:py:mod:`dissect.target.loaders.kape` ===================================== .. py:module:: dissect.target.loaders.kape Module Contents --------------- Classes ~~~~~~~ .. autoapisummary:: dissect.target.loaders.kape.KapeLoader Functions ~~~~~~~~~ .. autoapisummary:: :nosignatures: dissect.target.loaders.kape.open_kape_file dissect.target.loaders.kape.is_valid_kape_dir dissect.target.loaders.kape.is_valid_kape_file Attributes ~~~~~~~~~~ .. autoapisummary:: dissect.target.loaders.kape.USNJRNL_PATHS .. py:data:: USNJRNL_PATHS :value: ['$Extend/$J', '$Extend/$UsnJrnl$J'] .. py:function:: open_kape_file(path: pathlib.Path) -> collections.abc.Iterator[dissect.target.filesystem.Filesystem] .. py:function:: is_valid_kape_dir(path: pathlib.Path) -> bool .. py:function:: is_valid_kape_file(path: pathlib.Path) -> bool .. py:class:: KapeLoader(path: pathlib.Path, *, parsed_path: urllib.parse.ParseResult | None = None, resolve: bool = True, **kwargs) Bases: :py:obj:`dissect.target.loader.Loader` Load KAPE forensic image format files. .. rubric:: References - https://www.kroll.com/en/insights/publications/cyber/kroll-artifact-parser-extractor-kape - https://ericzimmerman.github.io/KapeDocs/#!Pages.-Using-KAPE.md#container-switches .. py:method:: detect(path: pathlib.Path) -> bool :staticmethod: Detects wether this ``Loader`` class can load this specific ``path``. :param path: The target path to check. :returns: ``True`` if the ``path`` can be loaded by a ``Loader`` instance. ``False`` otherwise. .. py:method:: map(target: dissect.target.target.Target) -> None Maps the loaded path into a ``Target``. :param target: The target that we're mapping into.