:py:mod:`dissect.target.filesystems.smb` ======================================== .. py:module:: dissect.target.filesystems.smb Module Contents --------------- Classes ~~~~~~~ .. autoapisummary:: dissect.target.filesystems.smb.SmbFilesystem dissect.target.filesystems.smb.SmbFilesystemEntry dissect.target.filesystems.smb.SmbStream Attributes ~~~~~~~~~~ .. autoapisummary:: dissect.target.filesystems.smb.log .. py:data:: log .. py:class:: SmbFilesystem(conn: impacket.smbconnection.SMBConnection, share_name: str, *args, **kwargs) Bases: :py:obj:`dissect.target.filesystem.Filesystem` Filesystem implementation for SMB. .. py:attribute:: __type__ :value: 'smb' .. py:method:: detect(fh: BinaryIO) -> bool :staticmethod: No, your file is not an SMB connection. .. py:method:: get(path: str) -> dissect.target.filesystem.FilesystemEntry Returns a SmbFilesystemEntry object corresponding to the given path. .. py:class:: SmbFilesystemEntry(fs: Filesystem, path: str, entry: Any) Bases: :py:obj:`dissect.target.filesystem.FilesystemEntry` Base class for filesystem entries. .. py:attribute:: fs :type: SmbFilesystem .. py:attribute:: entry :type: impacket.smb.SharedFile .. py:method:: get(path: str) -> dissect.target.filesystem.FilesystemEntry Retrieve a :class:`FilesystemEntry` relative to this entry. :param path: The path relative to this filesystem entry. :returns: A relative :class:`FilesystemEntry`. .. py:method:: iterdir() -> Iterator[str] Iterate over the contents of a directory, return them as strings. :returns: An iterator of directory entries as path strings. .. py:method:: scandir() -> Iterator[dissect.target.filesystem.FilesystemEntry] Iterate over the contents of a directory, yields :class:`FilesystemEntry`. :returns: An iterator of :class:`FilesystemEntry`. .. py:method:: open() -> SmbStream Open this filesystem entry. :returns: A file-like object. Resolves symlinks when possible .. py:method:: is_dir(follow_symlinks: bool = True) -> bool Determine if this entry is a directory. :param follow_symlinks: Whether to resolve the entry if it is a symbolic link. :returns: ``True`` if the entry is a directory or a symbolic link to a directory, return ``False`` otherwise. If ``follow_symlinks`` is ``False``, return ``True`` only if the entry is a directory (without following symlinks). .. py:method:: is_file(follow_symlinks: bool = True) -> bool Determine if this entry is a file. :param follow_symlinks: Whether to resolve the entry if it is a symbolic link. :returns: ``True`` if the entry is a file or a symbolic link to a file, return ``False`` otherwise. If ``follow_symlinks`` is ``False``, return ``True`` only if the entry is a file (without following symlinks). .. py:method:: is_symlink() -> bool Determine whether this entry is a symlink. :returns: ``True`` if the entry is a symbolic link, ``False`` otherwise. .. py:method:: readlink() -> str Read the link where this entry points to, return the resulting path as string. If it is a symlink and returns the entry that corresponds to that path. This means it follows the path a link points to, it tries to do it recursively. :returns: The path the link points to. .. py:method:: stat(follow_symlinks: bool = True) -> dissect.target.helpers.fsutil.stat_result Determine the stat information of this entry. If the entry is a symlink and ``follow_symlinks`` is ``True``, it gets resolved, attempting to stat the path where it points to. :param follow_symlinks: Whether to resolve the symbolic link if this entry is a symbolic link. :returns: The stat information of this entry. .. py:method:: lstat() -> dissect.target.helpers.fsutil.stat_result Determine the stat information of this entry, **without** resolving the symlinks. When it detects a symlink, it will stat the information of the symlink, not the path it points to. :returns: The stat information of this entry. .. py:class:: SmbStream(conn: impacket.smbconnection.SMBConnection, share_name: str, path: str, size: int) Bases: :py:obj:`dissect.util.stream.AlignedStream` Stream implementation for reading SMB files. .. py:method:: close() -> None Flush and close the IO object. This method has no effect if the file is already closed.