dissect.target.helpers.loaderutil#

Module Contents#

Functions#

add_virtual_ntfs_filesystem

Utility for creating an NtfsFilesystem with separate system files from another Filesystem, usually

extract_path_info

Extracts a ParseResult from a path if it has
dissect.target.helpers.loaderutil.add_virtual_ntfs_filesystem(target, fs, boot_path='$Boot', mft_path='$MFT', usnjrnl_path='$Extend/$Usnjrnl:$J', sds_path='$Secure:$SDS')#

Utility for creating an NtfsFilesystem with separate system files from another Filesystem, usually a DirectoryFilesystem or VirtualFilesystem.

Parameters:

  • target – The target to add the filesystem to.

  • fs – The Filesystem to load the system files from.

  • boot_path – Path to open the $Boot file from.

  • mft_path – Path to open the $MFT file from.

  • usnjrnl_path – Path to open the $Usnjrnl:$J file from.

  • sds_path – Path to open the $Secure:$SDS file from.

dissect.target.helpers.loaderutil.extract_path_info(path: Union[str, pathlib.Path]) → Tuple[pathlib.Path, Optional[urllib.parse.ParseResult]]#

Extracts a ParseResult from a path if it has a scheme and adjusts the path if necessary.

Parameters:

path – String or Path describing the path of a target.

Returns:

  • a Path or None

  • ParseResult or None