Skip to content

3.16.1: Do not install the lz4 and lzo extras of dissect.util by default (#68)

Latest
Compare
Choose a tag to compare
@pyrco pyrco released this 16 Sep 14:19
5e23a97

This release is identical to 3.16.1, except the hard dependencies on the lz4 and lzo extras of dissect.util are turned into extras of the dissect package itself. These extras are not installed by default.
If you want optimized "native" code for lz4 and lzo decompression, you should install dissect using these extras like:

pip install dissect[lz4,lzo]

Highlights

  • Plugins:
    • New libvirt and qemu child plugins
    • New plugin to extract unsaved notepad tabs
    • 90% speedup in walkfs plugin
    • New plugin to extract windows update agent information
    • New plugin to extract Windows Jump List information
    • New MFT segmentation ability
    • Option to use a different starting directory in etc plugin using --root
    • Support for Windows 10 added in Windows USB plugin
    • Yara plugin was separated from target-query into target-yara command
  • Loaders:
    • VirtualBox .vdi files loader now case insensitive for the format attributes
    • Graceful handle for missing physical disks in LVM
    • New support for Android backups
  • OS support:
    • More robust ESXi OS initialization
  • target-tools:
    • New options added to target-fs ls (-l and -h),
    • Cleanup and extension of a number of target-shell commands
    • Shell history added to traget-shell
  • Misc:
    • If a project (currently dissect.target, dissect.squashfs and dissect.target) uses lzo/lz4 it will now automatically fall back to the pure python implementation in dissect.util if no C version is installed
    • cstruct fix for nested structure definitions

Contributors

Thanks to our contributors for making this release possible:

@EmilienCourt
@joost-j
@JSCU-CNI
@M1ra1B0T
@Matthijsy
@michoebey
@mick-314
@OlafHaalstra
@Zawadidone

Full Changelogs

dissect: 3.15 → 3.16
https://github.com/fox-it/dissect/releases/tag/3.16
dissect.archive: 💤1.2 (no changes)
https://github.com/fox-it/dissect.archive/releases/tag/1.2
dissect.btrfs: 1.4 → 1.5
https://github.com/fox-it/dissect.btrfs/releases/tag/1.5
dissect.cim: 💤3.10 (no changes)
https://github.com/fox-it/dissect.cim/releases/tag/3.10
dissect.clfs: 💤1.9 (no changes)
https://github.com/fox-it/dissect.clfs/releases/tag/1.9
dissect.cstruct: 4.0 → 4.1
https://github.com/fox-it/dissect.cstruct/releases/tag/4.1
dissect.esedb: 💤3.14 (no changes)
https://github.com/fox-it/dissect.esedb/releases/tag/3.14
dissect.etl: 💤3.10 (no changes)
https://github.com/fox-it/dissect.etl/releases/tag/3.10
dissect.eventlog: 💤3.9 (no changes)
https://github.com/fox-it/dissect.eventlog/releases/tag/3.9
dissect.evidence: 💤3.10 (no changes)
https://github.com/fox-it/dissect.evidence/releases/tag/3.10
dissect.executable: 💤1.7 (no changes)
https://github.com/fox-it/dissect.executable/releases/tag/1.7
dissect.extfs: 💤3.11 (no changes)
https://github.com/fox-it/dissect.extfs/releases/tag/3.11
dissect.fat: 💤3.10 (no changes)
https://github.com/fox-it/dissect.fat/releases/tag/3.10
dissect.ffs: 💤3.9 (no changes)
https://github.com/fox-it/dissect.ffs/releases/tag/3.9
dissect.hypervisor: 3.14 → 3.15
https://github.com/fox-it/dissect.hypervisor/releases/tag/3.15
dissect.jffs: 💤1.3 (no changes)
https://github.com/fox-it/dissect.jffs/releases/tag/1.3
dissect.ntfs: 3.11 → 3.12
https://github.com/fox-it/dissect.ntfs/releases/tag/3.12
dissect.ole: 💤3.9 (no changes)
https://github.com/fox-it/dissect.ole/releases/tag/3.9
dissect.regf: 💤3.11 (no changes)
https://github.com/fox-it/dissect.regf/releases/tag/3.11
dissect.shellitem: 3.9 → 3.10
https://github.com/fox-it/dissect.shellitem/releases/tag/3.10
dissect.sql: 💤3.10 (no changes)
https://github.com/fox-it/dissect.sql/releases/tag/3.10
dissect.squashfs: 1.6 → 1.7
https://github.com/fox-it/dissect.squashfs/releases/tag/1.7
dissect.target: 3.18 → 3.19
https://github.com/fox-it/dissect.target/releases/tag/3.19
dissect.thumbcache: 💤1.9 (no changes)
https://github.com/fox-it/dissect.thumbcache/releases/tag/1.9
dissect.util: 3.17 → 3.18
https://github.com/fox-it/dissect.util/releases/tag/3.18
dissect.vmfs: 💤3.9 (no changes)
https://github.com/fox-it/dissect.vmfs/releases/tag/3.9
dissect.volume: 3.11 → 3.12
https://github.com/fox-it/dissect.volume/releases/tag/3.12
dissect.xfs: 💤3.10 (no changes)
https://github.com/fox-it/dissect.xfs/releases/tag/3.10