dscu_query

summary: query a Dyld Shared Cache (DSC) from IDAPython

description:

This script touches a few highlights of dscu_svc_t – the public service driving IDA’s DSC workflow: cache layout, image lookup, symbol search, string search.

The full surface is much wider than what’s shown here – it can also load modules on demand, walk dependencies, query regions, etc. Run help(svc) after svc = ida_dscu.get_dscu_svc() to see every method available.

Run this script in a database opened from a DSC file.

level: beginner

Attributes

svc

image_name

Module Contents

dscu_query.svc
dscu_query.image_name = '/usr/lib/system/libsystem_malloc.dylib'