dissect.target 3.20.dev49__py3-none-any.whl → 3.20.dev51__py3-none-any.whl
Sign up to get free protection for your applications and to get access to all the features.
- dissect/target/container.py +1 -1
- dissect/target/exceptions.py +3 -2
- dissect/target/filesystem.py +2 -2
- dissect/target/filesystems/btrfs.py +4 -4
- dissect/target/filesystems/extfs.py +4 -4
- dissect/target/filesystems/fat.py +3 -3
- dissect/target/filesystems/ffs.py +4 -4
- dissect/target/filesystems/jffs.py +4 -4
- dissect/target/filesystems/ntfs.py +4 -4
- dissect/target/filesystems/smb.py +3 -3
- dissect/target/filesystems/squashfs.py +4 -4
- dissect/target/filesystems/vmfs.py +4 -4
- dissect/target/filesystems/xfs.py +7 -7
- dissect/target/helpers/regutil.py +5 -4
- dissect/target/plugin.py +1 -1
- dissect/target/plugins/general/network.py +5 -5
- dissect/target/plugins/os/unix/bsd/osx/_os.py +1 -4
- dissect/target/plugins/os/unix/linux/_os.py +4 -6
- dissect/target/plugins/os/windows/_os.py +1 -1
- dissect/target/plugins/os/windows/network.py +102 -86
- dissect/target/target.py +6 -7
- dissect/target/tools/info.py +1 -1
- dissect/target/tools/utils.py +3 -3
- dissect/target/volume.py +4 -4
- {dissect.target-3.20.dev49.dist-info → dissect.target-3.20.dev51.dist-info}/METADATA +2 -2
- {dissect.target-3.20.dev49.dist-info → dissect.target-3.20.dev51.dist-info}/RECORD +31 -31
- {dissect.target-3.20.dev49.dist-info → dissect.target-3.20.dev51.dist-info}/COPYRIGHT +0 -0
- {dissect.target-3.20.dev49.dist-info → dissect.target-3.20.dev51.dist-info}/LICENSE +0 -0
- {dissect.target-3.20.dev49.dist-info → dissect.target-3.20.dev51.dist-info}/WHEEL +0 -0
- {dissect.target-3.20.dev49.dist-info → dissect.target-3.20.dev51.dist-info}/entry_points.txt +0 -0
- {dissect.target-3.20.dev49.dist-info → dissect.target-3.20.dev51.dist-info}/top_level.txt +0 -0
dissect/target/container.py
CHANGED
@@ -239,7 +239,7 @@ def open(item: Union[list, str, BinaryIO, Path], *args, **kwargs):
|
|
239
239
|
log.info("Failed to import %s", container)
|
240
240
|
log.debug("", exc_info=e)
|
241
241
|
except Exception as e:
|
242
|
-
raise ContainerError(f"Failed to open container {item}"
|
242
|
+
raise ContainerError(f"Failed to open container {item}") from e
|
243
243
|
finally:
|
244
244
|
if first_fh_opened:
|
245
245
|
first_fh.close()
|
dissect/target/exceptions.py
CHANGED
@@ -1,3 +1,5 @@
|
|
1
|
+
from __future__ import annotations
|
2
|
+
|
1
3
|
import os
|
2
4
|
import sys
|
3
5
|
import traceback
|
@@ -7,13 +9,12 @@ from typing import Callable
|
|
7
9
|
class Error(Exception):
|
8
10
|
"""Generic dissect.target error"""
|
9
11
|
|
10
|
-
def __init__(self, message
|
12
|
+
def __init__(self, message: str | None = None, extra: list[Exception] | None = None):
|
11
13
|
if extra:
|
12
14
|
exceptions = "\n\n".join(["".join(traceback.format_exception_only(type(e), e)) for e in extra])
|
13
15
|
message = f"{message}\n\nAdditionally, the following exceptions occurred:\n\n{exceptions}"
|
14
16
|
|
15
17
|
super().__init__(message)
|
16
|
-
self.__cause__ = cause
|
17
18
|
self.__extra__ = extra
|
18
19
|
|
19
20
|
|
dissect/target/filesystem.py
CHANGED
@@ -1142,7 +1142,7 @@ class VirtualFilesystem(Filesystem):
|
|
1142
1142
|
try:
|
1143
1143
|
return entry.top.get(fsutil.join(*parts[i:], alt_separator=self.alt_separator))
|
1144
1144
|
except FilesystemError as e:
|
1145
|
-
raise FileNotFoundError(full_path
|
1145
|
+
raise FileNotFoundError(full_path) from e
|
1146
1146
|
else:
|
1147
1147
|
raise FileNotFoundError(full_path)
|
1148
1148
|
|
@@ -1715,7 +1715,7 @@ def open(fh: BinaryIO, *args, **kwargs) -> Filesystem:
|
|
1715
1715
|
log.info("Failed to import %s", filesystem)
|
1716
1716
|
log.debug("", exc_info=e)
|
1717
1717
|
except Exception as e:
|
1718
|
-
raise FilesystemError(f"Failed to open filesystem for {fh}"
|
1718
|
+
raise FilesystemError(f"Failed to open filesystem for {fh}") from e
|
1719
1719
|
finally:
|
1720
1720
|
fh.seek(offset)
|
1721
1721
|
|
@@ -79,13 +79,13 @@ class BtrfsSubvolumeFilesystem(Filesystem):
|
|
79
79
|
try:
|
80
80
|
return self.subvolume.get(path, node)
|
81
81
|
except btrfs.FileNotFoundError as e:
|
82
|
-
raise FileNotFoundError(path
|
82
|
+
raise FileNotFoundError(path) from e
|
83
83
|
except btrfs.NotADirectoryError as e:
|
84
|
-
raise NotADirectoryError(path
|
84
|
+
raise NotADirectoryError(path) from e
|
85
85
|
except btrfs.NotASymlinkError as e:
|
86
|
-
raise NotASymlinkError(path
|
86
|
+
raise NotASymlinkError(path) from e
|
87
87
|
except btrfs.Error as e:
|
88
|
-
raise FileNotFoundError(path
|
88
|
+
raise FileNotFoundError(path) from e
|
89
89
|
|
90
90
|
|
91
91
|
class BtrfsFilesystemEntry(FilesystemEntry):
|
@@ -33,13 +33,13 @@ class ExtFilesystem(Filesystem):
|
|
33
33
|
try:
|
34
34
|
return self.extfs.get(path, node)
|
35
35
|
except extfs.FileNotFoundError as e:
|
36
|
-
raise FileNotFoundError(path
|
36
|
+
raise FileNotFoundError(path) from e
|
37
37
|
except extfs.NotADirectoryError as e:
|
38
|
-
raise NotADirectoryError(path
|
38
|
+
raise NotADirectoryError(path) from e
|
39
39
|
except extfs.NotASymlinkError as e:
|
40
|
-
raise NotASymlinkError(path
|
40
|
+
raise NotASymlinkError(path) from e
|
41
41
|
except extfs.Error as e:
|
42
|
-
raise FileNotFoundError(path
|
42
|
+
raise FileNotFoundError(path) from e
|
43
43
|
|
44
44
|
|
45
45
|
class ExtFilesystemEntry(FilesystemEntry):
|
@@ -41,11 +41,11 @@ class FatFilesystem(Filesystem):
|
|
41
41
|
try:
|
42
42
|
return self.fatfs.get(path, dirent=entry)
|
43
43
|
except fat_exc.FileNotFoundError as e:
|
44
|
-
raise FileNotFoundError(path
|
44
|
+
raise FileNotFoundError(path) from e
|
45
45
|
except fat_exc.NotADirectoryError as e:
|
46
|
-
raise NotADirectoryError(path
|
46
|
+
raise NotADirectoryError(path) from e
|
47
47
|
except fat_exc.Error as e:
|
48
|
-
raise FileNotFoundError(path
|
48
|
+
raise FileNotFoundError(path) from e
|
49
49
|
|
50
50
|
|
51
51
|
class FatFilesystemEntry(FilesystemEntry):
|
@@ -39,13 +39,13 @@ class FfsFilesystem(Filesystem):
|
|
39
39
|
try:
|
40
40
|
return self.ffs.get(path, node)
|
41
41
|
except ffs.FileNotFoundError as e:
|
42
|
-
raise FileNotFoundError(path
|
42
|
+
raise FileNotFoundError(path) from e
|
43
43
|
except ffs.NotADirectoryError as e:
|
44
|
-
raise NotADirectoryError(path
|
44
|
+
raise NotADirectoryError(path) from e
|
45
45
|
except ffs.NotASymlinkError as e:
|
46
|
-
raise NotASymlinkError(path
|
46
|
+
raise NotASymlinkError(path) from e
|
47
47
|
except ffs.Error as e:
|
48
|
-
raise FileNotFoundError(path
|
48
|
+
raise FileNotFoundError(path) from e
|
49
49
|
|
50
50
|
|
51
51
|
class FfsFilesystemEntry(FilesystemEntry):
|
@@ -35,13 +35,13 @@ class JFFSFilesystem(Filesystem):
|
|
35
35
|
try:
|
36
36
|
return self.jffs2.get(path, node)
|
37
37
|
except jffs2.FileNotFoundError as e:
|
38
|
-
raise FileNotFoundError(path
|
38
|
+
raise FileNotFoundError(path) from e
|
39
39
|
except jffs2.NotADirectoryError as e:
|
40
|
-
raise NotADirectoryError(path
|
40
|
+
raise NotADirectoryError(path) from e
|
41
41
|
except jffs2.NotASymlinkError as e:
|
42
|
-
raise NotASymlinkError(path
|
42
|
+
raise NotASymlinkError(path) from e
|
43
43
|
except jffs2.Error as e:
|
44
|
-
raise FileNotFoundError(path
|
44
|
+
raise FileNotFoundError(path) from e
|
45
45
|
|
46
46
|
|
47
47
|
class JFFSFilesystemEntry(FilesystemEntry):
|
@@ -48,12 +48,12 @@ class NtfsFilesystem(Filesystem):
|
|
48
48
|
try:
|
49
49
|
path = path.rsplit(":", maxsplit=1)[0]
|
50
50
|
return self.ntfs.mft.get(path, root=root)
|
51
|
-
except NtfsFileNotFoundError:
|
52
|
-
raise FileNotFoundError(path)
|
51
|
+
except NtfsFileNotFoundError as e:
|
52
|
+
raise FileNotFoundError(path) from e
|
53
53
|
except NtfsNotADirectoryError as e:
|
54
|
-
raise NotADirectoryError(path
|
54
|
+
raise NotADirectoryError(path) from e
|
55
55
|
except NtfsError as e:
|
56
|
-
raise FileNotFoundError(path
|
56
|
+
raise FileNotFoundError(path) from e
|
57
57
|
|
58
58
|
|
59
59
|
class NtfsFilesystemEntry(FilesystemEntry):
|
@@ -58,10 +58,10 @@ class SmbFilesystem(Filesystem):
|
|
58
58
|
except SessionError as e:
|
59
59
|
if e.error == STATUS_NOT_A_DIRECTORY:
|
60
60
|
# STATUS_NOT_A_DIRECTORY
|
61
|
-
raise NotADirectoryError(path
|
61
|
+
raise NotADirectoryError(path) from e
|
62
62
|
else:
|
63
63
|
# 0xC000000F is STATUS_NO_SUCH_FILE, but everything else should raise a FileNotFoundError anyway
|
64
|
-
raise FileNotFoundError(path
|
64
|
+
raise FileNotFoundError(path) from e
|
65
65
|
|
66
66
|
if len(result) != 1:
|
67
67
|
raise FileNotFoundError(path)
|
@@ -106,7 +106,7 @@ class SmbFilesystemEntry(FilesystemEntry):
|
|
106
106
|
try:
|
107
107
|
return SmbStream(self.fs.conn, self.fs.share_name, self.path, self.entry.get_filesize())
|
108
108
|
except SessionError as e:
|
109
|
-
raise FilesystemError(f"Failed to open file: {self.path}"
|
109
|
+
raise FilesystemError(f"Failed to open file: {self.path}") from e
|
110
110
|
|
111
111
|
def is_dir(self, follow_symlinks: bool = True) -> bool:
|
112
112
|
try:
|
@@ -32,13 +32,13 @@ class SquashFSFilesystem(Filesystem):
|
|
32
32
|
try:
|
33
33
|
return self.squashfs.get(path, node)
|
34
34
|
except exceptions.FileNotFoundError as e:
|
35
|
-
raise FileNotFoundError(path
|
35
|
+
raise FileNotFoundError(path) from e
|
36
36
|
except exceptions.NotADirectoryError as e:
|
37
|
-
raise NotADirectoryError(path
|
37
|
+
raise NotADirectoryError(path) from e
|
38
38
|
except exceptions.NotASymlinkError as e:
|
39
|
-
raise NotASymlinkError(path
|
39
|
+
raise NotASymlinkError(path) from e
|
40
40
|
except exceptions.Error as e:
|
41
|
-
raise FileNotFoundError(path
|
41
|
+
raise FileNotFoundError(path) from e
|
42
42
|
|
43
43
|
|
44
44
|
class SquashFSFilesystemEntry(FilesystemEntry):
|
@@ -41,13 +41,13 @@ class VmfsFilesystem(Filesystem):
|
|
41
41
|
try:
|
42
42
|
return self.vmfs.get(path, node)
|
43
43
|
except vmfs.FileNotFoundError as e:
|
44
|
-
raise FileNotFoundError(path
|
44
|
+
raise FileNotFoundError(path) from e
|
45
45
|
except vmfs.NotADirectoryError as e:
|
46
|
-
raise NotADirectoryError(path
|
46
|
+
raise NotADirectoryError(path) from e
|
47
47
|
except vmfs.NotASymlinkError as e:
|
48
|
-
raise NotASymlinkError(path
|
48
|
+
raise NotASymlinkError(path) from e
|
49
49
|
except vmfs.Error as e:
|
50
|
-
raise FileNotFoundError(path
|
50
|
+
raise FileNotFoundError(path) from e
|
51
51
|
|
52
52
|
|
53
53
|
class VmfsFilesystemEntry(FilesystemEntry):
|
@@ -35,14 +35,14 @@ class XfsFilesystem(Filesystem):
|
|
35
35
|
def _get_node(self, path: str, node: Optional[xfs.INode] = None) -> xfs.INode:
|
36
36
|
try:
|
37
37
|
return self.xfs.get(path, node)
|
38
|
-
except xfs.FileNotFoundError:
|
39
|
-
raise FileNotFoundError(path)
|
40
|
-
except xfs.NotADirectoryError:
|
41
|
-
raise NotADirectoryError(path)
|
42
|
-
except xfs.NotASymlinkError:
|
43
|
-
raise NotASymlinkError(path)
|
38
|
+
except xfs.FileNotFoundError as e:
|
39
|
+
raise FileNotFoundError(path) from e
|
40
|
+
except xfs.NotADirectoryError as e:
|
41
|
+
raise NotADirectoryError(path) from e
|
42
|
+
except xfs.NotASymlinkError as e:
|
43
|
+
raise NotASymlinkError(path) from e
|
44
44
|
except xfs.Error as e:
|
45
|
-
raise FileNotFoundError(path
|
45
|
+
raise FileNotFoundError(path) from e
|
46
46
|
|
47
47
|
|
48
48
|
class XfsFilesystemEntry(FilesystemEntry):
|
@@ -1,4 +1,5 @@
|
|
1
|
-
"""
|
1
|
+
"""Registry related abstractions"""
|
2
|
+
|
2
3
|
from __future__ import annotations
|
3
4
|
|
4
5
|
import fnmatch
|
@@ -645,7 +646,7 @@ class RegfHive(RegistryHive):
|
|
645
646
|
try:
|
646
647
|
return RegfKey(self, self.hive.open(key))
|
647
648
|
except regf.RegistryKeyNotFoundError as e:
|
648
|
-
raise RegistryKeyNotFoundError(key
|
649
|
+
raise RegistryKeyNotFoundError(key) from e
|
649
650
|
|
650
651
|
|
651
652
|
class RegfKey(RegistryKey):
|
@@ -675,7 +676,7 @@ class RegfKey(RegistryKey):
|
|
675
676
|
try:
|
676
677
|
return RegfKey(self.hive, self.key.subkey(subkey))
|
677
678
|
except regf.RegistryKeyNotFoundError as e:
|
678
|
-
raise RegistryKeyNotFoundError(subkey
|
679
|
+
raise RegistryKeyNotFoundError(subkey) from e
|
679
680
|
|
680
681
|
def subkeys(self) -> list[RegistryKey]:
|
681
682
|
return [RegfKey(self.hive, k) for k in self.key.subkeys()]
|
@@ -684,7 +685,7 @@ class RegfKey(RegistryKey):
|
|
684
685
|
try:
|
685
686
|
return RegfValue(self.hive, self.key.value(value))
|
686
687
|
except regf.RegistryValueNotFoundError as e:
|
687
|
-
raise RegistryValueNotFoundError(value
|
688
|
+
raise RegistryValueNotFoundError(value) from e
|
688
689
|
|
689
690
|
def values(self) -> list[RegistryValue]:
|
690
691
|
return [RegfValue(self.hive, v) for v in self.key.values()]
|
dissect/target/plugin.py
CHANGED
@@ -807,7 +807,7 @@ def load(plugin_desc: PluginDescriptor) -> Type[Plugin]:
|
|
807
807
|
module = importlib.import_module(module)
|
808
808
|
return getattr(module, plugin_desc["class"])
|
809
809
|
except Exception as e:
|
810
|
-
raise PluginError(f"An exception occurred while trying to load a plugin: {module}"
|
810
|
+
raise PluginError(f"An exception occurred while trying to load a plugin: {module}") from e
|
811
811
|
|
812
812
|
|
813
813
|
def failed() -> list[dict[str, Any]]:
|
@@ -53,22 +53,22 @@ class NetworkPlugin(Plugin):
|
|
53
53
|
@export
|
54
54
|
def ips(self) -> list[IPAddress]:
|
55
55
|
"""Return IP addresses as list of :class:`IPAddress`."""
|
56
|
-
return list(self._get_record_type("ip"))
|
56
|
+
return list(set(self._get_record_type("ip")))
|
57
57
|
|
58
58
|
@export
|
59
59
|
def gateways(self) -> list[IPAddress]:
|
60
60
|
"""Return gateways as list of :class:`IPAddress`."""
|
61
|
-
return list(self._get_record_type("gateway"))
|
61
|
+
return list(set(self._get_record_type("gateway")))
|
62
62
|
|
63
63
|
@export
|
64
64
|
def macs(self) -> list[str]:
|
65
65
|
"""Return MAC addresses as list of :class:`str`."""
|
66
|
-
return list(self._get_record_type("mac"))
|
66
|
+
return list(set(self._get_record_type("mac")))
|
67
67
|
|
68
68
|
@export
|
69
|
-
def dns(self) -> list[str]:
|
69
|
+
def dns(self) -> list[str | IPAddress]:
|
70
70
|
"""Return DNS addresses as list of :class:`str`."""
|
71
|
-
return list(self._get_record_type("dns"))
|
71
|
+
return list(set(self._get_record_type("dns")))
|
72
72
|
|
73
73
|
@internal
|
74
74
|
def with_ip(self, ip_addr: str) -> Iterator[InterfaceRecord]:
|
@@ -41,10 +41,7 @@ class MacPlugin(BsdPlugin):
|
|
41
41
|
|
42
42
|
@export(property=True)
|
43
43
|
def ips(self) -> Optional[list[str]]:
|
44
|
-
|
45
|
-
for ip in self.target.network.ips():
|
46
|
-
ips.add(str(ip))
|
47
|
-
return list(ips)
|
44
|
+
return list(set(map(str, self.target.network.ips())))
|
48
45
|
|
49
46
|
@export(property=True)
|
50
47
|
def version(self) -> Optional[str]:
|
@@ -34,17 +34,15 @@ class LinuxPlugin(UnixPlugin, LinuxNetworkManager):
|
|
34
34
|
@export(property=True)
|
35
35
|
def ips(self) -> list[str]:
|
36
36
|
"""Returns a list of static IP addresses and DHCP lease IP addresses found on the host system."""
|
37
|
-
ips =
|
37
|
+
ips = set()
|
38
38
|
|
39
39
|
for ip_set in self.network_manager.get_config_value("ips"):
|
40
|
-
|
41
|
-
ips.append(ip)
|
40
|
+
ips.update(ip_set)
|
42
41
|
|
43
42
|
for ip in parse_unix_dhcp_log_messages(self.target, iter_all=False):
|
44
|
-
|
45
|
-
ips.append(ip)
|
43
|
+
ips.add(ip)
|
46
44
|
|
47
|
-
return ips
|
45
|
+
return list(ips)
|
48
46
|
|
49
47
|
@export(property=True)
|
50
48
|
def dns(self) -> list[str]:
|
@@ -109,7 +109,7 @@ class WindowsPlugin(OSPlugin):
|
|
109
109
|
|
110
110
|
@export(property=True)
|
111
111
|
def ips(self) -> list[str]:
|
112
|
-
return self.target.network.ips()
|
112
|
+
return list(set(map(str, self.target.network.ips())))
|
113
113
|
|
114
114
|
def _get_version_reg_value(self, value_name: str) -> Any:
|
115
115
|
try:
|
@@ -1,6 +1,7 @@
|
|
1
1
|
from __future__ import annotations
|
2
2
|
|
3
3
|
from enum import IntEnum
|
4
|
+
from functools import lru_cache
|
4
5
|
from typing import Iterator
|
5
6
|
|
6
7
|
from dissect.util.ts import wintimestamp
|
@@ -12,6 +13,7 @@ from dissect.target.exceptions import (
|
|
12
13
|
from dissect.target.helpers.record import WindowsInterfaceRecord
|
13
14
|
from dissect.target.helpers.regutil import RegistryKey
|
14
15
|
from dissect.target.plugins.general.network import NetworkPlugin
|
16
|
+
from dissect.target.target import Target
|
15
17
|
|
16
18
|
|
17
19
|
class IfTypes(IntEnum):
|
@@ -222,15 +224,32 @@ def _try_value(subkey: RegistryKey, value: str) -> str | list | None:
|
|
222
224
|
return None
|
223
225
|
|
224
226
|
|
227
|
+
def _get_config_value(key: RegistryKey, name: str) -> set:
|
228
|
+
value = _try_value(key, name)
|
229
|
+
if not value or value in ("", "0.0.0.0", None, [], ["0.0.0.0"]):
|
230
|
+
return set()
|
231
|
+
|
232
|
+
if isinstance(value, list):
|
233
|
+
return set(value)
|
234
|
+
|
235
|
+
return {value}
|
236
|
+
|
237
|
+
|
225
238
|
class WindowsNetworkPlugin(NetworkPlugin):
|
226
239
|
"""Windows network interface plugin."""
|
227
240
|
|
241
|
+
def __init__(self, target: Target):
|
242
|
+
super().__init__(target)
|
243
|
+
self._extract_network_device_config = lru_cache(128)(self._extract_network_device_config)
|
244
|
+
|
228
245
|
def _interfaces(self) -> Iterator[WindowsInterfaceRecord]:
|
246
|
+
"""Yields found Windows interfaces used by :meth:`NetworkPlugin.interfaces() <dissect.target.plugins.general.network.NetworkPlugin.interfaces>`.""" # noqa: E501
|
247
|
+
|
229
248
|
# Get all the network interfaces
|
230
|
-
for
|
249
|
+
for key in self.target.registry.keys(
|
231
250
|
"HKLM\\SYSTEM\\CurrentControlSet\\Control\\Class\\{4d36e972-e325-11ce-bfc1-08002be10318}"
|
232
251
|
):
|
233
|
-
for subkey in
|
252
|
+
for subkey in key.subkeys():
|
234
253
|
device_info = {}
|
235
254
|
|
236
255
|
if (net_cfg_instance_id := _try_value(subkey, "NetCfgInstanceId")) is None:
|
@@ -239,24 +258,26 @@ class WindowsNetworkPlugin(NetworkPlugin):
|
|
239
258
|
|
240
259
|
# Extract the network device configuration for given interface id
|
241
260
|
config = self._extract_network_device_config(net_cfg_instance_id)
|
242
|
-
if config is None or all(not conf for conf in config):
|
243
|
-
# if no configuration is found or all configurations are empty, skip this network interface
|
244
|
-
continue
|
245
261
|
|
246
|
-
# Extract
|
247
|
-
|
248
|
-
|
249
|
-
|
250
|
-
|
251
|
-
|
252
|
-
|
253
|
-
|
254
|
-
|
255
|
-
|
256
|
-
|
257
|
-
|
258
|
-
|
259
|
-
|
262
|
+
# Extract a network device name for given interface id
|
263
|
+
try:
|
264
|
+
name_key = self.target.registry.key(
|
265
|
+
f"HKLM\\SYSTEM\\CurrentControlSet\\Control\\Network\\{{4D36E972-E325-11CE-BFC1-08002BE10318}}\\{net_cfg_instance_id}\\Connection" # noqa: E501
|
266
|
+
)
|
267
|
+
if value_name := _try_value(name_key, "Name"):
|
268
|
+
device_info["name"] = value_name
|
269
|
+
except RegistryKeyNotFoundError:
|
270
|
+
pass
|
271
|
+
|
272
|
+
# Extract the metric value from the interface registry key
|
273
|
+
try:
|
274
|
+
interface_key = self.target.registry.key(
|
275
|
+
f"HKLM\\SYSTEM\\CurrentControlSet\\Services\\Tcpip\\Parameters\\Interfaces\\{net_cfg_instance_id}" # noqa: E501
|
276
|
+
)
|
277
|
+
if value_metric := _try_value(interface_key, "InterfaceMetric"):
|
278
|
+
device_info["metric"] = value_metric
|
279
|
+
except RegistryKeyNotFoundError:
|
280
|
+
pass
|
260
281
|
|
261
282
|
# Extract the rest of the device information
|
262
283
|
device_info["mac"] = _try_value(subkey, "NetworkAddress")
|
@@ -270,26 +291,57 @@ class WindowsNetworkPlugin(NetworkPlugin):
|
|
270
291
|
|
271
292
|
# Yield a record for each non-empty configuration
|
272
293
|
for conf in config:
|
273
|
-
|
274
|
-
|
275
|
-
|
276
|
-
|
277
|
-
|
278
|
-
|
279
|
-
|
280
|
-
|
281
|
-
|
294
|
+
# If no configuration is found or all configurations are empty,
|
295
|
+
# skip this network interface.
|
296
|
+
if not conf or not any(
|
297
|
+
[
|
298
|
+
conf["dns"],
|
299
|
+
conf["ip"],
|
300
|
+
conf["gateway"],
|
301
|
+
conf["subnetmask"],
|
302
|
+
conf["search_domain"],
|
303
|
+
]
|
304
|
+
):
|
305
|
+
continue
|
306
|
+
|
307
|
+
# Create a copy of device_info to avoid overwriting
|
308
|
+
record_info = device_info.copy()
|
309
|
+
record_info.update(conf)
|
310
|
+
yield WindowsInterfaceRecord(
|
311
|
+
**record_info,
|
312
|
+
source=f"HKLM\\SYSTEM\\{subkey.path}",
|
313
|
+
_target=self.target,
|
314
|
+
)
|
282
315
|
|
283
316
|
def _extract_network_device_config(
|
284
317
|
self, interface_id: str
|
285
318
|
) -> list[dict[str, str | list], dict[str, str | list]] | None:
|
286
|
-
|
287
|
-
|
319
|
+
"""Extract network device configuration from the given interface_id for all ControlSets on the system."""
|
320
|
+
|
321
|
+
dhcp_config = {
|
322
|
+
"gateway": set(),
|
323
|
+
"ip": set(),
|
324
|
+
"dns": set(),
|
325
|
+
"subnetmask": set(),
|
326
|
+
"search_domain": set(),
|
327
|
+
"network": set(),
|
328
|
+
}
|
329
|
+
|
330
|
+
static_config = {
|
331
|
+
"ip": set(),
|
332
|
+
"dns": set(),
|
333
|
+
"subnetmask": set(),
|
334
|
+
"search_domain": set(),
|
335
|
+
"gateway": set(),
|
336
|
+
"network": set(),
|
337
|
+
}
|
288
338
|
|
289
339
|
# Get the registry keys for the given interface id
|
290
340
|
try:
|
291
|
-
keys =
|
292
|
-
|
341
|
+
keys = list(
|
342
|
+
self.target.registry.keys(
|
343
|
+
f"HKLM\\SYSTEM\\CurrentControlSet\\Services\\Tcpip\\Parameters\\Interfaces\\{interface_id}"
|
344
|
+
)
|
293
345
|
)
|
294
346
|
except RegistryKeyNotFoundError:
|
295
347
|
return None
|
@@ -297,69 +349,33 @@ class WindowsNetworkPlugin(NetworkPlugin):
|
|
297
349
|
if not len(keys):
|
298
350
|
return None
|
299
351
|
|
300
|
-
|
301
|
-
|
302
|
-
|
303
|
-
dhcp_config["
|
304
|
-
|
305
|
-
|
306
|
-
|
307
|
-
|
308
|
-
|
309
|
-
|
310
|
-
|
311
|
-
|
312
|
-
|
313
|
-
|
314
|
-
if dhcp_subnetmask not in ["", "0.0.0.0", None]:
|
315
|
-
dhcp_config["subnetmask"] = [dhcp_subnetmask]
|
316
|
-
|
317
|
-
dhcp_domain = _try_value(keys, "DhcpDomain")
|
318
|
-
if dhcp_domain not in ["", None]:
|
319
|
-
dhcp_config["search_domain"] = [dhcp_domain]
|
352
|
+
for key in keys:
|
353
|
+
# Extract DHCP configuration from the registry
|
354
|
+
dhcp_config["gateway"].update(_get_config_value(key, "DhcpDefaultGateway"))
|
355
|
+
dhcp_config["ip"].update(_get_config_value(key, "DhcpIPAddress"))
|
356
|
+
dhcp_config["subnetmask"].update(_get_config_value(key, "DhcpSubnetMask"))
|
357
|
+
dhcp_config["search_domain"].update(_get_config_value(key, "DhcpDomain"))
|
358
|
+
dhcp_config["dns"].update(_get_config_value(key, "DhcpNameServer"))
|
359
|
+
|
360
|
+
# Extract static configuration from the registry
|
361
|
+
static_config["gateway"].update(_get_config_value(key, "DefaultGateway"))
|
362
|
+
static_config["dns"].update(_get_config_value(key, "NameServer"))
|
363
|
+
static_config["search_domain"].update(_get_config_value(key, "Domain"))
|
364
|
+
static_config["ip"].update(_get_config_value(key, "IPAddress"))
|
365
|
+
static_config["subnetmask"].update(_get_config_value(key, "SubnetMask"))
|
320
366
|
|
321
367
|
if len(dhcp_config) > 0:
|
322
|
-
|
323
|
-
dhcp_config["enabled"] = dhcp_enable == 1
|
368
|
+
dhcp_config["enabled"] = _try_value(key, "EnableDHCP") == 1
|
324
369
|
dhcp_config["dhcp"] = True
|
325
370
|
|
326
|
-
# Extract static configuration from the registry
|
327
|
-
static_gateway = _try_value(keys, "DefaultGateway")
|
328
|
-
if static_gateway not in ["", None, []]:
|
329
|
-
static_config["gateway"] = static_gateway
|
330
|
-
|
331
|
-
static_ip = _try_value(keys, "IPAddress")
|
332
|
-
if static_ip not in ["", "0.0.0.0", ["0.0.0.0"], None, []]:
|
333
|
-
static_config["ip"] = static_ip if isinstance(static_ip, list) else [static_ip]
|
334
|
-
|
335
|
-
static_dns = _try_value(keys, "NameServer")
|
336
|
-
if static_dns not in ["", "0.0.0.0", None]:
|
337
|
-
static_config["dns"] = static_dns.split(",")
|
338
|
-
|
339
|
-
static_subnetmask = _try_value(keys, "SubnetMask")
|
340
|
-
if static_subnetmask not in ["", "0.0.0.0", ["0.0.0.0"], None, []]:
|
341
|
-
static_config["subnetmask"] = (
|
342
|
-
static_subnetmask if isinstance(static_subnetmask, list) else [static_subnetmask]
|
343
|
-
)
|
344
|
-
|
345
|
-
static_domain = _try_value(keys, "Domain")
|
346
|
-
if static_domain not in ["", None]:
|
347
|
-
static_config["search_domain"] = [static_domain]
|
348
|
-
|
349
371
|
if len(static_config) > 0:
|
350
372
|
static_config["enabled"] = None
|
351
373
|
static_config["dhcp"] = False
|
352
374
|
|
353
|
-
# Combine ip and subnetmask for extraction
|
354
|
-
combined_configs = [
|
355
|
-
(dhcp_config, dhcp_config.get("ip", []), dhcp_config.get("subnetmask", [])),
|
356
|
-
(static_config, static_config.get("ip", []), static_config.get("subnetmask", [])),
|
357
|
-
]
|
358
|
-
|
359
375
|
# Iterate over combined ip/subnet lists
|
360
|
-
for config
|
361
|
-
|
362
|
-
config
|
376
|
+
for config in (dhcp_config, static_config):
|
377
|
+
if (ips := config.get("ip")) and (masks := config.get("subnetmask")):
|
378
|
+
config["network"].update(set(self.calculate_network(ips, masks)))
|
363
379
|
|
364
380
|
# Return both configurations
|
365
381
|
return [dhcp_config, static_config]
|
dissect/target/target.py
CHANGED
@@ -236,7 +236,7 @@ class Target:
|
|
236
236
|
try:
|
237
237
|
loader_instance = loader_cls(path, parsed_path=parsed_path)
|
238
238
|
except Exception as e:
|
239
|
-
raise TargetError(f"Failed to initiate {loader_cls.__name__} for target {path}: {e}"
|
239
|
+
raise TargetError(f"Failed to initiate {loader_cls.__name__} for target {path}: {e}") from e
|
240
240
|
return cls._load(path, loader_instance)
|
241
241
|
return cls.open_raw(path)
|
242
242
|
|
@@ -428,7 +428,7 @@ class Target:
|
|
428
428
|
target.apply()
|
429
429
|
return target
|
430
430
|
except Exception as e:
|
431
|
-
raise TargetError(f"Failed to load target: {path}"
|
431
|
+
raise TargetError(f"Failed to load target: {path}") from e
|
432
432
|
|
433
433
|
def _init_os(self) -> None:
|
434
434
|
"""Internal function that attemps to load an OSPlugin for this target."""
|
@@ -541,7 +541,7 @@ class Target:
|
|
541
541
|
except PluginError:
|
542
542
|
raise
|
543
543
|
except Exception as e:
|
544
|
-
raise PluginError(f"An exception occurred while trying to initialize a plugin: {plugin_cls}"
|
544
|
+
raise PluginError(f"An exception occurred while trying to initialize a plugin: {plugin_cls}") from e
|
545
545
|
else:
|
546
546
|
p = plugin_cls
|
547
547
|
|
@@ -556,8 +556,8 @@ class Target:
|
|
556
556
|
raise
|
557
557
|
except Exception as e:
|
558
558
|
raise UnsupportedPluginError(
|
559
|
-
f"An exception occurred while checking for plugin compatibility: {plugin_cls}"
|
560
|
-
)
|
559
|
+
f"An exception occurred while checking for plugin compatibility: {plugin_cls}"
|
560
|
+
) from e
|
561
561
|
|
562
562
|
self._register_plugin_functions(p)
|
563
563
|
|
@@ -614,9 +614,8 @@ class Target:
|
|
614
614
|
# Just take the last known cause for now
|
615
615
|
raise UnsupportedPluginError(
|
616
616
|
f"Unsupported function `{function}` for target with OS plugin {self._os_plugin}",
|
617
|
-
cause=causes[0] if causes else None,
|
618
617
|
extra=causes[1:] if len(causes) > 1 else None,
|
619
|
-
)
|
618
|
+
) from causes[0] if causes else None
|
620
619
|
|
621
620
|
# We still ended up with no compatible plugins
|
622
621
|
if function not in self._functions:
|
dissect/target/tools/info.py
CHANGED
@@ -137,7 +137,7 @@ def print_target_info(target: Target) -> None:
|
|
137
137
|
continue
|
138
138
|
|
139
139
|
if isinstance(value, list):
|
140
|
-
value = ", ".join(value)
|
140
|
+
value = ", ".join(map(str, value))
|
141
141
|
|
142
142
|
if isinstance(value, datetime):
|
143
143
|
value = value.isoformat(timespec="microseconds")
|
dissect/target/tools/utils.py
CHANGED
@@ -230,15 +230,15 @@ def get_target_attribute(target: Target, func: PluginFunction) -> Union[Plugin,
|
|
230
230
|
target.add_plugin(plugin_class)
|
231
231
|
except UnsupportedPluginError as e:
|
232
232
|
raise UnsupportedPluginError(
|
233
|
-
f"Unsupported function `{func.method_name}` for target with plugin {func.class_object}"
|
234
|
-
)
|
233
|
+
f"Unsupported function `{func.method_name}` for target with plugin {func.class_object}"
|
234
|
+
) from e
|
235
235
|
|
236
236
|
_, target_attr = plugin_factory(target, plugin_class, func.method_name, func.plugin_desc["namespace"])
|
237
237
|
return target_attr
|
238
238
|
|
239
239
|
|
240
240
|
def plugin_function_with_argparser(
|
241
|
-
target_attr: Union[Plugin, Callable]
|
241
|
+
target_attr: Union[Plugin, Callable],
|
242
242
|
) -> tuple[Optional[Iterator], Optional[argparse.ArgumentParser]]:
|
243
243
|
"""Resolves which plugin function to execute, and creates the argument parser for said plugin."""
|
244
244
|
plugin_method = None
|
dissect/target/volume.py
CHANGED
@@ -334,7 +334,7 @@ def open(fh: BinaryIO, *args, **kwargs) -> DissectVolumeSystem:
|
|
334
334
|
try:
|
335
335
|
return disk.DissectVolumeSystem(fh)
|
336
336
|
except Exception as e:
|
337
|
-
raise VolumeSystemError(f"Failed to load volume system for {fh}"
|
337
|
+
raise VolumeSystemError(f"Failed to load volume system for {fh}") from e
|
338
338
|
finally:
|
339
339
|
fh.seek(offset)
|
340
340
|
|
@@ -353,7 +353,7 @@ def is_lvm_volume(volume: BinaryIO) -> bool:
|
|
353
353
|
log.info("Failed to import %s", logical_vs)
|
354
354
|
log.debug("", exc_info=e)
|
355
355
|
except Exception as e:
|
356
|
-
raise VolumeSystemError(f"Failed to detect logical volume for {volume}"
|
356
|
+
raise VolumeSystemError(f"Failed to detect logical volume for {volume}") from e
|
357
357
|
|
358
358
|
return False
|
359
359
|
|
@@ -372,7 +372,7 @@ def is_encrypted(volume: BinaryIO) -> bool:
|
|
372
372
|
log.info("Failed to import %s", manager)
|
373
373
|
log.debug("", exc_info=e)
|
374
374
|
except Exception as e:
|
375
|
-
raise VolumeSystemError(f"Failed to detect encrypted volume for {volume}"
|
375
|
+
raise VolumeSystemError(f"Failed to detect encrypted volume for {volume}") from e
|
376
376
|
return False
|
377
377
|
|
378
378
|
|
@@ -422,4 +422,4 @@ def open_lvm(volumes: list[BinaryIO], *args, **kwargs) -> Iterator[VolumeSystem]
|
|
422
422
|
log.info("Failed to import %s", logical_vs)
|
423
423
|
log.debug("", exc_info=e)
|
424
424
|
except Exception as e:
|
425
|
-
raise VolumeSystemError(f"Failed to load logical volume system for {volumes}"
|
425
|
+
raise VolumeSystemError(f"Failed to load logical volume system for {volumes}") from e
|
@@ -1,6 +1,6 @@
|
|
1
1
|
Metadata-Version: 2.1
|
2
2
|
Name: dissect.target
|
3
|
-
Version: 3.20.
|
3
|
+
Version: 3.20.dev51
|
4
4
|
Summary: This module ties all other Dissect modules together, it provides a programming API and command line tools which allow easy access to various data sources inside disk images or file collections (a.k.a. targets)
|
5
5
|
Author-email: Dissect Team <dissect@fox-it.com>
|
6
6
|
License: Affero General Public License v3
|
@@ -31,7 +31,7 @@ Requires-Dist: dissect.ntfs <4,>=3.4
|
|
31
31
|
Requires-Dist: dissect.regf <4,>=3.3
|
32
32
|
Requires-Dist: dissect.util <4,>=3
|
33
33
|
Requires-Dist: dissect.volume <4,>=2
|
34
|
-
Requires-Dist: flow.record ~=3.
|
34
|
+
Requires-Dist: flow.record ~=3.17.0
|
35
35
|
Requires-Dist: structlog
|
36
36
|
Provides-Extra: cb
|
37
37
|
Requires-Dist: dissect.target[full] ; extra == 'cb'
|
@@ -1,12 +1,12 @@
|
|
1
1
|
dissect/target/__init__.py,sha256=Oc7ounTgq2hE4nR6YcNabetc7SQA40ldSa35VEdZcQU,63
|
2
|
-
dissect/target/container.py,sha256=
|
3
|
-
dissect/target/exceptions.py,sha256=
|
4
|
-
dissect/target/filesystem.py,sha256=
|
2
|
+
dissect/target/container.py,sha256=Nd3lolK83UN8LB-7JMcfT7BSvAK6ZSs2vlEcXeW40Ic,9351
|
3
|
+
dissect/target/exceptions.py,sha256=kgLE8NMJaICGhDursvEgu-4ywoDp_yhklpdDYliNLqU,3005
|
4
|
+
dissect/target/filesystem.py,sha256=_dtBo4RI0VZpngm62rrSWcM9sHwNH-tclz9jByrCRWU,60739
|
5
5
|
dissect/target/loader.py,sha256=ZlCI7ZyPpysuSKndOiRz_rrGb30_jLMdFD6qObY0Vzg,7374
|
6
|
-
dissect/target/plugin.py,sha256=
|
6
|
+
dissect/target/plugin.py,sha256=3VeKrJuZ35HsTpHqSFxhYIxrA704HStSrvcDwUh0674,50680
|
7
7
|
dissect/target/report.py,sha256=06uiP4MbNI8cWMVrC1SasNS-Yg6ptjVjckwj8Yhe0Js,7958
|
8
|
-
dissect/target/target.py,sha256
|
9
|
-
dissect/target/volume.py,sha256=
|
8
|
+
dissect/target/target.py,sha256=Gxf6No4IlnOVIMS4XbzFIYj9mx5Is8kIB5aDNR1gb_8,32685
|
9
|
+
dissect/target/volume.py,sha256=EaUFX1VdQjDUpdurSWsk3ASJyu8W3xHEwh6iFoyeW8I,15793
|
10
10
|
dissect/target/containers/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
11
11
|
dissect/target/containers/asdf.py,sha256=DJp0QEFwUjy2MFwKYcYqIR_BS1fQT1Yi9Kcmqt0aChM,1366
|
12
12
|
dissect/target/containers/ewf.py,sha256=FTEPZpogDzymrbAeSnLuHNNStifLzNVhUvtbEMOyo0E,1342
|
@@ -23,25 +23,25 @@ dissect/target/containers/vmdk.py,sha256=5fQGkJy4esXONXrKLbhpkQDt8Fwx19YENK2mOm7
|
|
23
23
|
dissect/target/data/autocompletion/target_bash_completion.sh,sha256=wrOQ_ED-h8WFcjCmY6n4qKl84tWJv9l8ShFHDfJqJyA,3592
|
24
24
|
dissect/target/filesystems/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
25
25
|
dissect/target/filesystems/ad1.py,sha256=nEPzaaRsb6bL4ItFo0uLdmdLvrmK9BjqHeD3FOp3WQI,2413
|
26
|
-
dissect/target/filesystems/btrfs.py,sha256=
|
26
|
+
dissect/target/filesystems/btrfs.py,sha256=GE9wWJ1e04UMxVs4Ycw6Q2YWZJoD3sqEKF7Xta8LSi8,6561
|
27
27
|
dissect/target/filesystems/cb.py,sha256=6LcoJiwsYu1Han31IUzVpZVDTifhTLTx_gLfNpB_p6k,5329
|
28
28
|
dissect/target/filesystems/config.py,sha256=VGrzv456rj4tqRzxp1gSGzkHZ447viiLLLcs5NYPYvg,12057
|
29
29
|
dissect/target/filesystems/cpio.py,sha256=ssVCjkAtLn2FqmNxeo6U5boyUdSYFxLWfXpytHYGPqs,641
|
30
30
|
dissect/target/filesystems/dir.py,sha256=rKEreX3A7CI6a3pMssrO9F-9i5pkxCn_Ucs_dMtHxxA,4574
|
31
31
|
dissect/target/filesystems/exfat.py,sha256=PRkZPUVN5NlgB1VetFtywdNgF6Yj5OBtF5a25t-fFvw,5917
|
32
|
-
dissect/target/filesystems/extfs.py,sha256=
|
33
|
-
dissect/target/filesystems/fat.py,sha256=
|
34
|
-
dissect/target/filesystems/ffs.py,sha256=
|
32
|
+
dissect/target/filesystems/extfs.py,sha256=LVdB94lUI2DRHW0xUPx8lwuY-NKVeSwFGZiLOpZ8-Lk,4827
|
33
|
+
dissect/target/filesystems/fat.py,sha256=cCIiUAY0-5dL76Zhvji1QbwlMVX7YqKWp-NmUdqz8yA,4605
|
34
|
+
dissect/target/filesystems/ffs.py,sha256=ry7aPb_AQeApTuhVQVioQPn4Q795_Ak5XloEtd-0bww,4950
|
35
35
|
dissect/target/filesystems/itunes.py,sha256=w2lcWv6jlBPm84tsGZehxKBMXXyuW3KlmwVTF4ssQec,6395
|
36
|
-
dissect/target/filesystems/jffs.py,sha256=
|
37
|
-
dissect/target/filesystems/ntfs.py,sha256=
|
36
|
+
dissect/target/filesystems/jffs.py,sha256=v0fom9zofWNI2umEtKEikxh3kPsbz2rrLOHA3T6Pw1o,4210
|
37
|
+
dissect/target/filesystems/ntfs.py,sha256=ADSv_VkX0fir6NYaOJD1ewWo9UG84Q7AEbDwULiEoN4,7632
|
38
38
|
dissect/target/filesystems/overlay.py,sha256=d0BNZcVd3SzBcM1SZO5nX2FrEYcdtVH34BPJQ6Oh4x8,4753
|
39
|
-
dissect/target/filesystems/smb.py,sha256=
|
40
|
-
dissect/target/filesystems/squashfs.py,sha256=
|
39
|
+
dissect/target/filesystems/smb.py,sha256=gzPSIB6J3psFZ7RSU30llcJCt04SFSDpQTImxUUQG7Y,6400
|
40
|
+
dissect/target/filesystems/squashfs.py,sha256=WfAUh-a4FEbN8n5geFOdb0KkQIgYNGs3CJHCCIkpl6s,3913
|
41
41
|
dissect/target/filesystems/tar.py,sha256=EJyvRCU6H7eu0exC0tQggyAZKZ3JFFaihYyx9SIQNqk,5742
|
42
|
-
dissect/target/filesystems/vmfs.py,sha256=
|
42
|
+
dissect/target/filesystems/vmfs.py,sha256=39FPJiznzSivV5UI2PWo8uD7IKZV7qw-8qIVK5_UcAg,4947
|
43
43
|
dissect/target/filesystems/vmtar.py,sha256=LlKWkTIuLemQmG9yGqL7980uC_AOL77_GWhbJc_grSk,804
|
44
|
-
dissect/target/filesystems/xfs.py,sha256=
|
44
|
+
dissect/target/filesystems/xfs.py,sha256=HsVWbOmq1tn95Q4Jo0QzP2D1A2Cce_bn6WSDkN-GPfc,5051
|
45
45
|
dissect/target/filesystems/zip.py,sha256=BeNj23DOYfWuTm5V1V419ViJiMfBrO1VA5gP6rljwXs,5467
|
46
46
|
dissect/target/helpers/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
47
47
|
dissect/target/helpers/cache.py,sha256=TXlJBdFRz6V9zKs903am4Yawr0maYw5kZY0RqklDQJM,8568
|
@@ -62,7 +62,7 @@ dissect/target/helpers/polypath.py,sha256=h8p7m_OCNiQljGwoZh5Aflr9H2ot6CZr6WKq1O
|
|
62
62
|
dissect/target/helpers/protobuf.py,sha256=b4DsnqrRLrefcDjx7rQno-_LBcwtJXxuKf5RdOegzfE,1537
|
63
63
|
dissect/target/helpers/record.py,sha256=TxG1lwW5N0V-7kuq4s2vnQh-hAbT7rVwwZLf4sIDNjM,6334
|
64
64
|
dissect/target/helpers/record_modifier.py,sha256=cRNDhUYMmx4iEKyEr5Pqy9xiFgxr_GBNJPp_omkQsEU,4094
|
65
|
-
dissect/target/helpers/regutil.py,sha256=
|
65
|
+
dissect/target/helpers/regutil.py,sha256=hnJRTOQs4IqN4EroBoSNC4HDvuA8w6U1dqNBvu-ILn0,28376
|
66
66
|
dissect/target/helpers/shell_application_ids.py,sha256=hYxrP-YtHK7ZM0ectJFHfoMB8QUXLbYNKmKXMWLZRlA,38132
|
67
67
|
dissect/target/helpers/shell_folder_ids.py,sha256=Behhb8oh0kMxrEk6YYKYigCDZe8Hw5QS6iK_d2hTs2Y,24978
|
68
68
|
dissect/target/helpers/utils.py,sha256=K3xVq9D0FwIhTBAuiWN8ph7Pq2GABgG3hOz-3AmKuEA,4244
|
@@ -189,7 +189,7 @@ dissect/target/plugins/general/config.py,sha256=Mdy9uhWn4OJ96zfXpLgjVifV5SrViqHn
|
|
189
189
|
dissect/target/plugins/general/default.py,sha256=8W_9JV3jKEeETlyTrB25sACoIIFmmO8wlVU5Zoi51W0,1425
|
190
190
|
dissect/target/plugins/general/example.py,sha256=mYAbhtfQmUBj2L2C1DFt9bWpI7rQLJwCIYUsNLcA_pc,6053
|
191
191
|
dissect/target/plugins/general/loaders.py,sha256=z_t55Q1XNjmTOxq0E4tCwpZ-utFyxiLKyAJIFgJMlJs,1508
|
192
|
-
dissect/target/plugins/general/network.py,sha256=
|
192
|
+
dissect/target/plugins/general/network.py,sha256=TWfSdI5fTgwe1_nV7u_ldtvvRwgmkVFLd4XFzy4cEZU,3257
|
193
193
|
dissect/target/plugins/general/osinfo.py,sha256=oU-vmMiA-oaSEQWTSyn6-yQiH2sLQT6aTQHRd0677wo,1415
|
194
194
|
dissect/target/plugins/general/plugins.py,sha256=9KJ70YvYwBfxt19C9yISv8YE4mOdHNvP16fTCTHC68U,6033
|
195
195
|
dissect/target/plugins/general/scrape.py,sha256=Fz7BNXflvuxlnVulyyDhLpyU8D_hJdH6vWVtER9vjTg,6651
|
@@ -218,7 +218,7 @@ dissect/target/plugins/os/unix/bsd/ios/_os.py,sha256=VlJXGxkQZ4RbGbSC-FlbR2YWOJp
|
|
218
218
|
dissect/target/plugins/os/unix/bsd/openbsd/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
219
219
|
dissect/target/plugins/os/unix/bsd/openbsd/_os.py,sha256=9npz-osM-wHmjOACUqof5N5HJeps7J8KuyenUS5MZDs,923
|
220
220
|
dissect/target/plugins/os/unix/bsd/osx/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
221
|
-
dissect/target/plugins/os/unix/bsd/osx/_os.py,sha256=
|
221
|
+
dissect/target/plugins/os/unix/bsd/osx/_os.py,sha256=hNFB1rwahLwgZD1kc3T4xalFusT88EoxM2Mh-8jOW_w,3440
|
222
222
|
dissect/target/plugins/os/unix/bsd/osx/network.py,sha256=0Qf1jsCDNPmc_L-AmrvHjXaN_x-AtT1Ow3tdQOvFRsk,3734
|
223
223
|
dissect/target/plugins/os/unix/bsd/osx/user.py,sha256=5rsGhsntBW9IXYIOrLpfYpSsJcBDL61QJkuZ456lXlE,2411
|
224
224
|
dissect/target/plugins/os/unix/esxi/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
@@ -226,7 +226,7 @@ dissect/target/plugins/os/unix/esxi/_os.py,sha256=s6pAgUyfHh3QcY6sgvk5uVMmLvqK1t
|
|
226
226
|
dissect/target/plugins/os/unix/etc/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
227
227
|
dissect/target/plugins/os/unix/etc/etc.py,sha256=QngR0nA1azvbNTau4U9-jKOjSoGdyduDpyEna_6yxWY,2636
|
228
228
|
dissect/target/plugins/os/unix/linux/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
229
|
-
dissect/target/plugins/os/unix/linux/_os.py,sha256=
|
229
|
+
dissect/target/plugins/os/unix/linux/_os.py,sha256=k1aHhWqocSHMVbF54VDw9wqwa0QSToOa69TMKAyQcxw,2979
|
230
230
|
dissect/target/plugins/os/unix/linux/cmdline.py,sha256=n_Uetoplx33XpIY27oPtMaw1E2AbAEeGLCSkxHshWgY,1673
|
231
231
|
dissect/target/plugins/os/unix/linux/environ.py,sha256=n7KttVzUtBHTIXQuS1DI5Azv6tM__d9gGqhPR_3ArIE,1932
|
232
232
|
dissect/target/plugins/os/unix/linux/iptables.py,sha256=qTzY5PHHXA33WnPYb5NESgoSwI7ECZ8YPoEe_Fmln-8,6045
|
@@ -274,7 +274,7 @@ dissect/target/plugins/os/unix/log/lastlog.py,sha256=Wr3-2n1-GwckN9mSx-yM55N6_L0
|
|
274
274
|
dissect/target/plugins/os/unix/log/messages.py,sha256=XtjZ0a2budgQm_K5JT3fMf7JcjuD0AelcD3zOFN2xpI,5732
|
275
275
|
dissect/target/plugins/os/unix/log/utmp.py,sha256=k2A69s2qUT2JunJrH8GO6nQ0zMDotXMTaj8OzQ7ljj8,7336
|
276
276
|
dissect/target/plugins/os/windows/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
277
|
-
dissect/target/plugins/os/windows/_os.py,sha256=
|
277
|
+
dissect/target/plugins/os/windows/_os.py,sha256=SUTfCPEVi2ADfjsQQJad6dEsnKUzRtsKJXOlEuiT9Xk,12462
|
278
278
|
dissect/target/plugins/os/windows/activitiescache.py,sha256=BbGD-vETHm1IRMoazVer_vqSJIoQxxhWcJ_xlBeOMds,6899
|
279
279
|
dissect/target/plugins/os/windows/adpolicy.py,sha256=ul8lKlG9ExABnd6yVLMPFFgVxN74CG4T3MvcRuBLHJc,7158
|
280
280
|
dissect/target/plugins/os/windows/amcache.py,sha256=1jq-S80_FIzGegrqQ6HqrjmaAPTyxyn69HxnbRBlaUc,27608
|
@@ -288,7 +288,7 @@ dissect/target/plugins/os/windows/generic.py,sha256=Z4eb9SrVMiO871bi5GS8V-rGF6QJ
|
|
288
288
|
dissect/target/plugins/os/windows/jumplist.py,sha256=3gZk6O1B3lKK2Jxe0B-HapOCEehk94CYNvCVDpQC9nQ,11773
|
289
289
|
dissect/target/plugins/os/windows/lnk.py,sha256=KTqhw0JMW-KjAxe4xlRDNSRSx-th-_nPVgTGyBaKmW0,7891
|
290
290
|
dissect/target/plugins/os/windows/locale.py,sha256=QiLWGgWrGBGHiXgep5iSOo6VNim4YC-xd4MdW0BUJPA,2486
|
291
|
-
dissect/target/plugins/os/windows/network.py,sha256=
|
291
|
+
dissect/target/plugins/os/windows/network.py,sha256=cffJmQwHJmTAGZkAEKKGxNi1ZYLiDomfOcPczZn85Fo,11284
|
292
292
|
dissect/target/plugins/os/windows/notifications.py,sha256=xxfMEY_noDxMVqvT3QS1a3j-X3qAYikOtT6v2owxuCY,17480
|
293
293
|
dissect/target/plugins/os/windows/prefetch.py,sha256=wbbYoy05gWbJfRsM2ci4wPG7kM58OocVwXD3hkQlbRw,10647
|
294
294
|
dissect/target/plugins/os/windows/recyclebin.py,sha256=zx58hDCvcrD_eJl9nJmr_i80krSN03ya8nQzWFr2Tw0,4917
|
@@ -358,13 +358,13 @@ dissect/target/tools/build_pluginlist.py,sha256=5fomcuMwsVzcnYx5Htf5f9lSwsLeUUvo
|
|
358
358
|
dissect/target/tools/dd.py,sha256=rTM-lgXxrYBpVAtJqFqAatDz45bLoD8-mFt_59Q3Lio,1928
|
359
359
|
dissect/target/tools/fs.py,sha256=3Ny8zoooVeeF7OUkQ0nxZVdEaQeU7vPRjDOYhz6XfRA,5385
|
360
360
|
dissect/target/tools/fsutils.py,sha256=q0t9gFwKHaPr2Ya-MN2o4LsYledde7kp2DZZTd8roIc,8314
|
361
|
-
dissect/target/tools/info.py,sha256=
|
361
|
+
dissect/target/tools/info.py,sha256=t2bWENeyaEh87ayE_brdKvz9kHAWOLqkKJcGixl6hGo,5725
|
362
362
|
dissect/target/tools/logging.py,sha256=5ZnumtMWLyslxfrUGZ4ntRyf3obOOhmn8SBjKfdLcEg,4174
|
363
363
|
dissect/target/tools/mount.py,sha256=8GRYnu4xEmFBHxuIZAYhOMyyTGX8fat1Ou07DNiUnW4,3945
|
364
364
|
dissect/target/tools/query.py,sha256=OYWVmCx2nFx85x1r8Y6D17UdUIi8PJm304xBfT-H8vs,15605
|
365
365
|
dissect/target/tools/reg.py,sha256=FDsiBBDxjWVUBTRj8xn82vZe-J_d9piM-TKS3PHZCcM,3193
|
366
366
|
dissect/target/tools/shell.py,sha256=qY-JIwFQKBHTbqOiFxeO9OYeOlesQlx0r8PHghSAV8I,54207
|
367
|
-
dissect/target/tools/utils.py,sha256=
|
367
|
+
dissect/target/tools/utils.py,sha256=WbENqFFrAVO3kU54tRi2bV9mLIZpTYNK8fJkeoU-FQY,12034
|
368
368
|
dissect/target/tools/yara.py,sha256=70k-2VMulf1EdkX03nCACzejaOEcsFHOyX-4E40MdQU,2044
|
369
369
|
dissect/target/tools/dump/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
370
370
|
dissect/target/tools/dump/run.py,sha256=aD84peRS4zHqC78fH7Vd4ni3m1ZmVP70LyMwBRvoDGY,9463
|
@@ -378,10 +378,10 @@ dissect/target/volumes/luks.py,sha256=OmCMsw6rCUXG1_plnLVLTpsvE1n_6WtoRUGQbpmu1z
|
|
378
378
|
dissect/target/volumes/lvm.py,sha256=wwQVR9I3G9YzmY6UxFsH2Y4MXGBcKL9aayWGCDTiWMU,2269
|
379
379
|
dissect/target/volumes/md.py,sha256=7ShPtusuLGaIv27SvEETtgsuoQyAa4iAAeOR1NEaajI,1689
|
380
380
|
dissect/target/volumes/vmfs.py,sha256=-LoUbn9WNwTtLi_4K34uV_-wDw2W5hgaqxZNj4UmqAQ,1730
|
381
|
-
dissect.target-3.20.
|
382
|
-
dissect.target-3.20.
|
383
|
-
dissect.target-3.20.
|
384
|
-
dissect.target-3.20.
|
385
|
-
dissect.target-3.20.
|
386
|
-
dissect.target-3.20.
|
387
|
-
dissect.target-3.20.
|
381
|
+
dissect.target-3.20.dev51.dist-info/COPYRIGHT,sha256=m-9ih2RVhMiXHI2bf_oNSSgHgkeIvaYRVfKTwFbnJPA,301
|
382
|
+
dissect.target-3.20.dev51.dist-info/LICENSE,sha256=DZak_2itbUtvHzD3E7GNUYSRK6jdOJ-GqncQ2weavLA,34523
|
383
|
+
dissect.target-3.20.dev51.dist-info/METADATA,sha256=KbglItTMCNNZcuFn2IcpvW-aqdoPr6_SMcldbLRoSTM,12897
|
384
|
+
dissect.target-3.20.dev51.dist-info/WHEEL,sha256=P9jw-gEje8ByB7_hXoICnHtVCrEwMQh-630tKvQWehc,91
|
385
|
+
dissect.target-3.20.dev51.dist-info/entry_points.txt,sha256=BWuxAb_6AvUAQpIQOQU0IMTlaF6TDht2AIZK8bHd-zE,492
|
386
|
+
dissect.target-3.20.dev51.dist-info/top_level.txt,sha256=Mn-CQzEYsAbkxrUI0TnplHuXnGVKzxpDw_po_sXpvv4,8
|
387
|
+
dissect.target-3.20.dev51.dist-info/RECORD,,
|
File without changes
|
File without changes
|
File without changes
|
{dissect.target-3.20.dev49.dist-info → dissect.target-3.20.dev51.dist-info}/entry_points.txt
RENAMED
File without changes
|
File without changes
|