dissect.target 3.17.dev3__tar.gz → 3.17.dev5__tar.gz
Sign up to get free protection for your applications and to get access to all the features.
- {dissect.target-3.17.dev3/dissect.target.egg-info → dissect.target-3.17.dev5}/PKG-INFO +4 -1
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loader.py +1 -0
- dissect.target-3.17.dev5/dissect/target/loaders/mqtt.py +295 -0
- dissect.target-3.17.dev5/dissect/target/plugins/apps/vpn/openvpn.py +215 -0
- dissect.target-3.17.dev5/dissect/target/plugins/child/mqtt.py +35 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/shell.py +10 -2
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5/dissect.target.egg-info}/PKG-INFO +4 -1
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect.target.egg-info/SOURCES.txt +3 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect.target.egg-info/requires.txt +4 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/pyproject.toml +5 -0
- dissect.target-3.17.dev5/tests/loaders/test_mqtt.py +81 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/vpn/test_openvpn.py +34 -6
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tox.ini +3 -1
- dissect.target-3.17.dev3/dissect/target/plugins/apps/vpn/openvpn.py +0 -193
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/COPYRIGHT +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/LICENSE +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/MANIFEST.in +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/README.md +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/container.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/containers/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/containers/asdf.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/containers/ewf.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/containers/hdd.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/containers/hds.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/containers/qcow2.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/containers/raw.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/containers/split.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/containers/vdi.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/containers/vhd.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/containers/vhdx.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/containers/vmdk.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/data/autocompletion/target_bash_completion.sh +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/exceptions.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystem.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/ad1.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/btrfs.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/cb.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/config.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/cpio.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/dir.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/exfat.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/extfs.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/fat.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/ffs.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/itunes.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/jffs.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/ntfs.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/smb.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/squashfs.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/tar.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/vmfs.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/vmtar.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/xfs.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/filesystems/zip.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/cache.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/compat/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/compat/path_310.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/compat/path_311.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/compat/path_312.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/compat/path_39.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/compat/path_common.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/config.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/configutil.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/cyber.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/data/windowsZones.xml +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/descriptor_extensions.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/docs.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/fsutil.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/hashutil.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/keychain.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/lazy.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/loaderutil.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/localeutil.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/mount.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/mui.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/network_managers.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/polypath.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/protobuf.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/record.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/record_modifier.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/regutil.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/shell_folder_ids.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/ssh.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/targetd.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/helpers/utils.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/ad1.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/asdf.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/cb.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/cyber.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/dir.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/hyperv.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/itunes.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/kape.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/local.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/log.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/multiraw.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/ova.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/ovf.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/phobos.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/profile.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/pvm.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/pvs.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/raw.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/remote.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/res.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/smb.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/tanium.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/tar.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/target.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/targetd.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/utm.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/vb.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/vbox.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/velociraptor.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/vma.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/vmwarevm.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/vmx.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/loaders/xva.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugin.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/av/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/av/mcafee.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/av/sophos.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/av/symantec.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/av/trendmicro.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/browser/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/browser/brave.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/browser/browser.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/browser/chrome.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/browser/chromium.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/browser/edge.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/browser/firefox.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/browser/iexplore.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/container/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/container/docker.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/remoteaccess/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/remoteaccess/anydesk.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/remoteaccess/remoteaccess.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/remoteaccess/teamviewer.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/shell/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/shell/powershell.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/ssh/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/ssh/openssh.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/ssh/opensshd.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/ssh/putty.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/ssh/ssh.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/vpn/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/vpn/wireguard.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/webhosting/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/webhosting/cpanel.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/webserver/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/webserver/apache.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/webserver/caddy.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/webserver/citrix.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/webserver/iis.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/webserver/nginx.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/apps/webserver/webserver.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/child/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/child/esxi.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/child/hyperv.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/child/virtuozzo.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/child/vmware_workstation.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/child/wsl.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/acquire_handles.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/acquire_hash.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/icat.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/ntfs/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/ntfs/mft.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/ntfs/mft_timeline.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/ntfs/usnjrnl.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/ntfs/utils.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/resolver.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/unix/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/unix/capability.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/unix/suid.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/walkfs.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/filesystem/yara.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/general/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/general/config.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/general/default.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/general/example.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/general/loaders.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/general/osinfo.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/general/plugins.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/general/scrape.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/general/users.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/_os.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/_os.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/citrix/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/citrix/_os.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/citrix/history.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/freebsd/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/freebsd/_os.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/ios/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/ios/_os.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/openbsd/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/openbsd/_os.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/osx/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/osx/_os.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/bsd/osx/user.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/cronjobs.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/datetime.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/esxi/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/esxi/_os.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/etc.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/generic.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/history.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/_os.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/android/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/android/_os.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/cmdline.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/debian/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/debian/_os.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/debian/apt.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/debian/dpkg.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/debian/vyos/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/debian/vyos/_os.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/environ.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/fortios/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/fortios/_keys.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/fortios/_os.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/fortios/generic.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/fortios/locale.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/iptables.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/modules.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/netstat.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/proc.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/processes.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/redhat/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/redhat/_os.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/redhat/yum.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/services.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/sockets.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/suse/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/suse/_os.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/linux/suse/zypper.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/locale.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/locate/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/locate/gnulocate.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/locate/locate.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/locate/mlocate.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/locate/plocate.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/log/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/log/atop.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/log/audit.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/log/auth.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/log/journal.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/log/lastlog.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/log/messages.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/log/utmp.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/packagemanager.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/unix/shadow.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/_os.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/activitiescache.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/adpolicy.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/amcache.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/catroot.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/cim.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/clfs.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/datetime.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/defender.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/dpapi/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/dpapi/blob.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/dpapi/crypto.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/dpapi/dpapi.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/dpapi/master_key.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/env.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/exchange/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/exchange/exchange.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/generic.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/lnk.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/locale.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/log/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/log/amcache.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/log/etl.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/log/evt.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/log/evtx.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/log/pfro.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/log/schedlgu.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/notifications.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/prefetch.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/recyclebin.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/7zip.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/appxdebugkeys.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/auditpol.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/bam.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/cit.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/clsid.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/firewall.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/mru.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/muicache.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/nethist.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/recentfilecache.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/regf.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/runkeys.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/shellbags.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/shimcache.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/trusteddocs.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/usb.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/regf/userassist.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/registry.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/sam.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/services.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/sru.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/startupinfo.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/syscache.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/task_helpers/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/task_helpers/tasks_job.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/task_helpers/tasks_records.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/task_helpers/tasks_xml.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/tasks.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/thumbcache.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/ual.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/plugins/os/windows/wer.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/report.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/target.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/build_pluginlist.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/dd.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/dump/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/dump/run.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/dump/state.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/dump/utils.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/fs.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/info.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/logging.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/mount.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/query.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/reg.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/tools/utils.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/volume.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/volumes/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/volumes/bde.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/volumes/ddf.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/volumes/disk.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/volumes/luks.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/volumes/lvm.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/volumes/md.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect/target/volumes/vmfs.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect.target.egg-info/dependency_links.txt +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect.target.egg-info/entry_points.txt +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/dissect.target.egg-info/top_level.txt +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/setup.cfg +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/_docs/Makefile +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/_docs/conf.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/_docs/index.rst +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/_utils.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/conftest.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/containers/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/containers/test_split.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/filesystems/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/filesystems/test_cb.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/filesystems/test_config.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/filesystems/test_cpio.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/filesystems/test_dir.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/filesystems/test_exfat.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/filesystems/test_fat.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/filesystems/test_ntfs.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/filesystems/test_smb.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/filesystems/test_tar.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/filesystems/test_vmtar.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/filesystems/test_zip.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_cache.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_config.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_configutil.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_docs.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_fsutil.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_hashutil.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_keychain.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_loaderutil.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_localeutil.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_modifier.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_protobuf.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_record.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_regutil.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/helpers/test_utils.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_asdf.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_cb.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_dir.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_hyperv.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_kape.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_local.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_log.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_multiraw.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_ova.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_ovf.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_phobos.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_pvm.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_pvs.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_remote.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_smb.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_tanium.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_tar.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_utm.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_vbox.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_velociraptor.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/loaders/test_vmwarevm.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/av/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/av/test_mcafee.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/av/test_sophos.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/av/test_symantec.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/av/test_trendmicro.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/browser/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/browser/test_brave.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/browser/test_chrome.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/browser/test_chromium.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/browser/test_edge.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/browser/test_firefox.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/browser/test_iexplore.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/container/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/container/test_docker.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/remoteaccess/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/remoteaccess/test_anydesk.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/remoteaccess/test_teamviewer.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/shell/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/shell/test_powershell.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/ssh/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/ssh/test_openssh.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/ssh/test_opensshd.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/ssh/test_putty.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/vpn/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/vpn/test_wireguard.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/webhosting/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/webhosting/test_cpanel.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/webserver/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/webserver/test_apache.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/webserver/test_caddy.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/webserver/test_citrix.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/webserver/test_iis.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/webserver/test_nginx.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/apps/webserver/test_webserver.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/child/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/child/test_hyperv.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/child/test_virtuozzo.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/child/test_wsl.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/filesystem/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/filesystem/ntfs/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/filesystem/ntfs/test_mft.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/filesystem/ntfs/test_usnjrnl.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/filesystem/test_acquire_handles.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/filesystem/test_acquire_hash.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/filesystem/test_icat.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/filesystem/test_resolver.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/filesystem/test_walkfs.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/filesystem/test_yara.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/filesystem/unix/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/filesystem/unix/test_capability.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/filesystem/unix/test_suid.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/general/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/general/test_config.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/general/test_default.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/general/test_plugins.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/general/test_scrape.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/general/test_users.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/bsd/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/bsd/citrix/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/bsd/citrix/test__os.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/bsd/citrix/test_history.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/bsd/osx/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/bsd/osx/test__os.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/bsd/osx/test_user.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/esxi/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/esxi/test__os.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/android/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/android/test__os.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/debian/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/debian/test_apt.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/debian/test_dpkg.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/fortios/test_keys.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/redhat/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/redhat/test_yum.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/suse/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/suse/test_zypper.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/test_cmdline.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/test_environ.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/test_iptables.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/test_modules.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/test_netstat.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/test_proc.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/test_processes.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/test_services.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/linux/test_sockets.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/locate/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/locate/test_gnulocate.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/locate/test_mlocate.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/locate/test_plocate.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/log/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/log/test_atop.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/log/test_audit.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/log/test_auth.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/log/test_lastlog.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/log/test_messages.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/log/test_utmp.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/test__os.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/test_generic.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/test_history.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/test_ips.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/test_journal.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/test_locale.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/test_packagemanager.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/test_shadow.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/test_users.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/unix/test_version.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/log/test_etl.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/log/test_evt.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/log/test_evtx.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/log/test_schedlgu.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/regf/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/regf/test_appxdebugkeys.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/regf/test_cit.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/regf/test_clsid.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/regf/test_muicache.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/regf/test_trusteddocs.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/regf/test_userassist.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test__os.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_adpolicy.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_amcache.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_catroot.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_clfs.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_datetime.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_defender.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_dpapi.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_env.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_generic.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_lnk.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_locale.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_mru.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_notifications.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_prefetch.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_recyclebin.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_registry.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_sam.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_shimcache.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_sru.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_syscache.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_tasks.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_thumbcache.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_ual.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/plugins/os/windows/test_wer.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/test_container.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/test_filesystem.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/test_plugin.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/test_registration.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/test_report.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/test_target.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/test_volume.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/tools/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/tools/test_dump.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/tools/test_fs.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/tools/test_mount.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/tools/test_query.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/tools/test_reg.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/tools/test_shell.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/tools/test_utils.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/volumes/__init__.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/volumes/test_bde.py +0 -0
- {dissect.target-3.17.dev3 → dissect.target-3.17.dev5}/tests/volumes/test_md.py +0 -0
@@ -1,6 +1,6 @@
|
|
1
1
|
Metadata-Version: 2.1
|
2
2
|
Name: dissect.target
|
3
|
-
Version: 3.17.
|
3
|
+
Version: 3.17.dev5
|
4
4
|
Summary: This module ties all other Dissect modules together, it provides a programming API and command line tools which allow easy access to various data sources inside disk images or file collections (a.k.a. targets)
|
5
5
|
Author-email: Dissect Team <dissect@fox-it.com>
|
6
6
|
License: Affero General Public License v3
|
@@ -64,6 +64,9 @@ Requires-Dist: impacket==0.10.0; extra == "smb"
|
|
64
64
|
Provides-Extra: cb
|
65
65
|
Requires-Dist: dissect.target[full]; extra == "cb"
|
66
66
|
Requires-Dist: carbon-black-cloud-sdk~=1.4.3; extra == "cb"
|
67
|
+
Provides-Extra: mqtt
|
68
|
+
Requires-Dist: dissect.target[full]; extra == "mqtt"
|
69
|
+
Requires-Dist: paho-mqtt==1.6.1; extra == "mqtt"
|
67
70
|
|
68
71
|
# dissect.target
|
69
72
|
|
@@ -176,6 +176,7 @@ def open(item: Union[str, Path], *args, **kwargs) -> Loader:
|
|
176
176
|
|
177
177
|
register("local", "LocalLoader")
|
178
178
|
register("remote", "RemoteLoader")
|
179
|
+
register("mqtt", "MQTTLoader")
|
179
180
|
register("targetd", "TargetdLoader")
|
180
181
|
register("asdf", "AsdfLoader")
|
181
182
|
register("tar", "TarLoader")
|
@@ -0,0 +1,295 @@
|
|
1
|
+
from __future__ import annotations
|
2
|
+
|
3
|
+
import logging
|
4
|
+
import ssl
|
5
|
+
import time
|
6
|
+
import urllib
|
7
|
+
from dataclasses import dataclass
|
8
|
+
from functools import lru_cache
|
9
|
+
from io import BytesIO
|
10
|
+
from pathlib import Path
|
11
|
+
from struct import pack, unpack_from
|
12
|
+
from typing import Any, Callable, Optional, Union
|
13
|
+
|
14
|
+
import paho.mqtt.client as mqtt
|
15
|
+
from dissect.util.stream import AlignedStream
|
16
|
+
|
17
|
+
from dissect.target.containers.raw import RawContainer
|
18
|
+
from dissect.target.exceptions import LoaderError
|
19
|
+
from dissect.target.filesystem import VirtualFilesystem
|
20
|
+
from dissect.target.loader import Loader
|
21
|
+
from dissect.target.plugin import arg
|
22
|
+
from dissect.target.target import Target
|
23
|
+
|
24
|
+
log = logging.getLogger(__name__)
|
25
|
+
|
26
|
+
DISK_INDEX_OFFSET = 9
|
27
|
+
|
28
|
+
|
29
|
+
def suppress(func: Callable) -> Callable:
|
30
|
+
def suppressed(*args, **kwargs):
|
31
|
+
try:
|
32
|
+
return func(*args, **kwargs)
|
33
|
+
except Exception:
|
34
|
+
return
|
35
|
+
|
36
|
+
return suppressed
|
37
|
+
|
38
|
+
|
39
|
+
@dataclass
|
40
|
+
class InfoMessage:
|
41
|
+
disks: list[DiskMessage]
|
42
|
+
|
43
|
+
|
44
|
+
@dataclass
|
45
|
+
class DiskMessage:
|
46
|
+
index: int = 0
|
47
|
+
sector_size: int = 0
|
48
|
+
total_size: int = 0
|
49
|
+
|
50
|
+
|
51
|
+
@dataclass
|
52
|
+
class SeekMessage:
|
53
|
+
data: bytes = b""
|
54
|
+
|
55
|
+
|
56
|
+
class MQTTStream(AlignedStream):
|
57
|
+
def __init__(self, stream: MQTTConnection, disk_id: int, size: Optional[int] = None):
|
58
|
+
self.stream = stream
|
59
|
+
self.disk_id = disk_id
|
60
|
+
super().__init__(size)
|
61
|
+
|
62
|
+
def _read(self, offset: int, length: int, optimization_strategy: int = 0) -> bytes:
|
63
|
+
data = self.stream.read(self.disk_id, offset, length, optimization_strategy)
|
64
|
+
return data
|
65
|
+
|
66
|
+
|
67
|
+
class MQTTConnection:
|
68
|
+
broker = None
|
69
|
+
host = None
|
70
|
+
|
71
|
+
def __init__(self, broker: Broker, host: str):
|
72
|
+
self.broker = broker
|
73
|
+
self.host = str(host)
|
74
|
+
self.info = lru_cache(128)(self.info)
|
75
|
+
self.read = lru_cache(128)(self.read)
|
76
|
+
|
77
|
+
def topo(self, peers: int):
|
78
|
+
self.broker.topology(self.host)
|
79
|
+
|
80
|
+
while len(self.broker.peers(self.host)) < peers:
|
81
|
+
self.broker.topology(self.host)
|
82
|
+
time.sleep(1)
|
83
|
+
return self.broker.peers(self.host)
|
84
|
+
|
85
|
+
def info(self) -> list[MQTTStream]:
|
86
|
+
disks = []
|
87
|
+
self.broker.info(self.host)
|
88
|
+
|
89
|
+
message = None
|
90
|
+
while message is None:
|
91
|
+
message = self.broker.disk(self.host)
|
92
|
+
|
93
|
+
for idx, disk in enumerate(message.disks):
|
94
|
+
disks.append(MQTTStream(self, idx, disk.total_size))
|
95
|
+
|
96
|
+
return disks
|
97
|
+
|
98
|
+
def read(self, disk_id: int, offset: int, length: int, optimization_strategy: int) -> bytes:
|
99
|
+
message = None
|
100
|
+
self.broker.seek(self.host, disk_id, offset, length, optimization_strategy)
|
101
|
+
|
102
|
+
attempts = 0
|
103
|
+
while True:
|
104
|
+
message = self.broker.read(self.host, disk_id, offset, length)
|
105
|
+
# don't waste time with sleep if we have a response
|
106
|
+
if message:
|
107
|
+
break
|
108
|
+
|
109
|
+
attempts += 1
|
110
|
+
time.sleep(0.01)
|
111
|
+
if attempts > 100:
|
112
|
+
# message might have not reached agent, resend...
|
113
|
+
self.broker.seek(self.host, disk_id, offset, length, optimization_strategy)
|
114
|
+
attempts = 0
|
115
|
+
|
116
|
+
return message.data
|
117
|
+
|
118
|
+
|
119
|
+
class Broker:
|
120
|
+
broker_host = None
|
121
|
+
broker_port = None
|
122
|
+
private_key_file = None
|
123
|
+
certificate_file = None
|
124
|
+
cacert_file = None
|
125
|
+
mqtt_client = None
|
126
|
+
connected = False
|
127
|
+
case = None
|
128
|
+
|
129
|
+
diskinfo = {}
|
130
|
+
index = {}
|
131
|
+
topo = {}
|
132
|
+
|
133
|
+
def __init__(self, broker: Broker, port: str, key: str, crt: str, ca: str, case: str, **kwargs):
|
134
|
+
self.broker_host = broker
|
135
|
+
self.broker_port = int(port)
|
136
|
+
self.private_key_file = key
|
137
|
+
self.certificate_file = crt
|
138
|
+
self.cacert_file = ca
|
139
|
+
self.case = case
|
140
|
+
|
141
|
+
@suppress
|
142
|
+
def read(self, host: str, disk_id: int, seek_address: int, read_length: int) -> SeekMessage:
|
143
|
+
key = f"{host}-{disk_id}-{seek_address}-{read_length}"
|
144
|
+
return self.index.pop(key)
|
145
|
+
|
146
|
+
@suppress
|
147
|
+
def disk(self, host: str) -> DiskMessage:
|
148
|
+
return self.diskinfo[host]
|
149
|
+
|
150
|
+
def peers(self, host: str) -> int:
|
151
|
+
return self.topo[host]
|
152
|
+
|
153
|
+
def _on_disk(self, hostname: str, payload: bytes) -> None:
|
154
|
+
(num_of_disks,) = unpack_from("<B", payload, offset=0)
|
155
|
+
disks = []
|
156
|
+
for disk_index in range(num_of_disks):
|
157
|
+
(
|
158
|
+
sector_size,
|
159
|
+
total_size,
|
160
|
+
) = unpack_from("<IQ", payload, offset=1 + (disk_index * DISK_INDEX_OFFSET))
|
161
|
+
disks.append(DiskMessage(index=disk_index, sector_size=sector_size, total_size=total_size))
|
162
|
+
|
163
|
+
self.diskinfo[hostname] = InfoMessage(disks=disks)
|
164
|
+
|
165
|
+
def _on_read(self, hostname: str, tokens: list[str], payload: bytes) -> None:
|
166
|
+
disk_id = tokens[3]
|
167
|
+
seek_address = int(tokens[4], 16)
|
168
|
+
read_length = int(tokens[5], 16)
|
169
|
+
msg = SeekMessage(data=payload)
|
170
|
+
|
171
|
+
key = f"{hostname}-{disk_id}-{seek_address}-{read_length}"
|
172
|
+
|
173
|
+
if key in self.index:
|
174
|
+
return
|
175
|
+
|
176
|
+
self.index[key] = msg
|
177
|
+
|
178
|
+
def _on_id(self, hostname: str, payload: bytes) -> None:
|
179
|
+
key = hostname
|
180
|
+
host = payload.decode("utf-8")
|
181
|
+
if host not in self.topo[key]:
|
182
|
+
self.topo[key].append(payload.decode("utf-8"))
|
183
|
+
self.mqtt_client.subscribe(f"{self.case}/{host}/DISKS")
|
184
|
+
self.mqtt_client.subscribe(f"{self.case}/{host}/READ/#")
|
185
|
+
time.sleep(1)
|
186
|
+
|
187
|
+
def _on_log(self, client: mqtt.Client, userdata: Any, log_level: int, message: str) -> None:
|
188
|
+
log.debug(message)
|
189
|
+
|
190
|
+
def _on_connect(self, client: mqtt.Client, userdata: Any, flags: dict, rc: int) -> None:
|
191
|
+
self.connected = True
|
192
|
+
|
193
|
+
def _on_message(self, client: mqtt.Client, userdata: Any, msg: mqtt.client.MQTTMessage) -> None:
|
194
|
+
tokens = msg.topic.split("/")
|
195
|
+
casename, hostname, response, *_ = tokens
|
196
|
+
if casename != self.case:
|
197
|
+
return
|
198
|
+
|
199
|
+
if response == "DISKS":
|
200
|
+
self._on_disk(hostname, msg.payload)
|
201
|
+
elif response == "READ":
|
202
|
+
self._on_read(hostname, tokens, msg.payload)
|
203
|
+
elif response == "ID":
|
204
|
+
self._on_id(hostname, msg.payload)
|
205
|
+
|
206
|
+
def seek(self, host: str, disk_id: int, offset: int, length: int, optimization_strategy: int) -> None:
|
207
|
+
self.mqtt_client.publish(
|
208
|
+
f"{self.case}/{host}/SEEK/{disk_id}/{hex(offset)}/{hex(length)}", pack("<I", optimization_strategy)
|
209
|
+
)
|
210
|
+
|
211
|
+
def info(self, host: str) -> None:
|
212
|
+
self.mqtt_client.publish(f"{self.case}/{host}/INFO")
|
213
|
+
|
214
|
+
def topology(self, host: str) -> None:
|
215
|
+
self.topo[host] = []
|
216
|
+
self.mqtt_client.subscribe(f"{self.case}/{host}/ID")
|
217
|
+
time.sleep(1) # need some time to avoid race condition, i.e. MQTT might react too fast
|
218
|
+
self.mqtt_client.publish(f"{self.case}/{host}/TOPO")
|
219
|
+
|
220
|
+
def connect(self) -> None:
|
221
|
+
self.mqtt_client = mqtt.Client(
|
222
|
+
client_id="", clean_session=True, userdata=None, protocol=mqtt.MQTTv311, transport="tcp"
|
223
|
+
)
|
224
|
+
self.mqtt_client.tls_set(
|
225
|
+
ca_certs=self.cacert_file,
|
226
|
+
certfile=self.certificate_file,
|
227
|
+
keyfile=self.private_key_file,
|
228
|
+
cert_reqs=ssl.CERT_REQUIRED,
|
229
|
+
tls_version=ssl.PROTOCOL_TLS,
|
230
|
+
ciphers=None,
|
231
|
+
)
|
232
|
+
self.mqtt_client.tls_insecure_set(True) # merely having the correct cert is ok
|
233
|
+
self.mqtt_client.on_connect = self._on_connect
|
234
|
+
self.mqtt_client.on_message = self._on_message
|
235
|
+
if log.getEffectiveLevel() == logging.DEBUG:
|
236
|
+
self.mqtt_client.on_log = self._on_log
|
237
|
+
self.mqtt_client.connect(self.broker_host, port=self.broker_port, keepalive=60)
|
238
|
+
self.mqtt_client.loop_start()
|
239
|
+
|
240
|
+
|
241
|
+
@arg("--mqtt-peers", type=int, dest="peers", help="minimum number of peers to await for first alias")
|
242
|
+
@arg("--mqtt-case", dest="case", help="case name (broker will determine if you are allowed to access this data)")
|
243
|
+
@arg("--mqtt-port", type=int, dest="port", help="broker connection port")
|
244
|
+
@arg("--mqtt-broker", dest="broker", help="broker ip-address")
|
245
|
+
@arg("--mqtt-key", dest="key", help="private key file")
|
246
|
+
@arg("--mqtt-crt", dest="crt", help="client certificate file")
|
247
|
+
@arg("--mqtt-ca", dest="ca", help="certificate authority file")
|
248
|
+
class MQTTLoader(Loader):
|
249
|
+
"""Load remote targets through a broker."""
|
250
|
+
|
251
|
+
PATH = "/remote/data/hosts.txt"
|
252
|
+
FOLDER = "/remote/hosts"
|
253
|
+
|
254
|
+
connection = None
|
255
|
+
broker = None
|
256
|
+
peers = []
|
257
|
+
|
258
|
+
def __init__(self, path: Union[Path, str], **kwargs):
|
259
|
+
super().__init__(path)
|
260
|
+
cls = MQTTLoader
|
261
|
+
|
262
|
+
if str(path).startswith("/remote/hosts/host"):
|
263
|
+
self.path = path.read_text() # update path to reflect the resolved host
|
264
|
+
|
265
|
+
num_peers = 1
|
266
|
+
if cls.broker is None:
|
267
|
+
if (uri := kwargs.get("parsed_path")) is None:
|
268
|
+
raise LoaderError("No URI connection details has been passed.")
|
269
|
+
options = dict(urllib.parse.parse_qsl(uri.query, keep_blank_values=True))
|
270
|
+
cls.broker = Broker(**options)
|
271
|
+
cls.broker.connect()
|
272
|
+
num_peers = int(options.get("peers", 1))
|
273
|
+
|
274
|
+
self.broker = cls.broker
|
275
|
+
self.connection = MQTTConnection(self.broker, self.path)
|
276
|
+
self.peers = self.connection.topo(num_peers)
|
277
|
+
|
278
|
+
def map(self, target: Target) -> None:
|
279
|
+
if len(self.peers) == 1 and self.peers[0] == str(self.path):
|
280
|
+
target.path = Path(str(self.path))
|
281
|
+
for disk in self.connection.info():
|
282
|
+
target.disks.add(RawContainer(disk))
|
283
|
+
else:
|
284
|
+
target.mqtt = True
|
285
|
+
vfs = VirtualFilesystem()
|
286
|
+
vfs.map_file_fh(self.PATH, BytesIO("\n".join(self.peers).encode("utf-8")))
|
287
|
+
for index, peer in enumerate(self.peers):
|
288
|
+
vfs.map_file_fh(f"{self.FOLDER}/host{index}-{peer}", BytesIO(peer.encode("utf-8")))
|
289
|
+
|
290
|
+
target.fs.mount("/data", vfs)
|
291
|
+
target.filesystems.add(vfs)
|
292
|
+
|
293
|
+
@staticmethod
|
294
|
+
def detect(path: Path) -> bool:
|
295
|
+
return str(path).startswith("/remote/hosts/host")
|
@@ -0,0 +1,215 @@
|
|
1
|
+
from __future__ import annotations
|
2
|
+
|
3
|
+
import io
|
4
|
+
import itertools
|
5
|
+
from itertools import product
|
6
|
+
from typing import Iterable, Iterator, Optional, Union
|
7
|
+
|
8
|
+
from dissect.target.exceptions import ConfigurationParsingError, UnsupportedPluginError
|
9
|
+
from dissect.target.helpers import fsutil
|
10
|
+
from dissect.target.helpers.configutil import Default, ListUnwrapper, _update_dictionary
|
11
|
+
from dissect.target.helpers.record import TargetRecordDescriptor
|
12
|
+
from dissect.target.plugin import OperatingSystem, Plugin, arg, export
|
13
|
+
|
14
|
+
COMMON_ELEMENTS = [
|
15
|
+
("string", "name"), # basename of .conf file
|
16
|
+
("string", "proto"),
|
17
|
+
("string", "dev"),
|
18
|
+
("string", "ca"),
|
19
|
+
("string", "cert"),
|
20
|
+
("string", "key"),
|
21
|
+
("boolean", "redacted_key"),
|
22
|
+
("string", "tls_auth"),
|
23
|
+
("string", "status"),
|
24
|
+
("string", "log"),
|
25
|
+
("string", "source"),
|
26
|
+
]
|
27
|
+
|
28
|
+
OpenVPNServer = TargetRecordDescriptor(
|
29
|
+
"application/vpn/openvpn/server",
|
30
|
+
[
|
31
|
+
("net.ipaddress", "local"),
|
32
|
+
("uint16", "port"),
|
33
|
+
("string", "dh"),
|
34
|
+
("string", "topology"),
|
35
|
+
("string", "server"),
|
36
|
+
("string", "ifconfig_pool_persist"),
|
37
|
+
("string[]", "pushed_options"),
|
38
|
+
("boolean", "client_to_client"),
|
39
|
+
("boolean", "duplicate_cn"),
|
40
|
+
*COMMON_ELEMENTS,
|
41
|
+
],
|
42
|
+
)
|
43
|
+
|
44
|
+
OpenVPNClient = TargetRecordDescriptor(
|
45
|
+
"application/vpn/openvpn/client",
|
46
|
+
[
|
47
|
+
("string[]", "remote"),
|
48
|
+
*COMMON_ELEMENTS,
|
49
|
+
],
|
50
|
+
)
|
51
|
+
|
52
|
+
|
53
|
+
class OpenVPNParser(Default):
|
54
|
+
def __init__(self, *args, **kwargs):
|
55
|
+
boolean_fields = OpenVPNServer.getfields("boolean") + OpenVPNClient.getfields("boolean")
|
56
|
+
self.boolean_field_names = set(field.name.replace("_", "-") for field in boolean_fields)
|
57
|
+
|
58
|
+
super().__init__(*args, separator=(r"\s",), collapse=["key", "ca", "cert"], **kwargs)
|
59
|
+
|
60
|
+
def parse_file(self, fh: io.TextIOBase) -> None:
|
61
|
+
root = {}
|
62
|
+
iterator = self.line_reader(fh)
|
63
|
+
for line in iterator:
|
64
|
+
if line.startswith("<"):
|
65
|
+
key = line.strip().strip("<>")
|
66
|
+
value = self._read_blob(iterator)
|
67
|
+
_update_dictionary(root, key, value)
|
68
|
+
continue
|
69
|
+
|
70
|
+
self._parse_line(root, line)
|
71
|
+
|
72
|
+
self.parsed_data = ListUnwrapper.unwrap(root)
|
73
|
+
|
74
|
+
def _read_blob(self, lines: Iterable[str]) -> str | list[dict]:
|
75
|
+
"""Read the whole section between <data></data> sections"""
|
76
|
+
output = ""
|
77
|
+
with io.StringIO() as buffer:
|
78
|
+
for line in lines:
|
79
|
+
if "</" in line:
|
80
|
+
break
|
81
|
+
|
82
|
+
buffer.write(line)
|
83
|
+
output = buffer.getvalue()
|
84
|
+
|
85
|
+
# Check for connection profile blocks
|
86
|
+
if not output.startswith("-----"):
|
87
|
+
profile_dict = dict()
|
88
|
+
for line in output.splitlines():
|
89
|
+
self._parse_line(profile_dict, line)
|
90
|
+
|
91
|
+
# We put it as a list as _update_dictionary appends data in a list.
|
92
|
+
output = [profile_dict]
|
93
|
+
|
94
|
+
return output
|
95
|
+
|
96
|
+
def _parse_line(self, root: dict, line: str) -> None:
|
97
|
+
key, *value = self.SEPARATOR.split(line, 1)
|
98
|
+
# Unquote data
|
99
|
+
value = value[0].strip() if value else ""
|
100
|
+
|
101
|
+
value = value.strip("'\"")
|
102
|
+
|
103
|
+
if key in self.boolean_field_names:
|
104
|
+
value = True
|
105
|
+
|
106
|
+
_update_dictionary(root, key, value)
|
107
|
+
|
108
|
+
|
109
|
+
class OpenVPNPlugin(Plugin):
|
110
|
+
"""OpenVPN configuration parser.
|
111
|
+
|
112
|
+
References:
|
113
|
+
- man (8) openvpn
|
114
|
+
"""
|
115
|
+
|
116
|
+
__namespace__ = "openvpn"
|
117
|
+
|
118
|
+
config_globs = [
|
119
|
+
# This catches openvpn@, openvpn-client@, and openvpn-server@ systemd configurations
|
120
|
+
# Linux
|
121
|
+
"/etc/openvpn/",
|
122
|
+
# Windows
|
123
|
+
"sysvol/Program Files/OpenVPN/config/",
|
124
|
+
]
|
125
|
+
|
126
|
+
user_config_paths = {
|
127
|
+
OperatingSystem.WINDOWS.value: ["OpenVPN/config/"],
|
128
|
+
OperatingSystem.OSX.value: ["Library/Application Support/OpenVPN Connect/profiles/"],
|
129
|
+
}
|
130
|
+
|
131
|
+
def __init__(self, target) -> None:
|
132
|
+
super().__init__(target)
|
133
|
+
self.configs: list[fsutil.TargetPath] = []
|
134
|
+
for base, glob in product(self.config_globs, ["*.conf", "*.ovpn"]):
|
135
|
+
self.configs.extend(self.target.fs.path(base).rglob(glob))
|
136
|
+
|
137
|
+
user_paths = self.user_config_paths.get(target.os, [])
|
138
|
+
for path, glob, user_details in itertools.product(
|
139
|
+
user_paths, ["*.conf", "*.ovpn"], self.target.user_details.all_with_home()
|
140
|
+
):
|
141
|
+
self.configs.extend(user_details.home_path.joinpath(path).rglob(glob))
|
142
|
+
|
143
|
+
def check_compatible(self) -> None:
|
144
|
+
if not self.configs:
|
145
|
+
raise UnsupportedPluginError("No OpenVPN configuration files found")
|
146
|
+
|
147
|
+
def _load_config(self, parser: OpenVPNParser, config_path: fsutil.TargetPath) -> Optional[dict]:
|
148
|
+
with config_path.open("rt") as file:
|
149
|
+
try:
|
150
|
+
parser.parse_file(file)
|
151
|
+
except ConfigurationParsingError as e:
|
152
|
+
# Couldn't parse file, continue
|
153
|
+
self.target.log.info("An issue occurred during parsing of %s, continuing", config_path)
|
154
|
+
self.target.log.debug("", exc_info=e)
|
155
|
+
return None
|
156
|
+
|
157
|
+
return parser.parsed_data
|
158
|
+
|
159
|
+
@export(record=[OpenVPNServer, OpenVPNClient])
|
160
|
+
@arg("--export-key", action="store_true")
|
161
|
+
def config(self, export_key: bool = False) -> Iterator[Union[OpenVPNServer, OpenVPNClient]]:
|
162
|
+
"""Parses config files from openvpn interfaces."""
|
163
|
+
# We define the parser here so we can reuse it
|
164
|
+
parser = OpenVPNParser()
|
165
|
+
|
166
|
+
for config_path in self.configs:
|
167
|
+
config = self._load_config(parser, config_path)
|
168
|
+
|
169
|
+
common_elements = {
|
170
|
+
"name": config_path.stem,
|
171
|
+
"proto": config.get("proto", "udp"), # Default is UDP
|
172
|
+
"dev": config.get("dev"),
|
173
|
+
"ca": config.get("ca"),
|
174
|
+
"cert": config.get("cert"),
|
175
|
+
"key": config.get("key"),
|
176
|
+
"status": config.get("status"),
|
177
|
+
"log": config.get("log"),
|
178
|
+
"source": config_path,
|
179
|
+
"_target": self.target,
|
180
|
+
}
|
181
|
+
|
182
|
+
if not export_key and "PRIVATE KEY" in common_elements.get("key"):
|
183
|
+
common_elements.update({"key": None})
|
184
|
+
common_elements.update({"redacted_key": True})
|
185
|
+
|
186
|
+
tls_auth = config.get("tls-auth", "")
|
187
|
+
# The format of tls-auth is 'tls-auth ta.key <NUM>'.
|
188
|
+
# NUM is either 0 or 1 depending on whether the configuration
|
189
|
+
# is for the client or server, and that does not interest us
|
190
|
+
# This gets rid of the number at the end, while still supporting spaces
|
191
|
+
tls_auth = " ".join(tls_auth.split(" ")[:-1]).strip("'\"")
|
192
|
+
|
193
|
+
common_elements.update({"tls_auth": tls_auth})
|
194
|
+
|
195
|
+
if "client" in config:
|
196
|
+
remote = config.get("remote", [])
|
197
|
+
|
198
|
+
yield OpenVPNClient(
|
199
|
+
**common_elements,
|
200
|
+
remote=remote,
|
201
|
+
)
|
202
|
+
else:
|
203
|
+
# Defaults here are taken from `man (8) openvpn`
|
204
|
+
yield OpenVPNServer(
|
205
|
+
**common_elements,
|
206
|
+
local=config.get("local", "0.0.0.0"),
|
207
|
+
port=int(config.get("port", "1194")),
|
208
|
+
dh=config.get("dh"),
|
209
|
+
topology=config.get("topology"),
|
210
|
+
server=config.get("server"),
|
211
|
+
ifconfig_pool_persist=config.get("ifconfig-pool-persist"),
|
212
|
+
pushed_options=config.get("push", []),
|
213
|
+
client_to_client=config.get("client-to-client", False),
|
214
|
+
duplicate_cn=config.get("duplicate-cn", False),
|
215
|
+
)
|
@@ -0,0 +1,35 @@
|
|
1
|
+
from __future__ import annotations
|
2
|
+
|
3
|
+
from typing import TYPE_CHECKING, Iterator
|
4
|
+
|
5
|
+
from flow.record.fieldtypes import posix_path
|
6
|
+
|
7
|
+
from dissect.target.exceptions import UnsupportedPluginError
|
8
|
+
from dissect.target.helpers.record import ChildTargetRecord
|
9
|
+
from dissect.target.plugin import ChildTargetPlugin
|
10
|
+
|
11
|
+
if TYPE_CHECKING:
|
12
|
+
from dissect.target.target import Target
|
13
|
+
|
14
|
+
|
15
|
+
class MQTT(ChildTargetPlugin):
|
16
|
+
"""Child target plugin that yields from remote broker."""
|
17
|
+
|
18
|
+
__type__ = "mqtt"
|
19
|
+
|
20
|
+
PATH = "/remote/data/hosts.txt"
|
21
|
+
FOLDER = "/remote/hosts"
|
22
|
+
|
23
|
+
def __init__(self, target: Target):
|
24
|
+
super().__init__(target)
|
25
|
+
|
26
|
+
def check_compatible(self) -> None:
|
27
|
+
if not self.target.mqtt or not self.target.fs.path(self.PATH).exists():
|
28
|
+
raise UnsupportedPluginError("No remote children.txt file found.")
|
29
|
+
|
30
|
+
def list_children(self) -> Iterator[ChildTargetRecord]:
|
31
|
+
hosts = self.target.fs.path(self.PATH).read_text(encoding="utf-8").split("\n")
|
32
|
+
for index, host in enumerate(hosts):
|
33
|
+
yield ChildTargetRecord(
|
34
|
+
type=self.__type__, path=posix_path(f"{self.FOLDER}/host{index}-{host}"), _target=self.target
|
35
|
+
)
|
@@ -37,6 +37,7 @@ from dissect.target.plugin import arg
|
|
37
37
|
from dissect.target.target import Target
|
38
38
|
from dissect.target.tools.info import print_target_info
|
39
39
|
from dissect.target.tools.utils import (
|
40
|
+
args_to_uri,
|
40
41
|
catch_sigpipe,
|
41
42
|
configure_generic_arguments,
|
42
43
|
generate_argparse_for_bound_method,
|
@@ -1223,10 +1224,17 @@ def main() -> None:
|
|
1223
1224
|
parser.add_argument("targets", metavar="TARGETS", nargs="*", help="targets to load")
|
1224
1225
|
parser.add_argument("-p", "--python", action="store_true", help="(I)Python shell")
|
1225
1226
|
parser.add_argument("-r", "--registry", action="store_true", help="registry shell")
|
1227
|
+
parser.add_argument(
|
1228
|
+
"-L",
|
1229
|
+
"--loader",
|
1230
|
+
action="store",
|
1231
|
+
default=None,
|
1232
|
+
help="select a specific loader (i.e. vmx, raw)",
|
1233
|
+
)
|
1226
1234
|
|
1227
1235
|
configure_generic_arguments(parser)
|
1228
|
-
args = parser.
|
1229
|
-
|
1236
|
+
args, rest = parser.parse_known_args()
|
1237
|
+
args.targets = args_to_uri(args.targets, args.loader, rest) if args.loader else args.targets
|
1230
1238
|
process_generic_arguments(args)
|
1231
1239
|
|
1232
1240
|
# For the shell tool we want -q to log slightly more then just CRITICAL
|
@@ -1,6 +1,6 @@
|
|
1
1
|
Metadata-Version: 2.1
|
2
2
|
Name: dissect.target
|
3
|
-
Version: 3.17.
|
3
|
+
Version: 3.17.dev5
|
4
4
|
Summary: This module ties all other Dissect modules together, it provides a programming API and command line tools which allow easy access to various data sources inside disk images or file collections (a.k.a. targets)
|
5
5
|
Author-email: Dissect Team <dissect@fox-it.com>
|
6
6
|
License: Affero General Public License v3
|
@@ -64,6 +64,9 @@ Requires-Dist: impacket==0.10.0; extra == "smb"
|
|
64
64
|
Provides-Extra: cb
|
65
65
|
Requires-Dist: dissect.target[full]; extra == "cb"
|
66
66
|
Requires-Dist: carbon-black-cloud-sdk~=1.4.3; extra == "cb"
|
67
|
+
Provides-Extra: mqtt
|
68
|
+
Requires-Dist: dissect.target[full]; extra == "mqtt"
|
69
|
+
Requires-Dist: paho-mqtt==1.6.1; extra == "mqtt"
|
67
70
|
|
68
71
|
# dissect.target
|
69
72
|
|
@@ -96,6 +96,7 @@ dissect/target/loaders/itunes.py
|
|
96
96
|
dissect/target/loaders/kape.py
|
97
97
|
dissect/target/loaders/local.py
|
98
98
|
dissect/target/loaders/log.py
|
99
|
+
dissect/target/loaders/mqtt.py
|
99
100
|
dissect/target/loaders/multiraw.py
|
100
101
|
dissect/target/loaders/ova.py
|
101
102
|
dissect/target/loaders/ovf.py
|
@@ -162,6 +163,7 @@ dissect/target/plugins/apps/webserver/webserver.py
|
|
162
163
|
dissect/target/plugins/child/__init__.py
|
163
164
|
dissect/target/plugins/child/esxi.py
|
164
165
|
dissect/target/plugins/child/hyperv.py
|
166
|
+
dissect/target/plugins/child/mqtt.py
|
165
167
|
dissect/target/plugins/child/virtuozzo.py
|
166
168
|
dissect/target/plugins/child/vmware_workstation.py
|
167
169
|
dissect/target/plugins/child/wsl.py
|
@@ -396,6 +398,7 @@ tests/loaders/test_hyperv.py
|
|
396
398
|
tests/loaders/test_kape.py
|
397
399
|
tests/loaders/test_local.py
|
398
400
|
tests/loaders/test_log.py
|
401
|
+
tests/loaders/test_mqtt.py
|
399
402
|
tests/loaders/test_multiraw.py
|
400
403
|
tests/loaders/test_ova.py
|
401
404
|
tests/loaders/test_ovf.py
|
@@ -90,6 +90,11 @@ cb = [
|
|
90
90
|
"dissect.target[full]",
|
91
91
|
"carbon-black-cloud-sdk~=1.4.3"
|
92
92
|
]
|
93
|
+
mqtt = [
|
94
|
+
# Grab the dependencies for dissect.target
|
95
|
+
"dissect.target[full]",
|
96
|
+
"paho-mqtt==1.6.1",
|
97
|
+
]
|
93
98
|
|
94
99
|
[project.scripts]
|
95
100
|
target-build-pluginlist = "dissect.target.tools.build_pluginlist:main"
|