dissect.archive

View on GitHub

A Dissect module implementing parsers for various archive and backup formats. Currently has support for:

  • WIM (Windows Imaging Format, WIM)

  • VMA (VMA)

  • XVA (XVA)

  • VBK (VBK)

Installation

dissect.archive is available on PyPI.

$ pip install dissect.archive

This module is also automatically installed if you install the dissect package.

Usage

This package is a library with no CLI tools, so you can only interact with it from Python. For example, to print a directory listing of the root directory and read a file from a WIM archive:

from dissect.archive.wim import WIM

fh = open("path/to/file.wim", "rb")

wim = WIM(fh)
for image in wim.images():
    print(image.get("/").listdir())

    file_fh = image.get("/file.txt").open()  # This is just another file-like object
    print(file_fh.read())

Tools

vma-extract - CLI interface

Utility to extract all files contained in a VMA backup.

vma-extract [-h] -o OUTPUT [-v] input

vma-extract positional arguments

  • input - path to backup file (default: None)

vma-extract optional arguments

  • -h, --help - show this help message and exit

  • -o OUTPUT, --output OUTPUT - path to output directory (default: None)

  • -v, --verbose - increase output verbosity (default: 3)

vbk-extract - CLI interface

Utility to extract all files contained in a VBK backup.

vbk-extract [-h] -o OUTPUT [-v] input

vbk-extract positional arguments

  • input - path to backup file (default: None)

vbk-extract optional arguments

  • -h, --help - show this help message and exit

  • -o OUTPUT, --output OUTPUT - path to output directory (default: None)

  • -v, --verbose - increase output verbosity (default: 3)

backup-extract - CLI interface

Utility to extract all files from supported backup formats.

backup-extract [-h] -o OUTPUT [-v] input

backup-extract positional arguments

  • input - path to backup file (default: None)

backup-extract optional arguments

  • -h, --help - show this help message and exit

  • -o OUTPUT, --output OUTPUT - path to output directory (default: None)

  • -v, --verbose - increase output verbosity (default: 3)

Reference

For more details, please refer to the API documentation of dissect.archive.