:py:mod:`dissect.target.plugins.apps.edr.acquire`
=================================================

.. py:module:: dissect.target.plugins.apps.edr.acquire




Module Contents
---------------

Classes
~~~~~~~

.. autoapisummary::

   dissect.target.plugins.apps.edr.acquire.AcquirePlugin




Attributes
~~~~~~~~~~

.. autoapisummary::

   dissect.target.plugins.apps.edr.acquire.AcquireOpenHandlesRecord
   dissect.target.plugins.apps.edr.acquire.AcquireHashRecord


.. py:data:: AcquireOpenHandlesRecord

.. py:data:: AcquireHashRecord

.. py:class:: AcquirePlugin(target: dissect.target.target.Target)

   Bases: :py:obj:`dissect.target.plugin.Plugin`


   Returns records from data collected by Acquire.


   .. py:attribute:: __namespace__
      :value: 'acquire'


      Defines the plugin namespace.


   .. py:attribute:: hash_file


   .. py:attribute:: open_handles_file


   .. py:method:: check_compatible() -> None

      Perform a compatibility check with the target.

      This function should return ``None`` if the plugin is compatible with the current target (``self.target``).
      For example, check if a certain file exists. Otherwise it should raise an
      :class:`UnsupportedPluginError`.

      :raises UnsupportedPluginError: If the plugin could not be loaded.



   .. py:method:: hashes() -> collections.abc.Iterator[AcquireHashRecord]

      Return file hashes collected by Acquire.

      An Acquire file container contains a file hashes csv when the hashes module was used. The content of this csv
      file is returned.



   .. py:method:: handles() -> collections.abc.Iterator[AcquireOpenHandlesRecord]

      Return open handles collected by Acquire.

      An Acquire file container contains an open handles csv when the handles module was used. The content of this csv
      file is returned.