dissect.target

Data extractor

Provides a programming API and command line tools to access various data sources inside disk images or file collections.

The Dissect module tying all other Dissect modules together. It provides a programming API and command line tools which allow easy access to various data sources inside disk images or file collections (a.k.a. targets).

GitHub

48 stars
18 watching
50 forks
Language: Python
last commit: 7 months ago

Related projects:

Repository Description Stars
fox-it/dissect A digital forensics framework that provides tools and parsers to analyze forensic artefacts from various disk and file formats. 939
fox-it/dissect.archive Parses various archive and backup formats using Python 0
fox-it/dissect.util Provides utility functions and decompression algorithms for other Dissect modules. 3
fox-it/dissect.volume A parser module for various disk volume and partition systems 3
fox-it/dissect.executable A Python module providing parsers for various executable formats like PE, ELF, and Macho-O. 0
fox-it/dissect.xfs A Dissect module implementing a parser for the XFS file system, commonly used by RedHat Linux distributions. 2
fox-it/dissect.sql An implementation of the SQLite database file format parser in Python. 6
fox-it/dissect.thumbcache A Dissect module implementing a parser for the Windows thumbcache data format used by Windows Vista+ systems. 1
fox-it/dissect.fat A Dissect module implementing parsers for FAT and exFAT file systems. 2
fox-it/dissect.esedb A Dissect module implementing a parser for a specific Microsoft database format used in various enterprise systems. 18
fox-it/dissect.cstruct A parser for C-like structures in Python 43
fox-it/dissect.ffs A Dissect module implementing a parser for the FFS file system used in BSD operating systems 2
fox-it/dissect.shellitem A Dissect module implementing a parser for Shellitem structures commonly used by Microsoft Windows. 2
fox-it/dissect.cim A module that parses and analyzes data from the Windows Common Information Model (CIM) database 5
fox-it/dissect.ole A parser for the Object Linking & Embedding (OLE) format used by Windows document editors. 3