dissect.hypervisor.disk.vhdx

Module Contents

Classes

VHDX

Hyper-V VHDX implementation.

RegionTable

BlockAllocationTable

ParentLocator

MetadataTable

Functions

open_parent

Attributes

log

dissect.hypervisor.disk.vhdx.log
class dissect.hypervisor.disk.vhdx.VHDX(fh)

Bases: dissect.util.stream.AlignedStream

Hyper-V VHDX implementation.

Supports fixed, dynamic and differencing VHDX files.

Currently, differencing VHDX files must be passed as a pathlib.Path object, with the parent VHDX in the same directory, or the registered absolute directory.

read_sectors(sector, count)
class dissect.hypervisor.disk.vhdx.RegionTable(fh, offset)
get(guid, required=True)
class dissect.hypervisor.disk.vhdx.BlockAllocationTable(vhdx, offset)
get(entry)

Get a BAT entry.

pb(block)

Get a payload block entry for a given block.

sb(block)

Get a sector bitmap entry for a given block.

class dissect.hypervisor.disk.vhdx.ParentLocator(fh)
class dissect.hypervisor.disk.vhdx.MetadataTable(fh, offset, length)
METADATA_MAP
get(guid, required=True)
dissect.hypervisor.disk.vhdx.open_parent(path, locator)