Bump removal of plugins by a year to ensure suitable time for transition

This commit is contained in:
Mike Auty
2025-10-16 20:29:02 +01:00
parent 7536e9dd14
commit 46c508fff2
7 changed files with 20 additions and 14 deletions
+1 -1
View File
@@ -4,7 +4,7 @@ import traceback
import unittest
sys.path.insert(0, "../../volatility3")
from volatility3.plugins.windows import scheduled_tasks
from volatility3.plugins.windows.registry import scheduled_tasks
class TestActionsDecoding(unittest.TestCase):
+4 -3
View File
@@ -4,6 +4,7 @@ import json
import os
import shutil
import tempfile
from test import WindowsSamples, test_volatility
@@ -437,7 +438,7 @@ class TestWindowsVadyarascan:
class TestWindowsAmcache:
def test_windows_generic_amcache(self, volatility, python, image):
rc, out, _err = test_volatility.runvol_plugin(
"windows.amcache.Amcache",
"windows.registry.amcache.Amcache",
image,
volatility,
python,
@@ -492,7 +493,7 @@ class TestWindowsBigPools:
# class TestWindowsCachedump:
# def test_windows_generic_cachedump(self, volatility, python, image):
# rc, out, _err = test_volatility.runvol_plugin(
# "windows.cachedump.Cachedump",
# "windows.registry.cachedump.Cachedump",
# image,
# volatility,
# python,
@@ -820,7 +821,7 @@ class TestWindowsLsadump:
def test_windows_specific_lsadump(self, volatility, python):
image = WindowsSamples.WINDOWSXP_GENERIC.value.path
rc, out, _err = test_volatility.runvol_plugin(
"windows.lsadump.Lsadump",
"windows.registry.lsadump.Lsadump",
image,
volatility,
python,
@@ -2,7 +2,8 @@
# which is available at https://www.volatilityfoundation.org/license/vsl-v1.0
#
import logging
from volatility3.framework import interfaces, deprecation
from volatility3.framework import deprecation, interfaces
from volatility3.plugins.windows.registry import amcache
vollog = logging.getLogger(__name__)
@@ -12,7 +13,7 @@ class Amcache(
interfaces.plugins.PluginInterface,
deprecation.PluginRenameClass,
replacement_class=amcache.Amcache,
removal_date="2025-09-25",
removal_date="2026-09-25",
):
"""Extract information on executed applications from the AmCache (deprecated)."""
@@ -2,7 +2,8 @@
# which is available at https://www.volatilityfoundation.org/license/vsl-v1.0
#
import logging
from volatility3.framework import interfaces, deprecation
from volatility3.framework import deprecation, interfaces
from volatility3.plugins.windows.registry import cachedump
vollog = logging.getLogger(__name__)
@@ -12,7 +13,7 @@ class Cachedump(
interfaces.plugins.PluginInterface,
deprecation.PluginRenameClass,
replacement_class=cachedump.Cachedump,
removal_date="2025-09-25",
removal_date="2026-09-25",
):
"""Dumps lsa secrets from memory (deprecated)"""
@@ -2,7 +2,8 @@
# which is available at https://www.volatilityfoundation.org/license/vsl-v1.0
#
import logging
from volatility3.framework import interfaces, deprecation
from volatility3.framework import deprecation, interfaces
from volatility3.plugins.windows.registry import hashdump
vollog = logging.getLogger(__name__)
@@ -12,7 +13,7 @@ class Hashdump(
interfaces.plugins.PluginInterface,
deprecation.PluginRenameClass,
replacement_class=hashdump.Hashdump,
removal_date="2025-09-25",
removal_date="2026-09-25",
):
"""Dumps user hashes from memory (deprecated)"""
@@ -2,7 +2,8 @@
# which is available at https://www.volatilityfoundation.org/license/vsl-v1.0
#
import logging
from volatility3.framework import interfaces, deprecation
from volatility3.framework import deprecation, interfaces
from volatility3.plugins.windows.registry import lsadump
vollog = logging.getLogger(__name__)
@@ -12,7 +13,7 @@ class Lsadump(
interfaces.plugins.PluginInterface,
deprecation.PluginRenameClass,
replacement_class=lsadump.Lsadump,
removal_date="2025-09-25",
removal_date="2026-09-25",
):
"""Dumps lsa secrets from memory (deprecated)"""
@@ -2,7 +2,8 @@
# which is available at https://www.volatilityfoundation.org/license/vsl-v1.0
#
import logging
from volatility3.framework import interfaces, deprecation
from volatility3.framework import deprecation, interfaces
from volatility3.plugins.windows.registry import scheduled_tasks
vollog = logging.getLogger(__name__)
@@ -12,7 +13,7 @@ class ScheduledTasks(
interfaces.plugins.PluginInterface,
deprecation.PluginRenameClass,
replacement_class=scheduled_tasks.ScheduledTasks,
removal_date="2025-09-25",
removal_date="2026-09-25",
):
"""Decodes scheduled task information from the Windows registry, including
information about triggers, actions, run times, and creation times (deprecated)."""