:py:mod:`dissect.target.loaders.cellebrite` =========================================== .. py:module:: dissect.target.loaders.cellebrite Module Contents --------------- Classes ~~~~~~~ .. autoapisummary:: dissect.target.loaders.cellebrite.Extraction dissect.target.loaders.cellebrite.DeviceInfo dissect.target.loaders.cellebrite.Ufdx dissect.target.loaders.cellebrite.Dump dissect.target.loaders.cellebrite.Keychain dissect.target.loaders.cellebrite.Ufd dissect.target.loaders.cellebrite.CellebriteLoader dissect.target.loaders.cellebrite.CellebriteFilesystem Attributes ~~~~~~~~~~ .. autoapisummary:: dissect.target.loaders.cellebrite.log .. py:data:: log .. py:class:: Extraction .. py:attribute:: type :type: str | None .. py:attribute:: path :type: pathlib.Path .. py:class:: DeviceInfo .. py:attribute:: vendor :type: str .. py:attribute:: model :type: str .. py:attribute:: fguid :type: uuid.UUID | None :value: None .. py:attribute:: guid :type: uuid.UUID | None :value: None .. py:attribute:: os :type: str | None :value: None .. py:class:: Ufdx .. py:attribute:: path :type: pathlib.Path | None :value: None .. py:attribute:: evidence :type: uuid.UUID | None :value: None .. py:attribute:: device :type: DeviceInfo | None :value: None .. py:attribute:: extractions :type: list[Extraction] | None :value: None .. py:class:: Dump .. py:attribute:: type :type: str .. py:attribute:: path :type: pathlib.Path .. py:class:: Keychain .. py:attribute:: type :type: str .. py:attribute:: path :type: pathlib.Path .. py:class:: Ufd .. py:attribute:: path :type: pathlib.Path .. py:attribute:: device :type: DeviceInfo .. py:attribute:: dumps :type: list[Dump] | None :value: None .. py:class:: CellebriteLoader(path: pathlib.Path, **kwargs) Bases: :py:obj:`dissect.target.loader.Loader` Load Cellebrite UFED exports (``.ufdx`` and ``.ufd``). .. rubric:: References - https://corp.digitalcorpora.org/corpora/mobile .. py:attribute:: ufdx :value: None .. py:attribute:: ufd :value: [] .. py:attribute:: ffs :value: None .. py:method:: detect(path: pathlib.Path) -> bool :staticmethod: Detects wether this ``Loader`` class can load this specific ``path``. :param path: The target path to check. :returns: ``True`` if the ``path`` can be loaded by a ``Loader`` instance. ``False`` otherwise. .. py:method:: map(target: dissect.target.target.Target) -> None Maps the loaded path into a ``Target``. :param target: The target that we're mapping into. .. py:class:: CellebriteFilesystem(path: pathlib.Path, base: str | None = None, **kwargs) Bases: :py:obj:`dissect.target.filesystem.LayerFilesystem` Cellebrite ``FileDump`` filesystem implementation. .. py:attribute:: __type__ :value: 'cellebrite' A short string identifying the type of filesystem. .. py:attribute:: source .. py:method:: __repr__() -> str