acquire
acquire copied to clipboard
Missing collection paths
Looking at what dissect can parse I stumbled across two occurrences where acquire.py doesn't collect something that target-query can parse:
- https://github.com/fox-it/dissect.target/blob/bb9a48852a33e58ea760d7901fd5170526076498/dissect/target/plugins/os/unix/linux/network.py#L205
/usr/lib/systemd/network
- https://github.com/fox-it/dissect.target/blob/bb9a48852a33e58ea760d7901fd5170526076498/dissect/target/plugins/os/unix/applications.py#L15
/usr/share/applications
Looks like there is no glob / dir statement for acquire.py to collect these files although target-query can parse it.
This probably is true for more items, but it's quite complex to find a good mapping between paths in the dissect.target project and the acquire project.
https://github.com/fox-it/dissect.target/pull/1082 will allow us to make more hard links between what we can collect and what we can parse. In the meantime, feel free to create a PR for anything you see that we miss!