search

fox-it / acquire

acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.
GNU Affero General Public License v3.0
91 stars 26 forks source link

Add BitLocker and LUKS support to Acquire #193

Closed larsbehrens1 closed 2 months ago

larsbehrens1 commented 2 months ago

This adds support for the -K and -Kv arguments (just like target-*) to support Acquire on BitLocker and LUKS encrypted targets.

codecov[bot] commented 2 months ago

Codecov Report

Attention: Patch coverage is 80.00000% with 2 lines in your changes missing coverage. Please review.

Project coverage is 44.66%. Comparing base (de0ab7e) to head (9ad353d). Report is 1 commits behind head on main.

Files with missing lines Patch % Lines
acquire/utils.py 80.00% 2 Missing :warning:
Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #193 +/- ## ========================================== + Coverage 44.60% 44.66% +0.05% ========================================== Files 26 26 Lines 3394 3401 +7 ========================================== + Hits 1514 1519 +5 - Misses 1880 1882 +2 ``` | [Flag](https://app.codecov.io/gh/fox-it/acquire/pull/193/flags?src=pr&el=flags&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=fox-it) | Coverage Δ | | |---|---|---| | [unittests](https://app.codecov.io/gh/fox-it/acquire/pull/193/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=fox-it) | `44.66% <80.00%> (+0.05%)` | :arrow_up: | Flags with carried forward coverage won't be shown. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=fox-it#carryforward-flags-in-the-pull-request-comment) to find out more.

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

cecinestpasunepipe commented 2 months ago

LGTM, asking another team member for a quick 2nd review.