3.18

Highlights

Dissect 3.18 has been released and there have been a lot of changes.

We now have support for python 3.13!

Plugin changes and additions

The following plugins have been added:

• A capability access manager plugin has been added by @qmadev. The plugin can be accessed with -f os.windows.regf.cam
• Acquire MSSQL error log support
• Support for Proxmox systems, the artifacts can be acquired with acquire
• Office add-ins plugin
• Preliminary NFS support

New tools!

@JSCU-CNI added the target-diff tool to our target-* tooling. This can be used to compare two target to one another.
@Schamper added the target-qfind tool to our target-* tooling. This can be used to Find a needle in a haystack. Feel free to check it out!

Internal changes

• Linter changed to Ruff in most projects, rest to follow
• Many documentation generation errors have been fixed
• Added consistency between tools in regards of command line arguments that they accept
• Refactor of the plugin system. The internal representation of plugins has changed and now includes plugin directories! Now you can add your plugins like this, and makes organization of code a bit easier:

  dissect/target/plugins/path/to/plugin_dir/
  - _plugin.py <- where you put the plugin
  - any_helpers.py
  

  The plugins themselves can then be accessed with -f path.to.plugin_dir.plugin_name.

Contributors

Thanks to our contributors for making this release possible:

@CinisSec
@JSCU-CNI
@Lekensteyn
@qmadev
@wbi-ocd
@Zawadidone

Full Changelogs

dissect: 3.17.1 → 3.18
https://github.com/fox-it/dissect/releases/tag/3.18
dissect.archive: 1.4 → 1.5
https://github.com/fox-it/dissect.archive/releases/tag/1.5
dissect.btrfs: 1.6 → 1.7
https://github.com/fox-it/dissect.btrfs/releases/tag/1.7
dissect.cim: 3.10 → 3.11
https://github.com/fox-it/dissect.cim/releases/tag/3.11
dissect.clfs: 1.9 → 1.10
https://github.com/fox-it/dissect.clfs/releases/tag/1.10
dissect.cstruct: 4.3 → 4.4
https://github.com/fox-it/dissect.cstruct/releases/tag/4.4
dissect.esedb: 3.14 → 3.15
https://github.com/fox-it/dissect.esedb/releases/tag/3.15
dissect.etl: 3.10 → 3.11
https://github.com/fox-it/dissect.etl/releases/tag/3.11
dissect.eventlog: 3.9 → 3.10
https://github.com/fox-it/dissect.eventlog/releases/tag/3.10
dissect.evidence: 3.10 → 3.11
https://github.com/fox-it/dissect.evidence/releases/tag/3.11
dissect.executable: 1.7 → 1.8
https://github.com/fox-it/dissect.executable/releases/tag/1.8
dissect.extfs: 3.12 → 3.13
https://github.com/fox-it/dissect.extfs/releases/tag/3.13
dissect.fat: 3.11 → 3.12
https://github.com/fox-it/dissect.fat/releases/tag/3.12
dissect.ffs: 3.10 → 3.11
https://github.com/fox-it/dissect.ffs/releases/tag/3.11
dissect.fve: 4.0 → 4.1
https://github.com/fox-it/dissect.fve/releases/tag/4.1
dissect.hypervisor: 3.16 → 3.17
https://github.com/fox-it/dissect.hypervisor/releases/tag/3.17
dissect.jffs: 1.3 → 1.4
https://github.com/fox-it/dissect.jffs/releases/tag/1.4
dissect.ntfs: 3.13 → 3.14
https://github.com/fox-it/dissect.ntfs/releases/tag/3.14
dissect.ole: 3.9 → 3.10
https://github.com/fox-it/dissect.ole/releases/tag/3.10
dissect.regf: 3.11 → 3.12
https://github.com/fox-it/dissect.regf/releases/tag/3.12
dissect.shellitem: 3.10 → 3.11
https://github.com/fox-it/dissect.shellitem/releases/tag/3.11
dissect.sql: 3.10 → 3.11
https://github.com/fox-it/dissect.sql/releases/tag/3.11
dissect.squashfs: 1.8 → 1.9
https://github.com/fox-it/dissect.squashfs/releases/tag/1.9
dissect.target: 3.20.1 → 3.21
https://github.com/fox-it/dissect.target/releases/tag/3.21
dissect.thumbcache: 1.9 → 1.10
https://github.com/fox-it/dissect.thumbcache/releases/tag/1.10
dissect.util: 3.19 → 3.20
https://github.com/fox-it/dissect.util/releases/tag/3.20
dissect.vmfs: 3.10 → 3.11
https://github.com/fox-it/dissect.vmfs/releases/tag/3.11
dissect.volume: 3.13 → 3.14
https://github.com/fox-it/dissect.volume/releases/tag/3.14
dissect.xfs: 3.11 → 3.12
https://github.com/fox-it/dissect.xfs/releases/tag/3.12