dissect.target.helpers.loaderutil#

Module Contents#

Functions#

add_virtual_ntfs_filesystem

Utility for creating an NtfsFilesystem with separate system files from another Filesystem, usually

extract_path_info

Extracts a ParseResult from a path if it has

Attributes#

log

dissect.target.helpers.loaderutil.log#
dissect.target.helpers.loaderutil.add_virtual_ntfs_filesystem(target, fs, boot_path='$Boot', mft_path='$MFT', usnjrnl_path='$Extend/$Usnjrnl:$J', sds_path='$Secure:$SDS')#

Utility for creating an NtfsFilesystem with separate system files from another Filesystem, usually a DirectoryFilesystem or VirtualFilesystem.

Parameters:

  • target – The target to add the filesystem to.

  • fs – The Filesystem to load the system files from.

  • boot_path – Path to open the $Boot file from.

  • mft_path – Path to open the $MFT file from.

  • usnjrnl_path – Path to open the $Usnjrnl:$J file from.

  • sds_path – Path to open the $Secure:$SDS file from.

dissect.target.helpers.loaderutil.extract_path_info(path: str | pathlib.Path) → tuple[pathlib.Path, urllib.parse.ParseResult | None]#

Extracts a ParseResult from a path if it has a scheme and adjusts the path if necessary.

Parameters:

path – String or Path describing the path of a target.

Returns:

  • a Path or None

  • ParseResult or None