Mike Auty
de3b8cf76b
Fix exception being thrown in the middle of Nlpdtbfinder for layers without validity details.
2017-12-13 20:48:52 +00:00
Mike Auty
21b4506b7b
Add in type-annotations for the remaining interfaces.
2017-12-13 20:48:52 +00:00
Mike Auty
50b60c0df6
Add in more interfaces (and fix additional errors now that type information is available).
2017-12-13 20:48:52 +00:00
Mike Auty
5536412a5e
Add in initial work at interface type-annotations.
2017-12-13 20:48:52 +00:00
Mike Auty
2cc456e847
Finish off the automagic directory type annotations.
2017-12-13 20:48:52 +00:00
Mike Auty
d7d13eb19c
Add type annotations to most of the automagic files.
2017-12-13 20:48:52 +00:00
Mike Auty
d30daa5fd3
Bump to version 3.6 to ensure support for all type hinding (including local variables).
2017-12-13 20:48:52 +00:00
ikelos and GitHub
19de03b16d
Merge pull request #13 from volatilityfoundation/windows-handles
...
add the windows handles plugin
2017-12-13 20:47:53 +00:00
iMHLv2
fad5a238d5
add the windows handles plugin
2017-12-13 20:43:17 +00:00
Mike Auty
78484cb17e
Update to ignore missing imports for now.
2017-12-13 01:23:36 +00:00
Mike Auty
2c204e411d
Add in a very basic mypy.ini without ignore-missing-imports.
2017-12-12 15:32:04 +00:00
Mike Auty
4067bca24e
Remove the errant urllib3 import in favour of native python.
2017-12-11 08:47:41 +00:00
Mike Auty
e80392aa12
Ensure we don't run through signatures when we've found one that gives a layer.
2017-12-11 00:39:51 +00:00
Mike Auty
758e521292
Fix bug that massively broken the wintelstacker, slowing everything else down.
2017-12-10 23:47:23 +00:00
Mike Auty
412d893f19
Add in better logging.
2017-12-10 23:46:59 +00:00
Mike Auty
3cbac8e75f
Finish adding type-annotations thoughout the code.
2017-12-10 19:31:41 +00:00
Mike Auty
184d89d36d
Add in type-annotations for renderers and start on symbols.
2017-12-10 14:57:26 +00:00
Mike Auty
0947d75289
Remove code from plugins, since plugins aren't callable anymore.
2017-12-10 11:59:48 +00:00
Mike Auty
923fb6a2ad
Add in object type-annotations.
2017-12-10 11:54:54 +00:00
Mike Auty
8dcf2b25e7
Add in type annotations for scanners.
2017-12-10 01:45:52 +00:00
Mike Auty
bde174d3d5
Add type-annotations for reamining layer files.
2017-12-10 01:28:44 +00:00
Mike Auty
c504ee5822
Convert to python3.5 syntax (no local type-annotations).
2017-12-09 20:48:48 +00:00
Mike Auty
9b1736f737
Start on the layers folder (with a few small fixes).
2017-12-09 20:06:01 +00:00
Mike Auty
627caab55b
Fix up exception in DTBtests.
...
The exception was being caused by reading too little data from the
stream. We now skip it if that happens.
2017-12-08 00:55:29 +00:00
Mike Auty
ca1424ceee
Fix exception being thrown in the middle of Nlpdtbfinder for layers without validity details.
2017-12-08 00:50:21 +00:00
Mike Auty
924455613c
Add in type-annotations for the remaining interfaces.
2017-12-08 00:00:34 +00:00
Mike Auty
6f18349592
Add in more interfaces (and fix additional errors now that type information is available).
2017-12-07 00:16:24 +00:00
Mike Auty
61f4f05cb3
Add in initial work at interface type-annotations.
2017-12-06 01:21:39 +00:00
Mike Auty
06e623033d
Finish off the automagic directory type annotations.
2017-12-06 01:21:19 +00:00
Mike Auty
1f444f7b5e
Add type annotations to most of the automagic files.
2017-12-05 00:23:54 +00:00
Mike Auty
4f58f0748f
Bump to version 3.6 to ensure support for all type hinding (including local variables).
2017-12-04 21:34:11 +00:00
Mike Auty
0ecf68af0f
Support table remapping for referenced symbol names.
2017-11-27 14:39:46 +00:00
Mike Auty
60e1aebaf8
Improve the plugin help descriptions.
2017-11-25 16:19:47 +00:00
Mike Auty
0ad6294662
Reuse the cache if we're within the same ResourceAccessor.
...
This effectively means that the FileTranslationLayer will reuse the
cached file even with multiple opens, but rerunning python, or starting
a new context (with a new FileTranslationLayer but on the same URL) will
cause a redownload whether necessary or not. This ensures that running
volatility as an engine (inside a long lived python session) will not
prevent a file being checked again later.
Other caching mechanisms (such as last-modified) should be used to
determine if the cached file is still valid.
Note this may cause issues if plugins run concurrently.
2017-11-25 14:00:16 +00:00
Mike Auty
7a40d8128c
Add in support for the smb protocol when loading files.
2017-11-24 22:28:14 +00:00
Mike Auty
917829d87f
Reduce the number of times a ResourceAccessor is created, and use all handlers.
2017-11-24 22:27:36 +00:00
Mike Auty
30059766b6
Plug the WindowsMixin into the automagic.
2017-11-24 12:02:34 +00:00
Mike Auty
e43ca15630
Improve the logging for scan failures.
2017-11-24 00:39:28 +00:00
Mike Auty
2d570fdb62
Fix up the broken get_symbols_by_location call.
2017-11-23 01:36:16 +00:00
Mike Auty
2322a1b071
Pass the keypath through the recursion rather than expensively regenerating it.
2017-11-23 01:02:06 +00:00
ikelos and GitHub
678ad2c72c
Merge pull request #12 from superponible/master
...
change name of ntsymbols and call to get_key
2017-11-22 23:02:01 +00:00
Dave Lassalle
fdcab2760e
change name of ntsymbols and call to get_key
2017-11-22 16:03:55 -06:00
Mike Auty
51f508e602
Allow for substring matching on plugin names.
2017-11-14 11:04:47 +00:00
Mike Auty
b075d8c31c
Standardize on nt_symbols for standard symboltable requirements.
...
It's longer to type, but people shouldn't be typing it directly.
They should be pulling the value from the config and using that, which
can default to 'nt' if necessary.
2017-11-13 01:27:22 +00:00
Mike Auty
330832e546
Just to make it easier in case of renames, etc.
2017-11-13 01:20:08 +00:00
Mike Auty
327c8cb073
Make use of the hivelist plugin when no offset is provided to printkey.
2017-11-13 01:19:54 +00:00
Mike Auty
a60fcba32f
Make sure we don't assume that the primary layer's config lives under our own.
2017-11-13 01:18:54 +00:00
Mike Auty
769e1226c4
Make creating subconfigs simpler from configurables.
2017-11-13 00:59:01 +00:00
Mike Auty
9af49a49a9
Code improvement not to re-lookup the size of an unsigned int every turn of a loop.
2017-11-11 22:35:40 +00:00
Mike Auty
3a591688a6
Add in a little more information about signatures.
2017-11-11 15:34:06 +00:00
Mike Auty