WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-08-24 15:12:23 +02:00
Code Issues Packages Projects Releases Wiki Activity

Plugins: Add in architectures for ModuleRequirement

Browse Source 
Fixes #553
This commit is contained in:
Mike Auty
2021-08-24 21:47:47 +01:00
parent 7bf3ac4a41
commit 27c5dfdffd
7 changed files with 13 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/plugins/linux/pslist.py
+1 -1
View File
@@ -18,7 +18,7 @@ class PsList(interfaces.plugins.PluginInterface):
@classmethod
def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:
return [
requirements.ModuleRequirement(name = 'vmlinux'),
requirements.ModuleRequirement(name = 'vmlinux', architectures = ["Intel32", "Intel64"]),
requirements.ListRequirement(name = 'pid',
description = 'Filter on specific process IDs',
element_type = int,
volatility3/framework/plugins/mac/bash.py
+2 -1
View File
@@ -25,7 +25,8 @@ class Bash(plugins.PluginInterface, timeliner.TimeLinerInterface):
@classmethod
def get_requirements(cls):
return [
requirements.ModuleRequirement(name = 'darwin', description = 'Kernel module for the OS'),
requirements.ModuleRequirement(name = 'darwin', description = 'Kernel module for the OS',
architectures = ["Intel32", "Intel64"]),
requirements.PluginRequirement(name = 'pslist', plugin = pslist.PsList, version = (3, 0, 0)),
requirements.ListRequirement(name = 'pid',
description = 'Filter on specific process IDs',
volatility3/framework/plugins/mac/check_sysctl.py
+2 -1
View File
@@ -25,7 +25,8 @@ class Check_sysctl(plugins.PluginInterface):
@classmethod
def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:
return [
requirements.ModuleRequirement(name = 'darwin', description = 'Kernel module for the OS'),
requirements.ModuleRequirement(name = 'darwin', description = 'Kernel module for the OS',
architectures = ["Intel32", "Intel64"]),
requirements.VersionRequirement(name = 'macutils', component = mac.MacUtilities, version = (1, 0, 0)),
requirements.PluginRequirement(name = 'lsmod', plugin = lsmod.Lsmod, version = (2, 0, 0))
]
volatility3/framework/plugins/mac/check_trap_table.py
+2 -1
View File
@@ -24,7 +24,8 @@ class Check_trap_table(plugins.PluginInterface):
@classmethod
def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:
return [
requirements.ModuleRequirement(name = 'darwin', description = 'Kernel module for the OS'),
requirements.ModuleRequirement(name = 'darwin', description = 'Kernel module for the OS',
architectures = ["Intel32", "Intel64"]),
requirements.PluginRequirement(name = 'lsmod', plugin = lsmod.Lsmod, version = (2, 0, 0)),
requirements.VersionRequirement(name = 'macutils', component = mac.MacUtilities, version = (1, 0, 0)),
]
volatility3/framework/plugins/mac/ifconfig.py
+2 -1
View File
@@ -16,7 +16,8 @@ class Ifconfig(plugins.PluginInterface):
@classmethod
def get_requirements(cls):
return [
requirements.ModuleRequirement(name = 'darwin', description = 'Kernel module for the OS'),
requirements.ModuleRequirement(name = 'darwin', description = 'Kernel module for the OS',
architectures = ["Intel32", "Intel64"]),
requirements.VersionRequirement(name = 'macutils', component = mac.MacUtilities, version = (1, 0, 0))
]
volatility3/framework/plugins/mac/pslist.py
+2 -1
View File
@@ -23,7 +23,8 @@ class PsList(interfaces.plugins.PluginInterface):
@classmethod
def get_requirements(cls):
return [
requirements.ModuleRequirement(name = 'darwin', description = 'Kernel module for the OS'),
requirements.ModuleRequirement(name = 'darwin', description = 'Kernel module for the OS',
architectures = ["Intel32", "Intel64"]),
requirements.VersionRequirement(name = 'macutils', component = mac.MacUtilities, version = (1, 1, 0)),
requirements.ChoiceRequirement(name = 'pslist_method',
description = 'Method to determine for processes',
volatility3/framework/plugins/windows/pslist.py
+2 -1
View File
@@ -27,7 +27,8 @@ class PsList(interfaces.plugins.PluginInterface, timeliner.TimeLinerInterface):
@classmethod
def get_requirements(cls):
return [
requirements.ModuleRequirement(name = 'kernel', description = 'Windows kernel'),
requirements.ModuleRequirement(name = 'kernel', description = 'Windows kernel',
architectures = ["Intel32", "Intel64"]),
requirements.BooleanRequirement(name = 'physical',
description = 'Display physical offsets instead of virtual',
default = cls.PHYSICAL_DEFAULT,