dissect.target.loaders.uac

Module Contents

Classes

UacLoader	Loader for extracted UAC collections.
UacTarSubloader	Loader for tar-based UAC collections.
UacZipSubLoader	Loader for zip-based UAC collections.

Attributes

log
FILESYSTEMS_ROOT
UAC_CHECK_FILE

dissect.target.loaders.uac.log

dissect.target.loaders.uac.FILESYSTEMS_ROOT = '[root]'

dissect.target.loaders.uac.UAC_CHECK_FILE = 'uac.log'

class dissect.target.loaders.uac.UacLoader(path: pathlib.Path, *, parsed_path: urllib.parse.ParseResult | None = None, resolve: bool = True, **kwargs)

Bases: dissect.target.loader.Loader

Loader for extracted UAC collections.

References

• https://github.com/tclahr/uac

• https://tclahr.github.io/uac-docs/

static detect(path: pathlib.Path) → bool

Detects wether this Loader class can load this specific path.

Parameters:

path – The target path to check.

Returns:

True if the path can be loaded by a Loader instance. False otherwise.

map(target: dissect.target.target.Target) → None

Maps the loaded path into a Target.

Parameters:

target – The target that we’re mapping into.

class dissect.target.loaders.uac.UacTarSubloader(path: pathlib.Path, tar: tarfile.TarFile, **kwargs)

Bases: dissect.target.loaders.tar.TarSubLoader

Loader for tar-based UAC collections.

References

• https://github.com/tclahr/uac

• https://tclahr.github.io/uac-docs/

FS_ROOT_TUPLE

static detect(path: pathlib.Path, tarfile: tarfile.TarFile) → bool

Only to be called internally by TarLoader.

map(target: dissect.target.target.Target) → None

Only to be called internally by TarLoader.

class dissect.target.loaders.uac.UacZipSubLoader(path: pathlib.Path, zipfile: zipfile.Path, **kwargs)

Bases: dissect.target.loaders.zip.ZipSubLoader

Loader for zip-based UAC collections.

References

• https://github.com/tclahr/uac

• https://tclahr.github.io/uac-docs/

static detect(path: pathlib.Path, zipfile: zipfile.Path) → bool

Only to be called internally by ZipLoader.

map(target: dissect.target.target.Target) → None

Only to be called internally by ZipLoader.