Hey @bigdude , have a look here New software - #59 by Alex-N
The update writes to either sda19 or sda20 (SYSTEM_A or SYSTEM_B) depending on your current bootConfig. There is a image.cfs which contains a SQASHFS filesystem and is loop mounted to /usr/local/modules.
If you look at the rootfs, there are plenty of links to that part of the filesystem.
For a quick look you can open image.cfs in 7zip otherwise you’ll have to use unsquashfs.
I already tried enabling everything for remote SSH access New software - #49 by Alex-N but there is a fw_verify command in system_init which requires some certificate whihch we don’t have 
Since none of the system directories are R/W, you’d have to modify the ROOT_FS or image.cfs
I’m glad there will be some more eyes looking into this now 
Alex
As for the rescue image, I used the “original” Russian rescue rootfs and commented out all the image installation steps. That way I can use it from telnet or serial for new software inspection 
