dissect.target.helpers.loaderutil#

Module Contents#

Functions#

add_virtual_ntfs_filesystem

Utility for creating an NtfsFilesystem with separate system files from another Filesystem, usually

extract_path_info

Extracts a ParseResult from a path if it has

Attributes#

log

dissect.target.helpers.loaderutil.log#
dissect.target.helpers.loaderutil.add_virtual_ntfs_filesystem(target: dissect.target.target.Target, fs: dissect.target.filesystem.Filesystem, boot_path: str = '$Boot', mft_path: str = '$MFT', usnjrnl_path: str = '$Extend/$Usnjrnl:$J', sds_path: str = '$Secure:$SDS') None#

Utility for creating an NtfsFilesystem with separate system files from another Filesystem, usually a DirectoryFilesystem or VirtualFilesystem.

Parameters:
  • target – The target to add the filesystem to.

  • fs – The Filesystem to load the system files from.

  • boot_path – Path to open the $Boot file from.

  • mft_path – Path to open the $MFT file from.

  • usnjrnl_path – Path to open the $Usnjrnl:$J file from.

  • sds_path – Path to open the $Secure:$SDS file from.

dissect.target.helpers.loaderutil.extract_path_info(path: str | pathlib.Path) tuple[pathlib.Path, urllib.parse.ParseResult | None]#

Extracts a ParseResult from a path if it has a scheme and adjusts the path if necessary.

Parameters:

path – String or Path describing the path of a target.

Returns:

  • a Path or None

  • ParseResult or None