Core: Roll the version number back to 1.0.0

2026-09-14 05:37:39 +02:00 · 2021-01-20 21:29:30 +00:00
parent 3911098d27
commit d14ba9e96e
89 changed files with 91 additions and 91 deletions
@@ -20,7 +20,7 @@ from volatility3.plugins.mac import pslist
 class Bash(plugins.PluginInterface, timeliner.TimeLinerInterface):
    """Recovers bash command history from memory."""

-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)

    @classmethod
    def get_requirements(cls):
@@ -18,7 +18,7 @@ vollog = logging.getLogger(__name__)
 class Check_syscall(plugins.PluginInterface):
    """Check system call table for hooks."""

-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)

    @classmethod
    def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:
@@ -20,7 +20,7 @@ vollog = logging.getLogger(__name__)
 class Check_sysctl(plugins.PluginInterface):
    """Check sysctl handlers for hooks."""

-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)

    @classmethod
    def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:
@@ -19,7 +19,7 @@ vollog = logging.getLogger(__name__)
 class Check_trap_table(plugins.PluginInterface):
    """Check mach trap table for hooks."""

-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)

    @classmethod
    def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:
@@ -11,7 +11,7 @@ from volatility3.framework.symbols import mac
 class Ifconfig(plugins.PluginInterface):
    """Lists loaded kernel modules"""

-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)

    @classmethod
    def get_requirements(cls):
@@ -13,7 +13,7 @@ from volatility3.plugins.mac import lsmod, kauth_scopes
 class Kauth_listeners(interfaces.plugins.PluginInterface):
    """ Lists kauth listeners and their status """

-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)

    @classmethod
    def get_requirements(cls):
@@ -16,7 +16,7 @@ class Kauth_scopes(interfaces.plugins.PluginInterface):
    """ Lists kauth scopes and their status """

    _version = (1, 0, 0)
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)

    @classmethod
    def get_requirements(cls):
@@ -14,7 +14,7 @@ from volatility3.plugins.mac import pslist
 class Kevents(interfaces.plugins.PluginInterface):
    """ Lists event handlers registered by processes """

-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)

    event_types = {
        1: "EVFILT_READ",
@@ -13,7 +13,7 @@ from volatility3.framework.renderers import format_hints
 class Lsmod(plugins.PluginInterface):
    """Lists loaded kernel modules."""

-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)

    _version = (1, 0, 0)

@@ -16,7 +16,7 @@ vollog = logging.getLogger(__name__)
 class Lsof(plugins.PluginInterface):
    """Lists all open file descriptors for all processes."""

-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)

    @classmethod
    def get_requirements(cls):
@@ -14,7 +14,7 @@ from volatility3.plugins.mac import pslist
 class Malfind(interfaces.plugins.PluginInterface):
    """Lists process memory ranges that potentially contain injected code."""

-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)

    @classmethod
    def get_requirements(cls):
@@ -14,7 +14,7 @@ class Mount(plugins.PluginInterface):
    """A module containing a collection of plugins that produce data typically
    foundin Mac's mount command"""

-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)

    _version = (1, 0, 0)

@@ -19,7 +19,7 @@ vollog = logging.getLogger(__name__)
 class Netstat(plugins.PluginInterface):
    """Lists all network connections for all processes."""

-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)

    @classmethod
    def get_requirements(cls):
@@ -12,7 +12,7 @@ from volatility3.plugins.mac import pslist
 class Maps(interfaces.plugins.PluginInterface):
    """Lists process memory ranges that potentially contain injected code."""

-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)

    @classmethod
    def get_requirements(cls):
@@ -14,7 +14,7 @@ from volatility3.plugins.mac import pslist
 class Psaux(plugins.PluginInterface):
    """Recovers program command line arguments."""

-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)

    @classmethod
    def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:
@@ -16,7 +16,7 @@ vollog = logging.getLogger(__name__)
 class PsList(interfaces.plugins.PluginInterface):
    """Lists the processes present in a particular mac memory image."""

-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
    _version = (2, 0, 0)
    pslist_methods = ['tasks', 'allproc', 'process_group', 'sessions', 'pid_hash_table']

@@ -13,7 +13,7 @@ class PsTree(plugins.PluginInterface):
    """Plugin for listing processes in a tree based on their parent process
    ID."""

-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)

    def __init__(self, *args, **kwargs):
        super().__init__(*args, **kwargs)
@@ -19,7 +19,7 @@ vollog = logging.getLogger(__name__)
 class Socket_filters(plugins.PluginInterface):
    """Enumerates kernel socket filters."""

-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)

    @classmethod
    def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:
@@ -18,7 +18,7 @@ vollog = logging.getLogger(__name__)
 class Timers(plugins.PluginInterface):
    """Check for malicious kernel timers."""

-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)

    @classmethod
    def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:
@@ -20,7 +20,7 @@ vollog = logging.getLogger(__name__)
 class Trustedbsd(plugins.PluginInterface):
    """Checks for malicious trustedbsd modules"""

-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)

    @classmethod
    def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:
@@ -10,7 +10,7 @@ from volatility3.framework.objects import utility
 class VFSevents(interfaces.plugins.PluginInterface):
    """ Lists processes that are filtering file system events """

-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)

    event_types = [
        "CREATE_FILE", "DELETE", "STAT_CHANGED", "RENAME", "CONTENT_MODIFIED", "EXCHANGE", "FINDER_INFO_CHANGED",