-server@ systemd configurations
120
+ # Linux
121
+ "/etc/openvpn/",
122
+ # Windows
123
+ "sysvol/Program Files/OpenVPN/config/",
124
+ ]
125
+
126
+ user_config_paths = {
127
+ OperatingSystem.WINDOWS.value: ["OpenVPN/config/"],
128
+ OperatingSystem.OSX.value: ["Library/Application Support/OpenVPN Connect/profiles/"],
129
+ }
130
+
131
+ def __init__(self, target) -> None:
132
+ super().__init__(target)
133
+ self.configs: list[fsutil.TargetPath] = []
134
+ for base, glob in product(self.config_globs, ["*.conf", "*.ovpn"]):
135
+ self.configs.extend(self.target.fs.path(base).rglob(glob))
136
+
137
+ user_paths = self.user_config_paths.get(target.os, [])
138
+ for path, glob, user_details in itertools.product(
139
+ user_paths, ["*.conf", "*.ovpn"], self.target.user_details.all_with_home()
140
+ ):
141
+ self.configs.extend(user_details.home_path.joinpath(path).rglob(glob))
142
+
143
+ def check_compatible(self) -> None:
144
+ if not self.configs:
145
+ raise UnsupportedPluginError("No OpenVPN configuration files found")
146
+
147
+ def _load_config(self, parser: OpenVPNParser, config_path: fsutil.TargetPath) -> Optional[dict]:
148
+ with config_path.open("rt") as file:
149
+ try:
150
+ parser.parse_file(file)
151
+ except ConfigurationParsingError as e:
152
+ # Couldn't parse file, continue
153
+ self.target.log.info("An issue occurred during parsing of %s, continuing", config_path)
154
+ self.target.log.debug("", exc_info=e)
155
+ return None
156
+
157
+ return parser.parsed_data
158
+
159
+ @export(record=[OpenVPNServer, OpenVPNClient])
160
+ @arg("--export-key", action="store_true")
161
+ def config(self, export_key: bool = False) -> Iterator[Union[OpenVPNServer, OpenVPNClient]]:
162
+ """Parses config files from openvpn interfaces."""
163
+ # We define the parser here so we can reuse it
164
+ parser = OpenVPNParser()
165
+
166
+ for config_path in self.configs:
167
+ config = self._load_config(parser, config_path)
168
+
169
+ common_elements = {
170
+ "name": config_path.stem,
171
+ "proto": config.get("proto", "udp"), # Default is UDP
172
+ "dev": config.get("dev"),
173
+ "ca": config.get("ca"),
174
+ "cert": config.get("cert"),
175
+ "key": config.get("key"),
176
+ "status": config.get("status"),
177
+ "log": config.get("log"),
178
+ "source": config_path,
179
+ "_target": self.target,
180
+ }
181
+
182
+ if not export_key and "PRIVATE KEY" in common_elements.get("key"):
183
+ common_elements.update({"key": None})
184
+ common_elements.update({"redacted_key": True})
185
+
186
+ tls_auth = config.get("tls-auth", "")
187
+ # The format of tls-auth is 'tls-auth ta.key <NUM>'.
188
+ # NUM is either 0 or 1 depending on whether the configuration
189
+ # is for the client or server, and that does not interest us
190
+ # This gets rid of the number at the end, while still supporting spaces
191
+ tls_auth = " ".join(tls_auth.split(" ")[:-1]).strip("'\"")
192
+
193
+ common_elements.update({"tls_auth": tls_auth})
194
+
195
+ if "client" in config:
196
+ remote = config.get("remote", [])
197
+
198
+ yield OpenVPNClient(
199
+ **common_elements,
200
+ remote=remote,
201
+ )
202
+ else:
203
+ # Defaults here are taken from `man (8) openvpn`
204
+ yield OpenVPNServer(
205
+ **common_elements,
206
+ local=config.get("local", "0.0.0.0"),
207
+ port=int(config.get("port", "1194")),
208
+ dh=config.get("dh"),
209
+ topology=config.get("topology"),
210
+ server=config.get("server"),
211
+ ifconfig_pool_persist=config.get("ifconfig-pool-persist"),
212
+ pushed_options=config.get("push", []),
213
+ client_to_client=config.get("client-to-client", False),
214
+ duplicate_cn=config.get("duplicate-cn", False),
215
+ )
@@ -0,0 +1,35 @@
1
+ from __future__ import annotations
2
+
3
+ from typing import TYPE_CHECKING, Iterator
4
+
5
+ from flow.record.fieldtypes import posix_path
6
+
7
+ from dissect.target.exceptions import UnsupportedPluginError
8
+ from dissect.target.helpers.record import ChildTargetRecord
9
+ from dissect.target.plugin import ChildTargetPlugin
10
+
11
+ if TYPE_CHECKING:
12
+ from dissect.target.target import Target
13
+
14
+
15
+ class MQTT(ChildTargetPlugin):
16
+ """Child target plugin that yields from remote broker."""
17
+
18
+ __type__ = "mqtt"
19
+
20
+ PATH = "/remote/data/hosts.txt"
21
+ FOLDER = "/remote/hosts"
22
+
23
+ def __init__(self, target: Target):
24
+ super().__init__(target)
25
+
26
+ def check_compatible(self) -> None:
27
+ if not self.target.mqtt or not self.target.fs.path(self.PATH).exists():
28
+ raise UnsupportedPluginError("No remote children.txt file found.")
29
+
30
+ def list_children(self) -> Iterator[ChildTargetRecord]:
31
+ hosts = self.target.fs.path(self.PATH).read_text(encoding="utf-8").split("\n")
32
+ for index, host in enumerate(hosts):
33
+ yield ChildTargetRecord(
34
+ type=self.__type__, path=posix_path(f"{self.FOLDER}/host{index}-{host}"), _target=self.target
35
+ )
@@ -37,6 +37,7 @@ from dissect.target.plugin import arg
37
37
  from dissect.target.target import Target
38
38
  from dissect.target.tools.info import print_target_info
39
39
  from dissect.target.tools.utils import (
40
+ args_to_uri,
40
41
  catch_sigpipe,
41
42
  configure_generic_arguments,
42
43
  generate_argparse_for_bound_method,
@@ -1223,10 +1224,17 @@ def main() -> None:
1223
1224
  parser.add_argument("targets", metavar="TARGETS", nargs="*", help="targets to load")
1224
1225
  parser.add_argument("-p", "--python", action="store_true", help="(I)Python shell")
1225
1226
  parser.add_argument("-r", "--registry", action="store_true", help="registry shell")
1227
+ parser.add_argument(
1228
+ "-L",
1229
+ "--loader",
1230
+ action="store",
1231
+ default=None,
1232
+ help="select a specific loader (i.e. vmx, raw)",
1233
+ )
1226
1234
 
1227
1235
  configure_generic_arguments(parser)
1228
- args = parser.parse_args()
1229
-
1236
+ args, rest = parser.parse_known_args()
1237
+ args.targets = args_to_uri(args.targets, args.loader, rest) if args.loader else args.targets
1230
1238
  process_generic_arguments(args)
1231
1239
 
1232
1240
  # For the shell tool we want -q to log slightly more then just CRITICAL
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.1
2
2
  Name: dissect.target
3
- Version: 3.17.dev3
3
+ Version: 3.17.dev5
4
4
  Summary: This module ties all other Dissect modules together, it provides a programming API and command line tools which allow easy access to various data sources inside disk images or file collections (a.k.a. targets)
5
5
  Author-email: Dissect Team <dissect@fox-it.com>
6
6
  License: Affero General Public License v3
@@ -64,6 +64,9 @@ Requires-Dist: impacket==0.10.0; extra == "smb"
64
64
  Provides-Extra: cb
65
65
  Requires-Dist: dissect.target[full]; extra == "cb"
66
66
  Requires-Dist: carbon-black-cloud-sdk~=1.4.3; extra == "cb"
67
+ Provides-Extra: mqtt
68
+ Requires-Dist: dissect.target[full]; extra == "mqtt"
69
+ Requires-Dist: paho-mqtt==1.6.1; extra == "mqtt"
67
70
 
68
71
  # dissect.target
69
72
 
@@ -96,6 +96,7 @@ dissect/target/loaders/itunes.py
96
96
  dissect/target/loaders/kape.py
97
97
  dissect/target/loaders/local.py
98
98
  dissect/target/loaders/log.py
99
+ dissect/target/loaders/mqtt.py
99
100
  dissect/target/loaders/multiraw.py
100
101
  dissect/target/loaders/ova.py
101
102
  dissect/target/loaders/ovf.py
@@ -162,6 +163,7 @@ dissect/target/plugins/apps/webserver/webserver.py
162
163
  dissect/target/plugins/child/__init__.py
163
164
  dissect/target/plugins/child/esxi.py
164
165
  dissect/target/plugins/child/hyperv.py
166
+ dissect/target/plugins/child/mqtt.py
165
167
  dissect/target/plugins/child/virtuozzo.py
166
168
  dissect/target/plugins/child/vmware_workstation.py
167
169
  dissect/target/plugins/child/wsl.py
@@ -396,6 +398,7 @@ tests/loaders/test_hyperv.py
396
398
  tests/loaders/test_kape.py
397
399
  tests/loaders/test_local.py
398
400
  tests/loaders/test_log.py
401
+ tests/loaders/test_mqtt.py
399
402
  tests/loaders/test_multiraw.py
400
403
  tests/loaders/test_ova.py
401
404
  tests/loaders/test_ovf.py
@@ -37,6 +37,10 @@ pycryptodome
37
37
  pyyaml
38
38
  zstandard
39
39
 
40
+ [mqtt]
41
+ dissect.target[full]
42
+ paho-mqtt==1.6.1
43
+
40
44
  [smb]
41
45
  dissect.target[full]
42
46
  impacket==0.10.0
@@ -90,6 +90,11 @@ cb = [
90
90
  "dissect.target[full]",
91
91
  "carbon-black-cloud-sdk~=1.4.3"
92
92
  ]
93
+ mqtt = [
94
+ # Grab the dependencies for dissect.target
95
+ "dissect.target[full]",
96
+ "paho-mqtt==1.6.1",
97
+ ]
93
98
 
94
99
  [project.scripts]
95
100
  target-build-pluginlist = "dissect.target.tools.build_pluginlist:main"