Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion submodules/dissect.apfs
2 changes: 1 addition & 1 deletion submodules/dissect.database
Submodule dissect.database updated 176 files
2 changes: 1 addition & 1 deletion submodules/dissect.evidence
Submodule dissect.evidence updated 80 files
+1 −0 .gitattributes
+2 −0 MANIFEST.in
+1 −1 README.md
+5 −1 dissect/evidence/__init__.py
+0 −252 dissect/evidence/ad1.py
+25 −0 dissect/evidence/ad1/__init__.py
+446 −0 dissect/evidence/ad1/ad1.py
+185 −0 dissect/evidence/ad1/c_ad1.py
+218 −0 dissect/evidence/ad1/c_ad1.pyi
+78 −0 dissect/evidence/ad1/stream.py
+12 −0 dissect/evidence/adcrypt/__init__.py
+152 −0 dissect/evidence/adcrypt/adcrypt.py
+40 −0 dissect/evidence/adcrypt/c_adcrypt.py
+58 −0 dissect/evidence/adcrypt/c_adcrypt.pyi
+40 −0 dissect/evidence/adcrypt/stream.py
+3 −51 dissect/evidence/asdf/asdf.py
+52 −0 dissect/evidence/asdf/c_asdf.py
+95 −0 dissect/evidence/asdf/c_asdf.pyi
+0 −0 dissect/evidence/asdf/stream.py
+27 −0 dissect/evidence/ewf/__init__.py
+89 −0 dissect/evidence/ewf/c_ewf.py
+156 −0 dissect/evidence/ewf/c_ewf.pyi
+7 −92 dissect/evidence/ewf/ewf.py
+17 −2 dissect/evidence/exception.py
+71 −0 dissect/evidence/tools/adcrypt.py
+1 −1 dissect/evidence/tools/asdf/repair.py
+32 −0 dissect/evidence/tools/util.py
+8 −1 pyproject.toml
+3 −0 tests/_data/ad1/compressed.ad1
+3 −0 tests/_data/ad1/encrypted-certificate/encrypted.ad1
+3 −0 tests/_data/ad1/encrypted-certificate/encrypted.ad1.csv
+3 −0 tests/_data/ad1/encrypted-certificate/encrypted.ad1.txt
+3 −0 tests/_data/ad1/encrypted-certificate/encrypted.ad2
+3 −0 tests/_data/ad1/encrypted-certificate/encrypted.ad3
+3 −0 tests/_data/ad1/encrypted-certificate/encrypted.ad4
+3 −0 tests/_data/ad1/encrypted-certificate/encrypted.ad5
+3 −0 tests/_data/ad1/encrypted-certificate/encrypted.ad6
+3 −0 tests/_data/ad1/encrypted-certificate/encrypted.ad7
+3 −0 tests/_data/ad1/encrypted-certificate/key
+3 −0 tests/_data/ad1/encrypted-certificate/key.pub
+3 −0 tests/_data/ad1/encrypted-passphrase/encrypted.ad1
+3 −0 tests/_data/ad1/encrypted-passphrase/encrypted.ad1.csv
+3 −0 tests/_data/ad1/encrypted-passphrase/encrypted.ad1.txt
+3 −0 tests/_data/ad1/encrypted-passphrase/encrypted.ad10
+3 −0 tests/_data/ad1/encrypted-passphrase/encrypted.ad11
+3 −0 tests/_data/ad1/encrypted-passphrase/encrypted.ad12
+3 −0 tests/_data/ad1/encrypted-passphrase/encrypted.ad13
+3 −0 tests/_data/ad1/encrypted-passphrase/encrypted.ad2
+3 −0 tests/_data/ad1/encrypted-passphrase/encrypted.ad3
+3 −0 tests/_data/ad1/encrypted-passphrase/encrypted.ad4
+3 −0 tests/_data/ad1/encrypted-passphrase/encrypted.ad5
+3 −0 tests/_data/ad1/encrypted-passphrase/encrypted.ad6
+3 −0 tests/_data/ad1/encrypted-passphrase/encrypted.ad7
+3 −0 tests/_data/ad1/encrypted-passphrase/encrypted.ad8
+3 −0 tests/_data/ad1/encrypted-passphrase/encrypted.ad9
+3 −0 tests/_data/ad1/long.ad1
+3 −0 tests/_data/ad1/pcbje/text-and-pictures.ad1
+3 −0 tests/_data/ad1/pcbje/text-and-pictures.ad1.txt
+3 −0 tests/_data/ad1/pcbje/text-and-pictures.ad2
+3 −0 tests/_data/ad1/pcbje/text-and-pictures.ad3
+3 −0 tests/_data/ad1/pcbje/text-and-pictures.ad4
+3 −0 tests/_data/ad1/test.ad1
+3 −0 tests/_data/ewf/ewf.E01
+0 −0 tests/_docs/Makefile
+0 −0 tests/_docs/__init__.py
+7 −0 tests/_docs/conf.py
+0 −0 tests/_docs/index.rst
+7 −0 tests/_utils.py
+50 −7 tests/conftest.py
+ tests/data/ad1_long.ad1
+ tests/data/ad1_test.ad1
+ tests/data/ad1_test_compressed.ad1
+ tests/data/ewf.E01
+238 −20 tests/test_ad1.py
+2 −2 tests/test_asdf.py
+4 −4 tests/test_ewf.py
+21 −0 tests/test_exception.py
+0 −0 tests/tools/__init__.py
+74 −0 tests/tools/test_adcrypt.py
+4 −4 tox.ini
2 changes: 1 addition & 1 deletion submodules/dissect.hypervisor
Submodule dissect.hypervisor updated 59 files
+1 −0 .gitattributes
+2 −0 MANIFEST.in
+211 −7 dissect/hypervisor/descriptor/vbox.py
+85 −78 dissect/hypervisor/disk/c_vdi.py
+100 −0 dissect/hypervisor/disk/c_vdi.pyi
+6 −12 dissect/hypervisor/disk/qcow2.py
+114 −36 dissect/hypervisor/disk/vdi.py
+5 −3 dissect/hypervisor/disk/vmdk.py
+2 −0 pyproject.toml
+ tests/_data/descriptor/hyperv/test.VMRS
+ tests/_data/descriptor/hyperv/test.vmcx
+3 −0 tests/_data/descriptor/vbox/GOAD-DC01.vbox
+3 −0 tests/_data/descriptor/vbox/encrypted.vbox
+3 −4 tests/_data/descriptor/vmx/encrypted.vmx
+ tests/_data/disk/asif/basic.asif.gz
+3 −52 tests/_data/disk/hdd/expanding.hdd/DiskDescriptor.xml
+ tests/_data/disk/hdd/expanding.hdd/expanding.hdd.0.{5fbaabe3-6958-40ff-92a7-860e329aab41}.hds.gz
+3 −52 tests/_data/disk/hdd/plain.hdd/DiskDescriptor.xml
+ tests/_data/disk/hdd/plain.hdd/plain.hdd.0.{5fbaabe3-6958-40ff-92a7-860e329aab41}.hds.gz
+3 −102 tests/_data/disk/hdd/split.hdd/DiskDescriptor.xml
+ tests/_data/disk/hdd/split.hdd/split.hdd.0.{5fbaabe3-6958-40ff-92a7-860e329aab41}.hds.gz
+ tests/_data/disk/hdd/split.hdd/split.hdd.1.{5fbaabe3-6958-40ff-92a7-860e329aab41}.hds.gz
+ tests/_data/disk/hdd/split.hdd/split.hdd.2.{5fbaabe3-6958-40ff-92a7-860e329aab41}.hds.gz
+ tests/_data/disk/hdd/split.hdd/split.hdd.3.{5fbaabe3-6958-40ff-92a7-860e329aab41}.hds.gz
+ tests/_data/disk/hdd/split.hdd/split.hdd.4.{5fbaabe3-6958-40ff-92a7-860e329aab41}.hds.gz
+ tests/_data/disk/hdd/split.hdd/split.hdd.5.{5fbaabe3-6958-40ff-92a7-860e329aab41}.hds.gz
+ tests/_data/disk/qcow2/backing-chain-1.qcow2.gz
+ tests/_data/disk/qcow2/backing-chain-2.qcow2.gz
+ tests/_data/disk/qcow2/backing-chain-3.qcow2.gz
+3 −0 tests/_data/disk/qcow2/basic-zstd.qcow2.gz
+ tests/_data/disk/qcow2/basic.qcow2.gz
+ tests/_data/disk/qcow2/data-file.bin.gz
+ tests/_data/disk/qcow2/data-file.qcow2.gz
+ tests/_data/disk/qcow2/snapshot.qcow2.gz
+3 −0 tests/_data/disk/vdi/basic.vdi.gz
+ tests/_data/disk/vhd/dynamic.vhd.gz
+ tests/_data/disk/vhd/fixed.vhd.gz
+ tests/_data/disk/vhdx/differencing.avhdx.gz
+ tests/_data/disk/vhdx/dynamic.vhdx.gz
+ tests/_data/disk/vhdx/fixed.vhdx.gz
+ tests/_data/disk/vmdk/sesparse.vmdk.gz
+3 −4 tests/_data/util/envelope/encryption.info
+ tests/_data/util/envelope/local.tgz.ve
+ tests/_data/util/vmtar/test.vgz
+77 −0 tests/_tools/disk/vdi/generate.sh
+7 −0 tests/_util.py
+0 −128 tests/conftest.py
+55 −54 tests/descriptor/test_hyperv.py
+61 −35 tests/descriptor/test_vbox.py
+3 −4 tests/descriptor/test_vmx.py
+10 −8 tests/disk/test_asif.py
+18 −0 tests/disk/test_hdd.py
+44 −30 tests/disk/test_qcow2.py
+46 −0 tests/disk/test_vdi.py
+59 −56 tests/disk/test_vhd.py
+82 −76 tests/disk/test_vhdx.py
+55 −14 tests/disk/test_vmdk.py
+12 −9 tests/util/test_envelope.py
+19 −18 tests/util/test_vmtar.py
2 changes: 1 addition & 1 deletion submodules/dissect.squashfs
2 changes: 1 addition & 1 deletion submodules/dissect.target
Submodule dissect.target updated 138 files
2 changes: 1 addition & 1 deletion submodules/dissect.volume