This release is identical to 3.16.1, except the hard dependencies on the lz4
and lzo
extras of dissect.util
are turned into extras of the dissect
package itself. These extras are not installed by default.
If you want optimized "native" code for lz4 and lzo decompression, you should install dissect using these extras like:
pip install dissect[lz4,lzo]
Highlights
- Plugins:
- New libvirt and qemu child plugins
- New plugin to extract unsaved notepad tabs
- 90% speedup in walkfs plugin
- New plugin to extract windows update agent information
- New plugin to extract Windows Jump List information
- New MFT segmentation ability
- Option to use a different starting directory in etc plugin using --root
- Support for Windows 10 added in Windows USB plugin
- Yara plugin was separated from target-query into target-yara command
- Loaders:
- VirtualBox .vdi files loader now case insensitive for the format attributes
- Graceful handle for missing physical disks in LVM
- New support for Android backups
- OS support:
- More robust ESXi OS initialization
- target-tools:
- New options added to
target-fs ls
(-l
and-h
), - Cleanup and extension of a number of target-shell commands
- Shell history added to traget-shell
- New options added to
- Misc:
- If a project (currently dissect.target, dissect.squashfs and dissect.target) uses lzo/lz4 it will now automatically fall back to the pure python implementation in dissect.util if no C version is installed
- cstruct fix for nested structure definitions
Contributors
Thanks to our contributors for making this release possible:
@EmilienCourt
@joost-j
@JSCU-CNI
@M1ra1B0T
@Matthijsy
@michoebey
@mick-314
@OlafHaalstra
@Zawadidone
Full Changelogs
dissect: 3.15 → 3.16
https://github.com/fox-it/dissect/releases/tag/3.16
dissect.archive: 💤1.2 (no changes)
https://github.com/fox-it/dissect.archive/releases/tag/1.2
dissect.btrfs: 1.4 → 1.5
https://github.com/fox-it/dissect.btrfs/releases/tag/1.5
dissect.cim: 💤3.10 (no changes)
https://github.com/fox-it/dissect.cim/releases/tag/3.10
dissect.clfs: 💤1.9 (no changes)
https://github.com/fox-it/dissect.clfs/releases/tag/1.9
dissect.cstruct: 4.0 → 4.1
https://github.com/fox-it/dissect.cstruct/releases/tag/4.1
dissect.esedb: 💤3.14 (no changes)
https://github.com/fox-it/dissect.esedb/releases/tag/3.14
dissect.etl: 💤3.10 (no changes)
https://github.com/fox-it/dissect.etl/releases/tag/3.10
dissect.eventlog: 💤3.9 (no changes)
https://github.com/fox-it/dissect.eventlog/releases/tag/3.9
dissect.evidence: 💤3.10 (no changes)
https://github.com/fox-it/dissect.evidence/releases/tag/3.10
dissect.executable: 💤1.7 (no changes)
https://github.com/fox-it/dissect.executable/releases/tag/1.7
dissect.extfs: 💤3.11 (no changes)
https://github.com/fox-it/dissect.extfs/releases/tag/3.11
dissect.fat: 💤3.10 (no changes)
https://github.com/fox-it/dissect.fat/releases/tag/3.10
dissect.ffs: 💤3.9 (no changes)
https://github.com/fox-it/dissect.ffs/releases/tag/3.9
dissect.hypervisor: 3.14 → 3.15
https://github.com/fox-it/dissect.hypervisor/releases/tag/3.15
dissect.jffs: 💤1.3 (no changes)
https://github.com/fox-it/dissect.jffs/releases/tag/1.3
dissect.ntfs: 3.11 → 3.12
https://github.com/fox-it/dissect.ntfs/releases/tag/3.12
dissect.ole: 💤3.9 (no changes)
https://github.com/fox-it/dissect.ole/releases/tag/3.9
dissect.regf: 💤3.11 (no changes)
https://github.com/fox-it/dissect.regf/releases/tag/3.11
dissect.shellitem: 3.9 → 3.10
https://github.com/fox-it/dissect.shellitem/releases/tag/3.10
dissect.sql: 💤3.10 (no changes)
https://github.com/fox-it/dissect.sql/releases/tag/3.10
dissect.squashfs: 1.6 → 1.7
https://github.com/fox-it/dissect.squashfs/releases/tag/1.7
dissect.target: 3.18 → 3.19
https://github.com/fox-it/dissect.target/releases/tag/3.19
dissect.thumbcache: 💤1.9 (no changes)
https://github.com/fox-it/dissect.thumbcache/releases/tag/1.9
dissect.util: 3.17 → 3.18
https://github.com/fox-it/dissect.util/releases/tag/3.18
dissect.vmfs: 💤3.9 (no changes)
https://github.com/fox-it/dissect.vmfs/releases/tag/3.9
dissect.volume: 3.11 → 3.12
https://github.com/fox-it/dissect.volume/releases/tag/3.12
dissect.xfs: 💤3.10 (no changes)
https://github.com/fox-it/dissect.xfs/releases/tag/3.10