{"categories":[{"label":"Utilities","url":"https://skillfed.io/packages/category/utilities/10"},{"label":"Security","url":"https://skillfed.io/packages/category/security/3"},{"label":"Information Analysis","url":"https://skillfed.io/packages/category/scientific-engineering-information-analysis/3"},{"label":"Log Analysis","url":"https://skillfed.io/packages/category/internet-log-analysis"}],"enrichment":{"capability":"Parses hypervisor disk, backup, and configuration files from various virtualization platforms, extracting structured data for forensic analysis and system inspection.","skillfed_tags":["forensics","hypervisor-parsing","incident-response"],"use_cases":["Extract and analyze virtual machine disk images during forensic investigations to recover deleted files or system state","Parse hypervisor backup files to inspect VM configurations and snapshots without restoring the full backup","Examine hypervisor configuration files to audit virtual infrastructure and detect unauthorized changes","Integrate hypervisor parsing into automated incident response workflows as part of the Dissect framework"],"what_it_does":"dissect.hypervisor is a specialized parser module within the Dissect forensic framework that reads and extracts data from hypervisor-related files\u2014disk images, backup archives, and configuration files\u2014across different virtualization platforms. It's designed for forensic investigators, incident responders, and system administrators who need to inspect virtual machine artifacts and hypervisor state without running the hypervisor itself.\n\nThe module integrates with the broader Dissect ecosystem, relying on defusedxml for safe XML parsing and dissect.cstruct for binary structure handling. It's actively maintained, marked as production-stable, and requires Python 3.10 or later. The AGPL-3.0-or-later license means any modifications must be shared under the same terms.","worth_installing":"Yes, if you are working in forensics, incident response, or system auditing and need to parse hypervisor artifacts. The low install friction, active maintenance, and stable status make it reliable. The AGPL-3.0-or-later license is a blocker only if you need to keep modifications proprietary; otherwise it's a standard choice for open-source security tooling."},"id":"dissect-hypervisor","links":{"html":"https://skillfed.io/packages/dissect-hypervisor","md":"https://skillfed.io/packages/dissect-hypervisor.md","pypi":"https://pypi.org/project/dissect-hypervisor/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-02-24","license_spdx":"AGPL-3.0-or-later","license_treatment":"agpl","name":"dissect.hypervisor","python_support":"supports_current","summary":"A Dissect module implementing parsers for various hypervisor disk, backup and configuration files"},"popularity":{"monthly_downloads":97610,"position":13141,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"3.21"}