acquire icon indicating copy to clipboard operation
acquire copied to clipboard

Missing collection paths

Open OlafHaalstra opened this issue 8 months ago • 1 comments

Looking at what dissect can parse I stumbled across two occurrences where acquire.py doesn't collect something that target-query can parse:

  1. https://github.com/fox-it/dissect.target/blob/bb9a48852a33e58ea760d7901fd5170526076498/dissect/target/plugins/os/unix/linux/network.py#L205
/usr/lib/systemd/network
  1. https://github.com/fox-it/dissect.target/blob/bb9a48852a33e58ea760d7901fd5170526076498/dissect/target/plugins/os/unix/applications.py#L15
/usr/share/applications

Looks like there is no glob / dir statement for acquire.py to collect these files although target-query can parse it.

This probably is true for more items, but it's quite complex to find a good mapping between paths in the dissect.target project and the acquire project.

OlafHaalstra avatar Apr 01 '25 23:04 OlafHaalstra

https://github.com/fox-it/dissect.target/pull/1082 will allow us to make more hard links between what we can collect and what we can parse. In the meantime, feel free to create a PR for anything you see that we miss!

Schamper avatar Apr 02 '25 09:04 Schamper