|
1 | 1 | Supported targets |
2 | 2 | ----------------- |
3 | 3 |
|
4 | | -Dissect supports a large range of formats. From various disk images, volume systems, file systems and operating systems, to tarballs and proprietary backup formats, and everything combined! This page aims to provide you with an overview of what you can expect Dissect to be able to handle! |
| 4 | +Dissect supports a large range of formats. |
| 5 | +From various disk images, volume systems, file systems and operating systems, to tarballs and proprietary backup formats, and everything combined! |
| 6 | +This page aims to provide you with an overview of what you can expect Dissect to be able to handle! |
5 | 7 |
|
6 | 8 | Loaders |
7 | 9 | ~~~~~~~ |
8 | 10 |
|
9 | | -Loaders provide a way to interact with a "target" by combining and accessing source data into usable components for ``dissect.target``. |
10 | | -The goal is to build a virtual representation of the original system. |
| 11 | +Loaders provide a way to interact with a "target" by combining and accessing source data into usable parts. |
| 12 | +This creates a virtual version of the original system. |
11 | 13 |
|
12 | 14 | .. seealso:: |
13 | 15 |
|
14 | 16 | For a deeper dive into how loaders work, see :doc:`loaders </advanced/loaders>`. |
15 | 17 |
|
16 | 18 | In most cases, Dissect selects the appropriate loader automatically based on the file you target. |
17 | | -This can be based on the file extension, a specific directory structure inside the file (e.g. inside a zip file) or a specific configuration inside the file. |
18 | | -However, there is an option to select a loader manually using ``-L <loader type>`` flag or with URI-style notation ``<loader type>://``. |
| 19 | +It does this by looking at things like the file type, folder structure or special configurations files. |
| 20 | +If needed, you can choose the loader yourself by using ``-L <loader type>`` option or by using the URI-style notation ``<loader type>://``. |
19 | 21 |
|
20 | 22 | .. code-block:: bash |
21 | 23 |
|
@@ -142,7 +144,7 @@ However, there is an option to select a loader manually using ``-L <loader type> |
142 | 144 | - ``*.utm/`` directory. |
143 | 145 | - :class:`utm <dissect.target.loaders.utm.UtmLoader>` |
144 | 146 | * - VB |
145 | | - - .. TODO: looks like it supports rawcopy or something. |
| 147 | + - Construct a target from files created by RawCopy |
146 | 148 | - |
147 | 149 | - :class:`vb <dissect.target.loaders.vb.VBLoader>` |
148 | 150 | * - Virtual Box |
@@ -181,8 +183,8 @@ However, there is an option to select a loader manually using ``-L <loader type> |
181 | 183 | Containers |
182 | 184 | ~~~~~~~~~~ |
183 | 185 |
|
184 | | -Containers provide an interface for Dissect to interact with a disk-like structure in a consistent way. |
185 | | -These can be files or a harddisk. |
| 186 | +Containers lets Dissect interact with a disk-like structure in a consistent way. |
| 187 | +These can be virtual machine files, forensic containers or a harddisk itself. |
186 | 188 |
|
187 | 189 | .. seealso:: |
188 | 190 |
|
@@ -259,8 +261,7 @@ Dissect supports the following partition schemes to divide a disk into multiple |
259 | 261 | * - Master Boot Record |
260 | 262 | - :class:`here <dissect.volume.disk.schemes.mbr.MBR>` |
261 | 263 |
|
262 | | -Besides the standard partition tables used in most computer systems. |
263 | | -Dissect supports volume systems used for RAID configurations or logical volumes that span multiple disks. |
| 264 | +Besides these standard partition tables used in most computer systems, Dissect supports disks in RAID configurations or disks with logical volumes that span multiple disks. |
264 | 265 |
|
265 | 266 | .. seealso:: |
266 | 267 |
|
@@ -288,9 +289,9 @@ The table below showcases the different supported volume systems. |
288 | 289 | - VMFS is a clustered filesystem developed by VMWare on an ESXi type hosts. |
289 | 290 | - :class:`here <dissect.target.volumes.vmfs.VmfsVolumeSystem>` |
290 | 291 |
|
291 | | -Dissect also supports decryption for some well known formats. |
292 | | -The decryption functionality can be accessed with the (``-K``) or a keychain value (``-Kv``) inside the Dissect tooling. |
293 | | -Dissect supports the following encrypted volume systems |
| 292 | +Dissect also has decryption capability for some well known systems. |
| 293 | +This functionality can be accessed with a keychain file (specified with ``-K``) with multiple passphrases or a keychain value (``-Kv``) using Dissect. |
| 294 | +Dissect supports the following encryption formats. |
294 | 295 |
|
295 | 296 | .. list-table:: Supported Encrypted Volume Systems |
296 | 297 | :header-rows: 1 |
@@ -382,8 +383,8 @@ This includes both standard filesystems and formats that resemble filesystem beh |
382 | 383 | Operating Systems |
383 | 384 | ~~~~~~~~~~~~~~~~~ |
384 | 385 |
|
385 | | -Dissect supports various operating systems, where Dissect tries to automatically figure out what operating system is on the disk. |
386 | | -This kind of detection enables more accurate queries for retrieving user and network information. |
| 386 | +Dissect supports various operating systems, where Dissect tries to automatically figure out what operating system is available on the disk. |
| 387 | +Once the operating system is known, it enables the user to get more accurate information from the system, for example, the user andretrieve user or network information. |
387 | 388 |
|
388 | 389 | Below is a list of supported operating systems that Dissect can detect. |
389 | 390 |
|
@@ -436,10 +437,9 @@ Child Targets |
436 | 437 | ~~~~~~~~~~~~~ |
437 | 438 |
|
438 | 439 | Dissect supports identifying, listing and querying *child targets*. |
439 | | -These are targets within other targets. |
440 | | -This can include virtual machines, containers, or other environments nested inside a target. |
441 | | -Child targets are discovered using configuration files or metadata present on the host or target. |
442 | | -Dissect can recursively query these targets, allowing it to detect deeply nested environments automatically. |
| 440 | +These are systems within other systems and can include virtual machines, containers or any other environment inside a "target". |
| 441 | +Dissect finds these systems by looking inside configuration files on the systems. |
| 442 | +It can even look deeper, and look inside those systems within systems for even more *child targets*. |
443 | 443 |
|
444 | 444 | .. seealso:: |
445 | 445 |
|
|
0 commit comments