dissect.target 3.20.2.dev16__py3-none-any.whl → 3.20.2.dev18__py3-none-any.whl
Sign up to get free protection for your applications and to get access to all the features.
- dissect/target/plugins/apps/other/env.py +2 -0
- dissect/target/plugins/os/windows/credential/credhist.py +1 -1
- dissect/target/plugins/os/windows/generic.py +2 -1
- {dissect.target-3.20.2.dev16.dist-info → dissect.target-3.20.2.dev18.dist-info}/METADATA +1 -1
- {dissect.target-3.20.2.dev16.dist-info → dissect.target-3.20.2.dev18.dist-info}/RECORD +10 -10
- {dissect.target-3.20.2.dev16.dist-info → dissect.target-3.20.2.dev18.dist-info}/COPYRIGHT +0 -0
- {dissect.target-3.20.2.dev16.dist-info → dissect.target-3.20.2.dev18.dist-info}/LICENSE +0 -0
- {dissect.target-3.20.2.dev16.dist-info → dissect.target-3.20.2.dev18.dist-info}/WHEEL +0 -0
- {dissect.target-3.20.2.dev16.dist-info → dissect.target-3.20.2.dev18.dist-info}/entry_points.txt +0 -0
- {dissect.target-3.20.2.dev16.dist-info → dissect.target-3.20.2.dev18.dist-info}/top_level.txt +0 -0
@@ -31,9 +31,11 @@ class EnvironmentFilePlugin(Plugin):
|
|
31
31
|
|
32
32
|
if not env_path:
|
33
33
|
self.target.log.error("No ``--path`` provided!")
|
34
|
+
return
|
34
35
|
|
35
36
|
if not (path := self.target.fs.path(env_path)).exists():
|
36
37
|
self.target.log.error("Provided path %s does not exist!", path)
|
38
|
+
return
|
37
39
|
|
38
40
|
for file in path.glob("**/*." + extension):
|
39
41
|
if not file.is_file():
|
@@ -125,7 +125,7 @@ class CredHistFile:
|
|
125
125
|
yield CredHistEntry(
|
126
126
|
version=entry.dwVersion,
|
127
127
|
guid=UUID(bytes_le=entry.guidLink),
|
128
|
-
user_sid=read_sid(entry.pSid),
|
128
|
+
user_sid=read_sid(entry.pSid) if entry.pSid else None,
|
129
129
|
hash_alg=HashAlgorithm.from_id(entry.algHash),
|
130
130
|
cipher_alg=cipher_alg,
|
131
131
|
sha1=None,
|
@@ -611,11 +611,12 @@ class GenericPlugin(Plugin):
|
|
611
611
|
|
612
612
|
try:
|
613
613
|
key = self.target.registry.key("HKLM\\SECURITY\\Policy\\PolMachineAccountS")
|
614
|
+
raw_sid = key.value("(Default)").value
|
614
615
|
|
615
616
|
yield ComputerSidRecord(
|
616
617
|
ts=key.timestamp,
|
617
618
|
sidtype="Domain",
|
618
|
-
sid=read_sid(
|
619
|
+
sid=read_sid(raw_sid) if raw_sid else None,
|
619
620
|
_target=self.target,
|
620
621
|
)
|
621
622
|
except (RegistryError, struct.error):
|
@@ -1,6 +1,6 @@
|
|
1
1
|
Metadata-Version: 2.2
|
2
2
|
Name: dissect.target
|
3
|
-
Version: 3.20.2.
|
3
|
+
Version: 3.20.2.dev18
|
4
4
|
Summary: This module ties all other Dissect modules together, it provides a programming API and command line tools which allow easy access to various data sources inside disk images or file collections (a.k.a. targets)
|
5
5
|
Author-email: Dissect Team <dissect@fox-it.com>
|
6
6
|
License: Affero General Public License v3
|
@@ -133,7 +133,7 @@ dissect/target/plugins/apps/editor/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQe
|
|
133
133
|
dissect/target/plugins/apps/editor/editor.py,sha256=yJctXY0XTfwW3GKy6XLO2WaWFQLssdBck9ZOcZSyf80,495
|
134
134
|
dissect/target/plugins/apps/editor/windowsnotepad.py,sha256=A9cfFrqbU2zjHRrzYsCnXr-uxKAIsVIKdXXJPYMt6MU,15068
|
135
135
|
dissect/target/plugins/apps/other/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
136
|
-
dissect/target/plugins/apps/other/env.py,sha256=
|
136
|
+
dissect/target/plugins/apps/other/env.py,sha256=cPPxsrTh1h4v3qZa0XBwblWBZyPGAboZ-lZrrrenDoA,1912
|
137
137
|
dissect/target/plugins/apps/remoteaccess/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
138
138
|
dissect/target/plugins/apps/remoteaccess/anydesk.py,sha256=IdijK3F6ppaB_IgKL-xDljlEbb8l9S2U0xSWKqK9xRs,4294
|
139
139
|
dissect/target/plugins/apps/remoteaccess/remoteaccess.py,sha256=DWXkRDVUpFr1icK2fYwSXdZD204Xz0yRuO7rcJOwIwc,825
|
@@ -287,7 +287,7 @@ dissect/target/plugins/os/windows/clfs.py,sha256=begVsZ-CY97Ksh6S1g03LjyBgu8ERY2
|
|
287
287
|
dissect/target/plugins/os/windows/datetime.py,sha256=YKHUZU6lkKJocq15y0yCwvIIOb1Ej-kfvEBmHbrdIGw,9467
|
288
288
|
dissect/target/plugins/os/windows/defender.py,sha256=JAJy8hr6jFGd290N1d5a-bVeD8rHc6E_pWEHxTpiMDk,32735
|
289
289
|
dissect/target/plugins/os/windows/env.py,sha256=U5D74i_7tICxGDanqDU42Jqsx0asFFMIs6SpUwTnJc4,13884
|
290
|
-
dissect/target/plugins/os/windows/generic.py,sha256=
|
290
|
+
dissect/target/plugins/os/windows/generic.py,sha256=6jNRUrbvME3P7amvs3FxCuEtK7FLO2kiaNstAPv0JS8,24313
|
291
291
|
dissect/target/plugins/os/windows/jumplist.py,sha256=3gZk6O1B3lKK2Jxe0B-HapOCEehk94CYNvCVDpQC9nQ,11773
|
292
292
|
dissect/target/plugins/os/windows/lnk.py,sha256=AvqVmvP-QWHPKEI49hP-JeOVSI2R3Vxpy-lpfT70pSg,8097
|
293
293
|
dissect/target/plugins/os/windows/locale.py,sha256=QiLWGgWrGBGHiXgep5iSOo6VNim4YC-xd4MdW0BUJPA,2486
|
@@ -306,7 +306,7 @@ dissect/target/plugins/os/windows/ual.py,sha256=S43ltndKKrs2SqeDLgZv4dzdqtJD8c3Y
|
|
306
306
|
dissect/target/plugins/os/windows/wer.py,sha256=y4ZU6Yai53UsZ4VLr0V9_uLhZJZ_UEtdPuNzxKbGoEY,9269
|
307
307
|
dissect/target/plugins/os/windows/wua_history.py,sha256=QNtOQNZWKsKyUUrUV8aeoAMDKoH-ERkLx8ahnJzpHCY,54783
|
308
308
|
dissect/target/plugins/os/windows/credential/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
309
|
-
dissect/target/plugins/os/windows/credential/credhist.py,sha256=
|
309
|
+
dissect/target/plugins/os/windows/credential/credhist.py,sha256=MBpnVycpQTbjD1THb5MbpKSBFYs8g8l1gCP68VamkIk,7082
|
310
310
|
dissect/target/plugins/os/windows/credential/lsa.py,sha256=bo5zS4gDvMDU0c4456ZJ4FrDkcTnWdpmLaQZnZ33_fI,5638
|
311
311
|
dissect/target/plugins/os/windows/credential/sam.py,sha256=iRqMNPLqrObJG2h6brzvAyeVBnIIgHVX_p_Hw_Jfa3A,15599
|
312
312
|
dissect/target/plugins/os/windows/defender_helpers/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
@@ -383,10 +383,10 @@ dissect/target/volumes/luks.py,sha256=OmCMsw6rCUXG1_plnLVLTpsvE1n_6WtoRUGQbpmu1z
|
|
383
383
|
dissect/target/volumes/lvm.py,sha256=wwQVR9I3G9YzmY6UxFsH2Y4MXGBcKL9aayWGCDTiWMU,2269
|
384
384
|
dissect/target/volumes/md.py,sha256=7ShPtusuLGaIv27SvEETtgsuoQyAa4iAAeOR1NEaajI,1689
|
385
385
|
dissect/target/volumes/vmfs.py,sha256=-LoUbn9WNwTtLi_4K34uV_-wDw2W5hgaqxZNj4UmqAQ,1730
|
386
|
-
dissect.target-3.20.2.
|
387
|
-
dissect.target-3.20.2.
|
388
|
-
dissect.target-3.20.2.
|
389
|
-
dissect.target-3.20.2.
|
390
|
-
dissect.target-3.20.2.
|
391
|
-
dissect.target-3.20.2.
|
392
|
-
dissect.target-3.20.2.
|
386
|
+
dissect.target-3.20.2.dev18.dist-info/COPYRIGHT,sha256=m-9ih2RVhMiXHI2bf_oNSSgHgkeIvaYRVfKTwFbnJPA,301
|
387
|
+
dissect.target-3.20.2.dev18.dist-info/LICENSE,sha256=DZak_2itbUtvHzD3E7GNUYSRK6jdOJ-GqncQ2weavLA,34523
|
388
|
+
dissect.target-3.20.2.dev18.dist-info/METADATA,sha256=00TFdFOMCgSoK2idKSkrM1feUK6d3CjowDYf0zIcOpE,13184
|
389
|
+
dissect.target-3.20.2.dev18.dist-info/WHEEL,sha256=In9FTNxeP60KnTkGw7wk6mJPYd_dQSjEZmXdBdMCI-8,91
|
390
|
+
dissect.target-3.20.2.dev18.dist-info/entry_points.txt,sha256=yQwLCWUuzHgS6-sfCcRk66gAfoCfqXdCjqKjvhnQW8o,537
|
391
|
+
dissect.target-3.20.2.dev18.dist-info/top_level.txt,sha256=Mn-CQzEYsAbkxrUI0TnplHuXnGVKzxpDw_po_sXpvv4,8
|
392
|
+
dissect.target-3.20.2.dev18.dist-info/RECORD,,
|
File without changes
|
File without changes
|
File without changes
|
{dissect.target-3.20.2.dev16.dist-info → dissect.target-3.20.2.dev18.dist-info}/entry_points.txt
RENAMED
File without changes
|
{dissect.target-3.20.2.dev16.dist-info → dissect.target-3.20.2.dev18.dist-info}/top_level.txt
RENAMED
File without changes
|