├── .gitignore ├── .gitmodules ├── .travis.yml ├── ChangeLog ├── LICENSE ├── MANIFEST.in ├── README.md ├── _version.py ├── aff4.py ├── pyaff4 ├── __init__.py ├── _version.py ├── abort_test.py ├── aes_keywrap.py ├── aff4.py ├── aff4_cloud.py ├── aff4_directory.py ├── aff4_directory_test.py ├── aff4_file.py ├── aff4_image.py ├── aff4_image_test.py ├── aff4_image_test2.py ├── aff4_imager_utils.py ├── aff4_map.py ├── aff4_map_test.py ├── aff4_metadata.py ├── aff4_utils.py ├── block_hasher.py ├── container.py ├── container_test.py ├── crypt_image_test.py ├── data_store.py ├── data_store_test.py ├── dedup_test.py ├── encrypted_stream.py ├── encryptedstream_test.py ├── escaping.py ├── escaping_test.py ├── hashes.py ├── hashing_test.py ├── hexdump.py ├── keybag.py ├── lexicon.py ├── linear_hasher.py ├── logical.py ├── logical_append_test.py ├── logical_test.py ├── plugins.py ├── random_imagestream_test.py ├── rdfvalue.py ├── rdfvalue_test.py ├── reference_test.py ├── registry.py ├── standards_test.py ├── statx.py ├── stream_factory.py ├── stream_test.py ├── streams.py ├── struct_parser.py ├── symbolic_streams.py ├── test.sh ├── test_crypto.py ├── turtle.py ├── utils.py ├── version.py ├── zip.py ├── zip_test.py ├── zip_test_extended.py ├── zip_test_unicode.py └── zip_test_unicode2.py ├── requirements.txt ├── samples ├── extract_streams.py └── simple_block_read.py ├── setup.py ├── test_images ├── AFF4-L │ ├── broken-dedupe.aff4 │ ├── dream.aff4 │ ├── dream.aff4.information.turtle │ ├── dream.txt │ ├── information.turtle │ ├── paper-hash_based_disk_imaging_using_aff4.pdf │ ├── paper-hash_based_disk_imaging_using_aff4.pdf.frag.1 │ ├── paper-hash_based_disk_imaging_using_aff4.pdf.frag.2 │ ├── unicode.aff4 │ ├── unicode.zip │ ├── utf8segment-macos.zip │ └── ネコ.txt ├── AFF4PreStd │ ├── Base-Allocated.af4 │ ├── Base-Linear-ReadError.af4 │ ├── Base-Linear.af4 │ └── README.txt ├── AFF4Std │ ├── Base-Allocated.aff4 │ ├── Base-Linear-AllHashes.aff4 │ ├── Base-Linear-ReadError.aff4 │ ├── Base-Linear.aff4 │ ├── README.txt │ └── Striped │ │ ├── Base-Linear_1.aff4 │ │ └── Base-Linear_2.aff4 ├── README.md └── keys │ ├── certificate.pem │ └── key.pem ├── version.py └── version.yaml /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/.gitignore -------------------------------------------------------------------------------- /.gitmodules: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/.gitmodules -------------------------------------------------------------------------------- /.travis.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/.travis.yml -------------------------------------------------------------------------------- /ChangeLog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/ChangeLog -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/LICENSE -------------------------------------------------------------------------------- /MANIFEST.in: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/MANIFEST.in -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/README.md -------------------------------------------------------------------------------- /_version.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/_version.py -------------------------------------------------------------------------------- /aff4.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/aff4.py -------------------------------------------------------------------------------- /pyaff4/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/__init__.py -------------------------------------------------------------------------------- /pyaff4/_version.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/_version.py -------------------------------------------------------------------------------- /pyaff4/abort_test.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/abort_test.py -------------------------------------------------------------------------------- /pyaff4/aes_keywrap.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/aes_keywrap.py -------------------------------------------------------------------------------- /pyaff4/aff4.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/aff4.py -------------------------------------------------------------------------------- /pyaff4/aff4_cloud.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/aff4_cloud.py -------------------------------------------------------------------------------- /pyaff4/aff4_directory.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/aff4_directory.py -------------------------------------------------------------------------------- /pyaff4/aff4_directory_test.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/aff4_directory_test.py -------------------------------------------------------------------------------- /pyaff4/aff4_file.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/aff4_file.py -------------------------------------------------------------------------------- /pyaff4/aff4_image.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/aff4_image.py -------------------------------------------------------------------------------- /pyaff4/aff4_image_test.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/aff4_image_test.py -------------------------------------------------------------------------------- /pyaff4/aff4_image_test2.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/aff4_image_test2.py -------------------------------------------------------------------------------- /pyaff4/aff4_imager_utils.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/aff4_imager_utils.py -------------------------------------------------------------------------------- /pyaff4/aff4_map.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/aff4_map.py -------------------------------------------------------------------------------- /pyaff4/aff4_map_test.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/aff4_map_test.py -------------------------------------------------------------------------------- /pyaff4/aff4_metadata.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/aff4_metadata.py -------------------------------------------------------------------------------- /pyaff4/aff4_utils.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/aff4_utils.py -------------------------------------------------------------------------------- /pyaff4/block_hasher.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/block_hasher.py -------------------------------------------------------------------------------- /pyaff4/container.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/container.py -------------------------------------------------------------------------------- /pyaff4/container_test.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/container_test.py -------------------------------------------------------------------------------- /pyaff4/crypt_image_test.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/crypt_image_test.py -------------------------------------------------------------------------------- /pyaff4/data_store.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/data_store.py -------------------------------------------------------------------------------- /pyaff4/data_store_test.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/data_store_test.py -------------------------------------------------------------------------------- /pyaff4/dedup_test.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/dedup_test.py -------------------------------------------------------------------------------- /pyaff4/encrypted_stream.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/encrypted_stream.py -------------------------------------------------------------------------------- /pyaff4/encryptedstream_test.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/encryptedstream_test.py -------------------------------------------------------------------------------- /pyaff4/escaping.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/escaping.py -------------------------------------------------------------------------------- /pyaff4/escaping_test.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/escaping_test.py -------------------------------------------------------------------------------- /pyaff4/hashes.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/hashes.py -------------------------------------------------------------------------------- /pyaff4/hashing_test.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/hashing_test.py -------------------------------------------------------------------------------- /pyaff4/hexdump.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/hexdump.py -------------------------------------------------------------------------------- /pyaff4/keybag.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/keybag.py -------------------------------------------------------------------------------- /pyaff4/lexicon.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/lexicon.py -------------------------------------------------------------------------------- /pyaff4/linear_hasher.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/linear_hasher.py -------------------------------------------------------------------------------- /pyaff4/logical.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/logical.py -------------------------------------------------------------------------------- /pyaff4/logical_append_test.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/logical_append_test.py -------------------------------------------------------------------------------- /pyaff4/logical_test.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/logical_test.py -------------------------------------------------------------------------------- /pyaff4/plugins.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/plugins.py -------------------------------------------------------------------------------- /pyaff4/random_imagestream_test.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/random_imagestream_test.py -------------------------------------------------------------------------------- /pyaff4/rdfvalue.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/rdfvalue.py -------------------------------------------------------------------------------- /pyaff4/rdfvalue_test.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/rdfvalue_test.py -------------------------------------------------------------------------------- /pyaff4/reference_test.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/reference_test.py -------------------------------------------------------------------------------- /pyaff4/registry.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/registry.py -------------------------------------------------------------------------------- /pyaff4/standards_test.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/standards_test.py -------------------------------------------------------------------------------- /pyaff4/statx.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/statx.py -------------------------------------------------------------------------------- /pyaff4/stream_factory.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/stream_factory.py -------------------------------------------------------------------------------- /pyaff4/stream_test.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/stream_test.py -------------------------------------------------------------------------------- /pyaff4/streams.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/streams.py -------------------------------------------------------------------------------- /pyaff4/struct_parser.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/struct_parser.py -------------------------------------------------------------------------------- /pyaff4/symbolic_streams.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/symbolic_streams.py -------------------------------------------------------------------------------- /pyaff4/test.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | python -m unittest discover -p '*test.py' -v 4 | -------------------------------------------------------------------------------- /pyaff4/test_crypto.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/test_crypto.py -------------------------------------------------------------------------------- /pyaff4/turtle.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/turtle.py -------------------------------------------------------------------------------- /pyaff4/utils.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/utils.py -------------------------------------------------------------------------------- /pyaff4/version.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/version.py -------------------------------------------------------------------------------- /pyaff4/zip.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/zip.py -------------------------------------------------------------------------------- /pyaff4/zip_test.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/zip_test.py -------------------------------------------------------------------------------- /pyaff4/zip_test_extended.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/zip_test_extended.py -------------------------------------------------------------------------------- /pyaff4/zip_test_unicode.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/zip_test_unicode.py -------------------------------------------------------------------------------- /pyaff4/zip_test_unicode2.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/pyaff4/zip_test_unicode2.py -------------------------------------------------------------------------------- /requirements.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/requirements.txt -------------------------------------------------------------------------------- /samples/extract_streams.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/samples/extract_streams.py -------------------------------------------------------------------------------- /samples/simple_block_read.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/samples/simple_block_read.py -------------------------------------------------------------------------------- /setup.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/setup.py -------------------------------------------------------------------------------- /test_images/AFF4-L/broken-dedupe.aff4: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/test_images/AFF4-L/broken-dedupe.aff4 -------------------------------------------------------------------------------- /test_images/AFF4-L/dream.aff4: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/test_images/AFF4-L/dream.aff4 -------------------------------------------------------------------------------- /test_images/AFF4-L/dream.aff4.information.turtle: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/test_images/AFF4-L/dream.aff4.information.turtle -------------------------------------------------------------------------------- /test_images/AFF4-L/dream.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/test_images/AFF4-L/dream.txt -------------------------------------------------------------------------------- /test_images/AFF4-L/information.turtle: -------------------------------------------------------------------------------- 1 | test -------------------------------------------------------------------------------- /test_images/AFF4-L/paper-hash_based_disk_imaging_using_aff4.pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/test_images/AFF4-L/paper-hash_based_disk_imaging_using_aff4.pdf -------------------------------------------------------------------------------- /test_images/AFF4-L/paper-hash_based_disk_imaging_using_aff4.pdf.frag.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/test_images/AFF4-L/paper-hash_based_disk_imaging_using_aff4.pdf.frag.1 -------------------------------------------------------------------------------- /test_images/AFF4-L/paper-hash_based_disk_imaging_using_aff4.pdf.frag.2: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/test_images/AFF4-L/paper-hash_based_disk_imaging_using_aff4.pdf.frag.2 -------------------------------------------------------------------------------- /test_images/AFF4-L/unicode.aff4: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/test_images/AFF4-L/unicode.aff4 -------------------------------------------------------------------------------- /test_images/AFF4-L/unicode.zip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/test_images/AFF4-L/unicode.zip -------------------------------------------------------------------------------- /test_images/AFF4-L/utf8segment-macos.zip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/test_images/AFF4-L/utf8segment-macos.zip -------------------------------------------------------------------------------- /test_images/AFF4-L/ネコ.txt: -------------------------------------------------------------------------------- 1 | foo 2 | -------------------------------------------------------------------------------- /test_images/AFF4PreStd/Base-Allocated.af4: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/test_images/AFF4PreStd/Base-Allocated.af4 -------------------------------------------------------------------------------- /test_images/AFF4PreStd/Base-Linear-ReadError.af4: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/test_images/AFF4PreStd/Base-Linear-ReadError.af4 -------------------------------------------------------------------------------- /test_images/AFF4PreStd/Base-Linear.af4: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/test_images/AFF4PreStd/Base-Linear.af4 -------------------------------------------------------------------------------- /test_images/AFF4PreStd/README.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/test_images/AFF4PreStd/README.txt -------------------------------------------------------------------------------- /test_images/AFF4Std/Base-Allocated.aff4: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/test_images/AFF4Std/Base-Allocated.aff4 -------------------------------------------------------------------------------- /test_images/AFF4Std/Base-Linear-AllHashes.aff4: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/test_images/AFF4Std/Base-Linear-AllHashes.aff4 -------------------------------------------------------------------------------- /test_images/AFF4Std/Base-Linear-ReadError.aff4: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/test_images/AFF4Std/Base-Linear-ReadError.aff4 -------------------------------------------------------------------------------- /test_images/AFF4Std/Base-Linear.aff4: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/test_images/AFF4Std/Base-Linear.aff4 -------------------------------------------------------------------------------- /test_images/AFF4Std/README.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/test_images/AFF4Std/README.txt -------------------------------------------------------------------------------- /test_images/AFF4Std/Striped/Base-Linear_1.aff4: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/test_images/AFF4Std/Striped/Base-Linear_1.aff4 -------------------------------------------------------------------------------- /test_images/AFF4Std/Striped/Base-Linear_2.aff4: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/test_images/AFF4Std/Striped/Base-Linear_2.aff4 -------------------------------------------------------------------------------- /test_images/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/test_images/README.md -------------------------------------------------------------------------------- /test_images/keys/certificate.pem: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/test_images/keys/certificate.pem -------------------------------------------------------------------------------- /test_images/keys/key.pem: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/test_images/keys/key.pem -------------------------------------------------------------------------------- /version.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/version.py -------------------------------------------------------------------------------- /version.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aff4/pyaff4/HEAD/version.yaml --------------------------------------------------------------------------------