ikelos and GitHub
734c18c269
Merge pull request #1570 from volatilityfoundation/issues/explicit-version-check
...
Core: Move the python check somewhere it can't accidentally be removed
2025-01-25 12:59:19 +00:00
ikelos and GitHub
a38a0282ae
Merge branch 'develop' into issues/issue1418
2025-01-25 12:51:15 +00:00
ikelos and GitHub
c0adb721b7
Merge pull request #1559 from volatilityfoundation/issues/issue1419
...
Layers: Update LeechCore RawIO with better error handling for readlines
2025-01-25 12:44:08 +00:00
ikelos and GitHub
cae7930613
Merge pull request #1490 from volatilityfoundation/issue_1482_infinite_loop_oom
...
Prevent infinite looping and out of memory errors #1482
2025-01-25 12:21:40 +00:00
ikelos and GitHub
45e7f34636
Merge pull request #1568 from volatilityfoundation/1473-get_key_tryexcept
...
#1473 - add exception handling on calls to registry get_key
2025-01-25 11:53:38 +00:00
ikelos and GitHub
4d50d1072f
Merge pull request #1558 from volatilityfoundation/issues/issue1546
...
Issues/issue1546
2025-01-25 11:27:09 +00:00
Andrew Case
506a61d884
Address feedback
2025-01-24 22:09:24 +00:00
Andrew Case
e9088be0d8
Prevent infinite looping and out of memory errors #1482
2025-01-24 22:02:27 +00:00
hsarkey
830c28a7bb
Updated with current black version
2025-01-24 14:16:10 -05:00
Daniel Davidov
17d52c27bf
Update method_low_stub_offset & run ruff & black
...
* Eliminate unnecessary scanning for 32 bit processors where the structure PROCESSOR_START_BLOCK doesn't exist
* Put offsets as values of constants in a class - LowStubLayout.
* Add documentation in the class and in the function method_low_stub_offset
* Run "ruff check --fix" and "black ."
* Checked the method works on 3 physical machines
2025-01-24 21:09:28 +02:00
hsarkey
495d646682
Black and ruff fixes
2025-01-24 13:53:21 -05:00
hsarkey
af9bd53cae
Resolving conflicts and formatting issues
2025-01-24 13:35:39 -05:00
hsarkey
02d0790475
Updated black and ruff formatting errors
2025-01-24 13:24:33 -05:00
hsarkey
9ce1fd7ac0
Black formatting updates
2025-01-24 13:24:33 -05:00
hsarkey
d172e12717
Updated fixes after internal review. Allows windows.dlllist to report back DLLs from wow64 processes.
2025-01-24 13:24:33 -05:00
hsarkey
c317cad835
Syntax changes to wow64.json
2025-01-24 13:24:33 -05:00
hsarkey
bd83369c67
Updates to make the windows.dlllist plugin report dlls from wow64 processes.
2025-01-24 13:24:33 -05:00
Mike Auty
128e1be154
Core: Fix f-string quotes
2025-01-23 20:57:44 +00:00
Mike Auty
61f60ac464
Core: Move the python check somewhere it can't accidentally be removed
2025-01-23 20:52:08 +00:00
Mike Auty
a68be50798
Revert "Typing fix"
...
This reverts commit c82d432b10
2025-01-23 20:30:21 +00:00
Dave Lassalle
81ba89eef6
#1473 - update exception message
2025-01-23 12:20:14 -06:00
Dave Lassalle
6c4cafa64f
#1473 - black fixes
2025-01-23 11:59:37 -06:00
Dave Lassalle
b8d9c7b883
#1473 - add missing exception handling for get_key
2025-01-23 11:57:43 -06:00
Abyss Watcher
fd77c04153
move to linux_utilities_modules APIs
2025-01-23 10:46:42 +01:00
Abyss Watcher
7575aa5d63
deprecate lookup_module_address and mask_mods_list
2025-01-23 10:44:20 +01:00
Abyss Watcher
43ab0b0c31
add deprecation decorator
2025-01-23 10:43:14 +01:00
Abyss Watcher
34a7dfc72f
split linux modules utilities
2025-01-23 10:42:52 +01:00
ikelos and GitHub
db0a8a0078
Merge pull request #1381 from the-rectifier/develop
...
Volshell: Add Dedicated Method to retrieve EPROCESS/Task object
2025-01-23 00:06:56 +00:00
Abyss Watcher
e7b51bd1a7
prefer staticmethod when cls is not needed
2025-01-22 16:51:06 +01:00
Daniel Davidov
c10572905f
Add low stub offset kernel detection
...
reference: Memprocfs and https://www.youtube.com/watch?v=_ShCSth6dWM
2025-01-22 10:45:52 +02:00
Odysseas Stavrou
b59f051353
Volshell: Updates to the get_process() methods
2025-01-22 02:39:35 +02:00
Abyss Watcher
3ba60d55f7
remove self-contained hidden_modules check, switch to dataclass
2025-01-22 00:52:41 +01:00
Abyss Watcher
d297693876
correct required framework version
2025-01-21 23:31:17 +01:00
Abyss Watcher
614ac507be
explicit returns and extra Optional type hinting
2025-01-21 19:23:38 +01:00
Abyss Watcher
37b792b09c
ruff fix
2025-01-21 18:57:42 +01:00
Abyss Watcher
d5a2134044
modules utilities __init__.py
2025-01-21 18:39:02 +01:00
Abyss Watcher
414cab128b
2.18.0 -> 2.19.0 bump
2025-01-21 18:38:24 +01:00
Abyss Watcher
f007a28ee7
initial linux.tracing.ftrace.Check_ftrace
2025-01-21 18:37:55 +01:00
Abyss Watcher
b8e8fb6e92
initial split linux modules utilities
2025-01-21 18:37:04 +01:00
Odysseas Stavrou
dfe3d255c0
Volshell: Update Process retrieval methods with virtual/physical offsets
2025-01-20 22:25:01 +02:00
ikelos and GitHub
d2314ed1ef
Merge pull request #1537 from volatilityfoundation/issues/improve-jsonschema-speed
...
Issues/improve jsonschema speed
2025-01-20 08:26:32 +00:00
ikelos and GitHub
51726cd14f
Merge pull request #1553 from gcmoreira/parity_release_harden_page_cache
...
Linux - Parity release harden Page Cache
2025-01-20 08:17:16 +00:00
ikelos and GitHub
0f09ecd126
Merge pull request #1563 from volatilityfoundation/revert-1561-pre_linux_pagecache_recoverfs_support
...
Revert "Pre linux.pagecache.recoverfs support"
2025-01-20 08:16:24 +00:00
Gustavo Moreira
ec7a101eb9
linux: page_cache.InodePages plugin: Remove unnecesary casting
2025-01-20 11:05:51 +11:00
Gustavo Moreira
bf76aad1e2
linux: page_cache.Files plugin: Ensure the inode's i_link pointer is readable
2025-01-20 11:05:46 +11:00
ikelos and GitHub
e158ea73b2
Merge pull request #1562 from volatilityfoundation/revert-1513-env_var_missing_exception_handler
...
Revert "Add missing exception handling in env var recovery. Prevent backtraces"
2025-01-20 00:00:21 +00:00
ikelos and GitHub
e18bffdde9
Revert "Pre linux.pagecache.recoverfs support"
2025-01-19 23:51:28 +00:00
ikelos and GitHub
74b98e62c7
Revert "Add missing exception handling in env var recovery. Prevent backtraces"
2025-01-19 23:42:41 +00:00
ikelos and GitHub
00a69c9e49
Merge pull request #1561 from Abyss-W4tcher/pre_linux_pagecache_recoverfs_support
...
Pre linux.pagecache.recoverfs support
2025-01-19 16:57:21 +00:00
Abyss Watcher
d42ffc01e2
typo
2025-01-19 17:33:47 +01:00
