dissect.target.helpers.loaderutil

Module Contents

Functions

add_virtual_ntfs_filesystem

Utility for creating an NtfsFilesystem with separate system files from another Filesystem, usually

parse_path_uri

Parse a path URI into its path component and a parsed path, if applicable.

Attributes

log

dissect.target.helpers.loaderutil.log
dissect.target.helpers.loaderutil.add_virtual_ntfs_filesystem(target: dissect.target.target.Target, fs: dissect.target.filesystem.Filesystem, boot_path: str = '$Boot', mft_path: str = '$MFT', usnjrnl_path: str = '$Extend/$Usnjrnl:$J', sds_path: str = '$Secure:$SDS') → None

Utility for creating an NtfsFilesystem with separate system files from another Filesystem, usually a DirectoryFilesystem or VirtualFilesystem.

Parameters:

  • target – The target to add the filesystem to.

  • fs – The Filesystem to load the system files from.

  • boot_path – Path to open the $Boot file from.

  • mft_path – Path to open the $MFT file from.

  • usnjrnl_path – Path to open the $Usnjrnl:$J file from.

  • sds_path – Path to open the $Secure:$SDS file from.

dissect.target.helpers.loaderutil.parse_path_uri(path: str | pathlib.Path | None) → tuple[pathlib.Path | None, urllib.parse.ParseResult | None]

Parse a path URI into its path component and a parsed path, if applicable.

If the path is a string, it will be parsed as a URI. If it is a Path object, it will be returned as is.

Parameters:

path – String or Path describing the path of a target.

Returns:

A tuple containing a normalized path and the parsed path.