mirror of
https://github.com/volatilityfoundation/volatility3.git
synced 2026-09-09 19:27:39 +02:00
Bump removal of plugins by a year to ensure suitable time for transition
This commit is contained in:
@@ -4,7 +4,7 @@ import traceback
|
||||
import unittest
|
||||
|
||||
sys.path.insert(0, "../../volatility3")
|
||||
from volatility3.plugins.windows import scheduled_tasks
|
||||
from volatility3.plugins.windows.registry import scheduled_tasks
|
||||
|
||||
|
||||
class TestActionsDecoding(unittest.TestCase):
|
||||
|
||||
@@ -4,6 +4,7 @@ import json
|
||||
import os
|
||||
import shutil
|
||||
import tempfile
|
||||
|
||||
from test import WindowsSamples, test_volatility
|
||||
|
||||
|
||||
@@ -437,7 +438,7 @@ class TestWindowsVadyarascan:
|
||||
class TestWindowsAmcache:
|
||||
def test_windows_generic_amcache(self, volatility, python, image):
|
||||
rc, out, _err = test_volatility.runvol_plugin(
|
||||
"windows.amcache.Amcache",
|
||||
"windows.registry.amcache.Amcache",
|
||||
image,
|
||||
volatility,
|
||||
python,
|
||||
@@ -492,7 +493,7 @@ class TestWindowsBigPools:
|
||||
# class TestWindowsCachedump:
|
||||
# def test_windows_generic_cachedump(self, volatility, python, image):
|
||||
# rc, out, _err = test_volatility.runvol_plugin(
|
||||
# "windows.cachedump.Cachedump",
|
||||
# "windows.registry.cachedump.Cachedump",
|
||||
# image,
|
||||
# volatility,
|
||||
# python,
|
||||
@@ -820,7 +821,7 @@ class TestWindowsLsadump:
|
||||
def test_windows_specific_lsadump(self, volatility, python):
|
||||
image = WindowsSamples.WINDOWSXP_GENERIC.value.path
|
||||
rc, out, _err = test_volatility.runvol_plugin(
|
||||
"windows.lsadump.Lsadump",
|
||||
"windows.registry.lsadump.Lsadump",
|
||||
image,
|
||||
volatility,
|
||||
python,
|
||||
|
||||
@@ -2,7 +2,8 @@
|
||||
# which is available at https://www.volatilityfoundation.org/license/vsl-v1.0
|
||||
#
|
||||
import logging
|
||||
from volatility3.framework import interfaces, deprecation
|
||||
|
||||
from volatility3.framework import deprecation, interfaces
|
||||
from volatility3.plugins.windows.registry import amcache
|
||||
|
||||
vollog = logging.getLogger(__name__)
|
||||
@@ -12,7 +13,7 @@ class Amcache(
|
||||
interfaces.plugins.PluginInterface,
|
||||
deprecation.PluginRenameClass,
|
||||
replacement_class=amcache.Amcache,
|
||||
removal_date="2025-09-25",
|
||||
removal_date="2026-09-25",
|
||||
):
|
||||
"""Extract information on executed applications from the AmCache (deprecated)."""
|
||||
|
||||
|
||||
@@ -2,7 +2,8 @@
|
||||
# which is available at https://www.volatilityfoundation.org/license/vsl-v1.0
|
||||
#
|
||||
import logging
|
||||
from volatility3.framework import interfaces, deprecation
|
||||
|
||||
from volatility3.framework import deprecation, interfaces
|
||||
from volatility3.plugins.windows.registry import cachedump
|
||||
|
||||
vollog = logging.getLogger(__name__)
|
||||
@@ -12,7 +13,7 @@ class Cachedump(
|
||||
interfaces.plugins.PluginInterface,
|
||||
deprecation.PluginRenameClass,
|
||||
replacement_class=cachedump.Cachedump,
|
||||
removal_date="2025-09-25",
|
||||
removal_date="2026-09-25",
|
||||
):
|
||||
"""Dumps lsa secrets from memory (deprecated)"""
|
||||
|
||||
|
||||
@@ -2,7 +2,8 @@
|
||||
# which is available at https://www.volatilityfoundation.org/license/vsl-v1.0
|
||||
#
|
||||
import logging
|
||||
from volatility3.framework import interfaces, deprecation
|
||||
|
||||
from volatility3.framework import deprecation, interfaces
|
||||
from volatility3.plugins.windows.registry import hashdump
|
||||
|
||||
vollog = logging.getLogger(__name__)
|
||||
@@ -12,7 +13,7 @@ class Hashdump(
|
||||
interfaces.plugins.PluginInterface,
|
||||
deprecation.PluginRenameClass,
|
||||
replacement_class=hashdump.Hashdump,
|
||||
removal_date="2025-09-25",
|
||||
removal_date="2026-09-25",
|
||||
):
|
||||
"""Dumps user hashes from memory (deprecated)"""
|
||||
|
||||
|
||||
@@ -2,7 +2,8 @@
|
||||
# which is available at https://www.volatilityfoundation.org/license/vsl-v1.0
|
||||
#
|
||||
import logging
|
||||
from volatility3.framework import interfaces, deprecation
|
||||
|
||||
from volatility3.framework import deprecation, interfaces
|
||||
from volatility3.plugins.windows.registry import lsadump
|
||||
|
||||
vollog = logging.getLogger(__name__)
|
||||
@@ -12,7 +13,7 @@ class Lsadump(
|
||||
interfaces.plugins.PluginInterface,
|
||||
deprecation.PluginRenameClass,
|
||||
replacement_class=lsadump.Lsadump,
|
||||
removal_date="2025-09-25",
|
||||
removal_date="2026-09-25",
|
||||
):
|
||||
"""Dumps lsa secrets from memory (deprecated)"""
|
||||
|
||||
|
||||
@@ -2,7 +2,8 @@
|
||||
# which is available at https://www.volatilityfoundation.org/license/vsl-v1.0
|
||||
#
|
||||
import logging
|
||||
from volatility3.framework import interfaces, deprecation
|
||||
|
||||
from volatility3.framework import deprecation, interfaces
|
||||
from volatility3.plugins.windows.registry import scheduled_tasks
|
||||
|
||||
vollog = logging.getLogger(__name__)
|
||||
@@ -12,7 +13,7 @@ class ScheduledTasks(
|
||||
interfaces.plugins.PluginInterface,
|
||||
deprecation.PluginRenameClass,
|
||||
replacement_class=scheduled_tasks.ScheduledTasks,
|
||||
removal_date="2025-09-25",
|
||||
removal_date="2026-09-25",
|
||||
):
|
||||
"""Decodes scheduled task information from the Windows registry, including
|
||||
information about triggers, actions, run times, and creation times (deprecated)."""
|
||||
|
||||
Reference in New Issue
Block a user