3.17

Highlights

New projects

• dissect.fve: access encrypted LUKS and Microsoft Bitlocker volumes

New Containers

• Support for BSD Vinum volumes in dissect.volume

Plugins

• New MacOS network interface plugin
• New Windows network interface plugin
• The registry plugin now also looks for registry files in places used by legacy Windows versions
• New Ubuntu snap application package manager plugin
• New Windows installed applications plugin
• New Windows MSSQL log

Tools

• It is now possible to set aliases at runtime in target-shell
• Add support for an rc start-up file in target-shell
• target-shell can now be invoked with a -c option to directly execute commands
• target-query can now output the list of plugins and loaders in json format with the --as-json option

Misc

• Add birthtime, blocksize and number of blocks to various filesystem's stat output
• The configuration parser is extended to access binary configurations
• The configuration parser is extended to parse .env files

Contributors

Thanks to our contributors for making this release possible:

@fox-evv
@h0ckeyst1ck
@JazzCore
@JSCU-CNI

Full Changelogs

dissect: 3.16.1 → 3.17
https://github.com/fox-it/dissect/releases/tag/3.17
dissect.archive: 1.2 → 1.4
https://github.com/fox-it/dissect.archive/releases/tag/1.4
dissect.btrfs: 1.5 → 1.6
https://github.com/fox-it/dissect.btrfs/releases/tag/1.6
dissect.cim: 💤3.10 (no changes)
https://github.com/fox-it/dissect.cim/releases/tag/3.10
dissect.clfs: 💤1.9 (no changes)
https://github.com/fox-it/dissect.clfs/releases/tag/1.9
dissect.cstruct: 4.1 → 4.3
https://github.com/fox-it/dissect.cstruct/releases/tag/4.3
dissect.esedb: 💤3.14 (no changes)
https://github.com/fox-it/dissect.esedb/releases/tag/3.14
dissect.etl: 💤3.10 (no changes)
https://github.com/fox-it/dissect.etl/releases/tag/3.10
dissect.eventlog: 💤3.9 (no changes)
https://github.com/fox-it/dissect.eventlog/releases/tag/3.9
dissect.evidence: 💤3.10 (no changes)
https://github.com/fox-it/dissect.evidence/releases/tag/3.10
dissect.executable: 💤1.7 (no changes)
https://github.com/fox-it/dissect.executable/releases/tag/1.7
dissect.extfs: 3.11 → 3.12
https://github.com/fox-it/dissect.extfs/releases/tag/3.12
dissect.fat: 3.10 → 3.11
https://github.com/fox-it/dissect.fat/releases/tag/3.11
dissect.ffs: 3.9 → 3.10
https://github.com/fox-it/dissect.ffs/releases/tag/3.10
dissect.fve: ✨4.0
https://github.com/fox-it/dissect.fve/releases/tag/4.0
dissect.hypervisor: 3.15 → 3.16
https://github.com/fox-it/dissect.hypervisor/releases/tag/3.16
dissect.jffs: 💤1.3 (no changes)
https://github.com/fox-it/dissect.jffs/releases/tag/1.3
dissect.ntfs: 3.12 → 3.13
https://github.com/fox-it/dissect.ntfs/releases/tag/3.13
dissect.ole: 💤3.9 (no changes)
https://github.com/fox-it/dissect.ole/releases/tag/3.9
dissect.regf: 💤3.11 (no changes)
https://github.com/fox-it/dissect.regf/releases/tag/3.11
dissect.shellitem: 💤3.10 (no changes)
https://github.com/fox-it/dissect.shellitem/releases/tag/3.10
dissect.sql: 💤3.10 (no changes)
https://github.com/fox-it/dissect.sql/releases/tag/3.10
dissect.squashfs: 1.7 → 1.8
https://github.com/fox-it/dissect.squashfs/releases/tag/1.8
dissect.target: 3.19 → 3.20
https://github.com/fox-it/dissect.target/releases/tag/3.20
dissect.thumbcache: 💤1.9 (no changes)
https://github.com/fox-it/dissect.thumbcache/releases/tag/1.9
dissect.util: 3.18 → 3.19
https://github.com/fox-it/dissect.util/releases/tag/3.19
dissect.vmfs: 3.9 → 3.10
https://github.com/fox-it/dissect.vmfs/releases/tag/3.10
dissect.volume: 3.12 → 3.13
https://github.com/fox-it/dissect.volume/releases/tag/3.13
dissect.xfs: 3.10 → 3.11
https://github.com/fox-it/dissect.xfs/releases/tag/3.11