apt.logs

$ target-query <path/to/target> -f apt.logs

Details

Module	dissect.target.plugins.os.unix.linux.debian.apt.AptPlugin
Output	records

Module documentation

Apt package manager plugin.

Function documentation

Package manager log parser for Apt.

Apt creates logs that are multiline and therefore requires somewhat complex parsing logic. We create one PackageManagerLogRecord per package and type; the example below hence generates three records.

Example log format:

Start-Date: 2022-09-21  06:48:56
Commandline: /usr/bin/unattended-upgrade
Install: linux-headers-5.4.0-126:amd64 (5.4.0-126.142, automatic),
Upgrade: linux-headers-generic:amd64 (5.4.0.125.126, 5.4.0.126.127), libpython3.9-minimal:amd64 (3.9.5-3ubuntu0~20.04.1, automatic)
Requested-By: user (1000)
End-Date: 2022-09-21  06:48:57