dissect.target.filesystems.itunes
#
Module Contents#
Classes#
Filesystem implementation for iTunes backups. |
|
Virtual file backed by a file-like object. |
|
Virtual directory implementation. Backed by a dict. |
|
Transparently decrypted AES-CBC decrypted stream. |
- class dissect.target.filesystems.itunes.ITunesFilesystem(backup: dissect.target.loaders.itunes.ITunesBackup, *args, **kwargs)#
Bases:
dissect.target.filesystem.Filesystem
Filesystem implementation for iTunes backups.
- __fstype__ = 'itunes'#
- get(path: str, relentry: dissect.target.filesystem.FilesystemEntry | None = None) dissect.target.filesystem.FilesystemEntry #
Returns a ITunesFileEntry object corresponding to the given path.
- class dissect.target.filesystems.itunes.ITunesFilesystemEntry(fs: Filesystem, path: str, entry: Any)#
Bases:
dissect.target.filesystem.VirtualFile
Virtual file backed by a file-like object.
- open() BinaryIO #
Returns file handle (file-like object).
- iterdir() Iterator[str] #
Iterate over the contents of a directory, return them as strings.
- Returns:
An iterator of directory entries as path strings.
- scandir() Iterator[dissect.target.filesystem.FilesystemEntry] #
Iterate over the contents of a directory, return them as FilesystemEntry’s.
- Returns:
An iterator of directory entries as FilesystemEntry’s.
- is_dir(follow_symlinks: bool = True) bool #
Return whether this entry is a directory.
- is_file(follow_symlinks: bool = True) bool #
Return whether this entry is a file.
- is_symlink() bool #
Return whether this entry is a link.
- readlink() str #
Read the link if this entry is a symlink. Returns a string.
- readlink_ext() dissect.target.filesystem.FilesystemEntry #
Read the link if this entry is a symlink. Returns a filesystem entry.
- stat(follow_symlinks: bool = True) dissect.target.helpers.fsutil.stat_result #
Return the stat information of this entry.
- lstat() dissect.target.helpers.fsutil.stat_result #
Determine the stat information of this entry, without resolving the symlinks.
When it detects a symlink, it will stat the information of the symlink, not the path it points to.
- Returns:
The stat information of this entry.
- class dissect.target.filesystems.itunes.ITunesFilesystemDirectoryEntry(fs: dissect.target.filesystem.Filesystem, path: str, entry: dissect.target.loaders.itunes.FileInfo)#
Bases:
dissect.target.filesystem.VirtualDirectory
Virtual directory implementation. Backed by a dict.
- stat(follow_symlinks: bool = True) dissect.target.helpers.fsutil.stat_result #
Return the stat information of this entry.
- lstat() dissect.target.helpers.fsutil.stat_result #
Return the stat information of the given path, without resolving links.
- class dissect.target.filesystems.itunes.EncryptedFileStream(file_info: dissect.target.loaders.itunes.FileInfo)#
Bases:
dissect.util.stream.AlignedStream
Transparently decrypted AES-CBC decrypted stream.