Update pip install docs with quoting when installing extras (#69)

* This is to ensure that the example works on all shells, for example zsh.
* Also added example on how to install pre-release packages.

README.rst

@@ -21,7 +21,11 @@ The library is available on `PyPI <https://pypi.org/project/dissect.cobaltstrike
 
 Or install using the ``full`` extra to automatically install dependencies for C2 and PCAP support::
 
-   $ pip install dissect.cobaltstrike[full]
+   $ pip install 'dissect.cobaltstrike[full]'
+
+If you want to install the latest pre-release version, use the ``--pre`` flag::
+
+   $ pip install --pre dissect.cobaltstrike
 
 **dissect.cobaltstrike** requires Python 3.9 or later.
 

docs/installation.rst

@@ -19,14 +19,23 @@ The following pip `extras` flavours are provided as well:
 
 .. code-block:: bash
 
-    $ pip install dissect.cobaltstrike[c2]
-    $ pip install dissect.cobaltstrike[pcap]
-    $ pip install dissect.cobaltstrike[full]
+    $ pip install 'dissect.cobaltstrike[c2]'
+    $ pip install 'dissect.cobaltstrike[pcap]'
+    $ pip install 'dissect.cobaltstrike[full]'
 
 * ``[c2]`` for if you want to communicate with Cobalt Strike Team Servers, eg: :doc:`tools/beacon-client`.
 * ``[pcap]`` for if you want to parse and decrypt PCAPS containing Beacon traffic, eg: :doc:`tools/beacon-pcap`.
 * ``[full]`` provides the above but also installs ``rich`` for prettier console logging.
 
+Install the latest pre-release version
+--------------------------------------
+
+Every change to the main branch is packaged and uploaded to PyPi as a pre-release version, to install the latest pre-release version use the ``--pre`` flag:
+
+.. code-block:: bash
+
+    $ pip install --pre dissect.cobaltstrike
+
 Installing from source
 ----------------------
 
@@ -36,7 +45,7 @@ If you want to install ``dissect.cobaltstrike`` from source, you can use the fol
 
      $ git clone https://github.com/fox-it/dissect.cobaltstrike.git
      $ cd dissect.cobaltstrike
-     $ pip install --editable .[full]
+     $ pip install --editable '.[full]'
 
 Using a virtual environment is recommended. Using the ``--editable`` flag ensures that any changes you make to the source code directly affects the installed package.
 

docs/tutorials/decrypt_cobaltstrike_pcaps.rst

@@ -26,7 +26,7 @@ First we ensure that we have ``dissect.cobaltstrike`` installed with PCAP suppor
 
 .. code-block:: bash
 
-   $ pip install dissect.cobaltstrike[pcap]
+   $ pip install 'dissect.cobaltstrike[pcap]'
 
 This also installs the ``pyshark`` Python package but it still requires the ``tshark`` binary from Wireshark_ to work.
 Ensure that you have Wireshark_ installed or install the ``tshark`` binary, for example on Ubuntu or Debian systems you can install it with:

docs/tutorials/minimal_beacon_client.rst

@@ -26,7 +26,7 @@ First we install ``dissect.cobaltstrike`` with the ``[c2]`` extra, as we are goi
 
 .. code-block:: bash
 
-    $ pip install dissect.cobaltstrike[c2]
+    $ pip install 'dissect.cobaltstrike[c2]'
 
 This installs the necessary dependencies such as `PyCryptodome` and `httpx`.