Lots and lots of typing additions found by an initial monkeytype run.

volatility/plugins/linux/bash.py

@@ -4,8 +4,9 @@ typically found in Linux's /proc file system.
 
 import datetime
 import struct
+import typing
 
-from volatility.framework import constants, renderers, symbols
+from volatility.framework import constants, renderers, symbols, interfaces
 from volatility.framework.configuration import requirements
 from volatility.framework.interfaces import plugins
 from volatility.framework.layers import scanners
@@ -19,7 +20,7 @@ class Bash(plugins.PluginInterface, timeliner.TimeLinerInterface):
     """Recovers bash command history from memory"""
 
     @classmethod
-    def get_requirements(cls):
+    def get_requirements(cls) -> typing.List[interfaces.configuration.RequirementInterface]:
         return [requirements.TranslationLayerRequirement(name = 'primary',
                                                          description = 'Kernel Address Space',
                                                          architectures = ["Intel32", "Intel64"]),

volatility/plugins/linux/check_afinfo.py

@@ -2,8 +2,9 @@
 typically found in Linux's /proc file system.
 """
 import logging
+import typing
 
-from volatility.framework import exceptions
+from volatility.framework import exceptions, interfaces
 from volatility.framework import renderers
 from volatility.framework.automagic import linux
 from volatility.framework.configuration import requirements
@@ -17,7 +18,7 @@ class Check_afinfo(plugins.PluginInterface):
     """Verifies the operation function pointers of network protocols"""
 
     @classmethod
-    def get_requirements(cls):
+    def get_requirements(cls) -> typing.List[interfaces.configuration.RequirementInterface]:
         return [requirements.TranslationLayerRequirement(name = 'primary',
                                                          description = 'Kernel Address Space',
                                                          architectures = ["Intel32", "Intel64"]),

volatility/plugins/linux/check_syscall.py

@@ -2,8 +2,9 @@
 typically found in Linux's /proc file system.
 """
 import logging
+import typing
 
-from volatility.framework import exceptions
+from volatility.framework import exceptions, interfaces
 from volatility.framework import renderers, constants
 from volatility.framework.automagic import linux
 from volatility.framework.configuration import requirements
@@ -24,7 +25,7 @@ class Check_syscall(plugins.PluginInterface):
     """Check system call table for hooks"""
 
     @classmethod
-    def get_requirements(cls):
+    def get_requirements(cls) -> typing.List[interfaces.configuration.RequirementInterface]:
         return [requirements.TranslationLayerRequirement(name = 'primary',
                                                          description = 'Kernel Address Space',
                                                          architectures = ["Intel32", "Intel64"]),

volatility/plugins/linux/elfs.py

@@ -1,8 +1,9 @@
 """A module containing a collection of plugins that produce data
 typically found in Linux's /proc file system.
 """
+import typing
 
-from volatility.framework import renderers
+from volatility.framework import renderers, interfaces
 from volatility.framework.configuration import requirements
 from volatility.framework.interfaces import plugins
 from volatility.framework.objects import utility
@@ -14,7 +15,7 @@ class Elfs(plugins.PluginInterface):
     """Lists all memory mapped ELF files for all processes"""
 
     @classmethod
-    def get_requirements(cls):
+    def get_requirements(cls) -> typing.List[interfaces.configuration.RequirementInterface]:
         return [requirements.TranslationLayerRequirement(name = 'primary',
                                                          description = 'Kernel Address Space',
                                                          architectures = ["Intel32", "Intel64"]),

volatility/plugins/linux/malfind.py

@@ -1,7 +1,9 @@
+import typing
+
 import volatility.framework.interfaces.plugins as interfaces_plugins
 import volatility.framework.interfaces.renderers as interfaces_renderers
 import volatility.plugins.linux.pslist as pslist
-from volatility.framework import constants
+from volatility.framework import constants, interfaces
 from volatility.framework import renderers
 from volatility.framework.configuration import requirements
 from volatility.framework.objects import utility
@@ -12,7 +14,7 @@ class Malfind(interfaces_plugins.PluginInterface):
     """Lists process memory ranges that potentially contain injected code"""
 
     @classmethod
-    def get_requirements(cls):
+    def get_requirements(cls) -> typing.List[interfaces.configuration.RequirementInterface]:
         return [requirements.TranslationLayerRequirement(name = 'primary',
                                                          description = 'Kernel Address Space',
                                                          architectures = ["Intel32", "Intel64"]),

volatility/plugins/linux/pslist.py

@@ -11,7 +11,7 @@ class PsList(interfaces_plugins.PluginInterface):
     """Lists the processes present in a particular linux memory image"""
 
     @classmethod
-    def get_requirements(cls):
+    def get_requirements(cls) -> typing.List[interfaces.configuration.RequirementInterface]:
         return [requirements.TranslationLayerRequirement(name = 'primary',
                                                          description = 'Kernel Address Space',
                                                          architectures = ["Intel32", "Intel64"]),