From af85ddde13560cdcee0ba801aac2d0963dbb73a8 Mon Sep 17 00:00:00 2001 From: Jordan Wiens Date: Sat, 16 Nov 2024 21:03:18 -0500 Subject: add user docs for dlyd shared cache --- docs/guide/index.md | 31 +++++++++++++++++++++++++++++++ docs/img/dsc/alpha.png | Bin 0 -> 387605 bytes docs/img/dsc/cache.png | Bin 0 -> 247869 bytes docs/img/dsc/images.png | Bin 0 -> 457284 bytes docs/img/dsc/symbols.png | Bin 0 -> 471052 bytes 5 files changed, 31 insertions(+) create mode 100644 docs/img/dsc/alpha.png create mode 100644 docs/img/dsc/cache.png create mode 100644 docs/img/dsc/images.png create mode 100644 docs/img/dsc/symbols.png (limited to 'docs') diff --git a/docs/guide/index.md b/docs/guide/index.md index 33013fb3..61ea9183 100644 --- a/docs/guide/index.md +++ b/docs/guide/index.md @@ -691,6 +691,37 @@ clickable to navigate to the virtual address. Strings can be double clicked to navigate to them, and the table can be sorted or the list filtered by typing in the search box. +## Dyld Shared Cache Triage (Alpha) + +The Dyld Shared Cache Triage View (or DSCView) allows loading dyld shared cache files from macOS and iOS. You can selectively load specific images, search for specific symbols, and follow analysis between specific images, search for specific symbols, and follow analysis references between any loaded images in one view. + +!!! note "Dyld Shared Cache Tabs" + + === "Image List" + + ![Dyld Shared Cache Image List](../img/dsc/images.png "Dyld Shared Cache Image List"){ width="800" } + + The image list shows a list of all images within the dyld shared cache and their virtual addresses. Double clicking on an image will load the image and begin analyzing it. + + === "Symbol Search" + + ![Dyld Shared Cache Symbol Search](../img/dsc/symbols.png "Dyld Shared Cache Symbol List"){ width="800" } + + All symbols exported by each of the shared libraries in the cache can be searched from this view. Double clicking any line will prompt the user whether to load the associated library for that symbol. + + === "Cache" + + ![Dyld Shared Cache Cache](../img/dsc/cache.png "Dyld Shared Cache Cache"){ width="800" } + + The cache view shows currently loaded shared objects and is informational only. + + === "Alpha" + + ![Dyld Shared Cache Alpha](../img/dsc/alpha.png "Dyld Shared Cache Alpha"){ width="800" } + + The current DSCView is considered an Alpha feature and more details on the limitations and known-issues is included in this tab. As the DSCView leaves alpha state, this tab will be removed. + + ## Byte Overview ![byte overview](../img/byteoverview.png "Byte Overview"){ width="800" } diff --git a/docs/img/dsc/alpha.png b/docs/img/dsc/alpha.png new file mode 100644 index 00000000..9d4b18f6 Binary files /dev/null and b/docs/img/dsc/alpha.png differ diff --git a/docs/img/dsc/cache.png b/docs/img/dsc/cache.png new file mode 100644 index 00000000..295ebddd Binary files /dev/null and b/docs/img/dsc/cache.png differ diff --git a/docs/img/dsc/images.png b/docs/img/dsc/images.png new file mode 100644 index 00000000..450f2805 Binary files /dev/null and b/docs/img/dsc/images.png differ diff --git a/docs/img/dsc/symbols.png b/docs/img/dsc/symbols.png new file mode 100644 index 00000000..0883b7c3 Binary files /dev/null and b/docs/img/dsc/symbols.png differ -- cgit v1.3.1