 Gustavo Moreira
|
5dc4dfcee8
|
linux: bpf_prog extension object: improve pointers validation
|
2025-01-17 09:52:54 +11:00 |
|
|
Gustavo Moreira
|
50c690e280
|
linux: proc.Maps plugin: improve pointers validation
|
2025-01-17 09:52:49 +11:00 |
|
|
Gustavo Moreira
|
ad0c48e8c9
|
linux: mount info plugin: revert minor version increment in favor of a patch-level update
|
2025-01-17 08:51:44 +11:00 |
|
|
Gustavo Moreira
|
4d05e8a76c
|
linux: mount API: escape '*' in docstrings to ensure correct documentation rendering
|
2025-01-17 08:51:39 +11:00 |
|
|
Gustavo Moreira
|
72056a8d00
|
linux: mount api: fix vfsmount pointer check
|
2025-01-17 07:29:23 +11:00 |
|
|
ikelosandGitHub
|
897743ace7
|
Merge pull request #1549 from cgoodwine/develop
Actions: Add new workflow for generating windows EXEs with pyinstaller
|
2025-01-16 20:26:54 +00:00 |
|
|
Abyss Watcher
|
cd8690a805
|
require framework version 2.17.0
|
2025-01-16 16:27:22 +01:00 |
|
|
Abyss Watcher
|
94704c6674
|
2.16.0 -> 2.17.0 bump
|
2025-01-16 16:26:57 +01:00 |
|
|
Abyss Watcher
|
b447bfa81c
|
remove module tainting proxies
|
2025-01-16 16:24:38 +01:00 |
|
|
Mike Auty
|
749a0f9c65
|
Core: Fix up ISFinfo looking for fastjsonschema
|
2025-01-16 12:06:22 +00:00 |
|
|
Gustavo Moreira
|
d8254b6373
|
linux: page_cache test case: Improve test
|
2025-01-16 21:39:37 +11:00 |
|
|
Gustavo Moreira
|
9944fcc61f
|
linux: page_cache test case: Since the --dump no longer generate output, we test both modes, listing and dumping.
|
2025-01-16 21:15:22 +11:00 |
|
|
Gustavo Moreira
|
5502a54198
|
linux: page_cache plugin: Refactor to make _generator more readable
|
2025-01-16 19:50:21 +11:00 |
|
|
Gustavo Moreira
|
c1497410b4
|
linux: page_cache plugin: lazy file initialization and avoid redundant inode page cache walk during dumps not showing output with dumping to file.
|
2025-01-16 19:50:14 +11:00 |
|
|
Gustavo Moreira
|
3c92d7f7b7
|
linux: page_cache: enhance early inconsistency detection
|
2025-01-16 19:50:08 +11:00 |
|
|
Gustavo Moreira
|
ce40659d87
|
linux: radix_tree: Fix various issues, enhance early inconsistency detection, and improve compatibility with older kernel versions
|
2025-01-16 19:49:59 +11:00 |
|
|
Gustavo Moreira
|
6608487862
|
Linux: pagecache: Fix issue with incosistent inode page caches
|
2025-01-15 15:09:37 +11:00 |
|
|
Gustavo Moreira
|
b27f98fed2
|
linux: pslist: fix task credentials rendering
|
2025-01-15 14:37:35 +11:00 |
|
|
Gustavo Moreira
|
28c74f8c1b
|
Linux: Add support for Intel 32bit with PAE in early kernels, including versions 2.3.27 and 2.3.28.
|
2025-01-15 13:23:39 +11:00 |
|
|
Gustavo Moreira
|
9f08af47b1
|
Linux: Add support for Intel 32bit with PAE
|
2025-01-15 12:51:52 +11:00 |
|
|
Kerry Goodwine
|
1a84f96c70
|
Actions: Add new workflow for generating windows EXEs with pyinstaller
|
2025-01-14 14:55:06 -05:00 |
|
|
Gustavo Moreira
|
529b67fc96
|
Linux: pagecache: Fix issue reported in #1527
|
2025-01-14 13:30:10 +11:00 |
|
|
Gustavo Moreira
|
d21fdb4211
|
Linux: pagecache: Harden Page Cache API to consistently yield valid entries
|
2025-01-14 13:30:04 +11:00 |
|
|
Gustavo Moreira
|
7fc2af5b4e
|
linux: Add an additional quick check before validating pointer readability
|
2025-01-14 11:39:48 +11:00 |
|
|
Gustavo Moreira
|
8bc0452935
|
linux: Improve compatibility with ancient kernels
|
2025-01-14 11:21:23 +11:00 |
|
|
Gustavo Moreira
|
77ad6f0d83
|
linux: remove unused import
|
2025-01-13 18:25:24 +11:00 |
|
|
Gustavo Moreira
|
1707e0a89c
|
Fix array_to_string helper method: If called with other object than array and a count value, it will end up with an AttributeError exception
|
2025-01-13 18:07:56 +11:00 |
|
|
Gustavo Moreira
|
d4803a3884
|
Linux: Ensure mount API consistently returns valid mountpoints and path names
|
2025-01-13 18:07:51 +11:00 |
|
|
Gustavo Moreira
|
4b10d65850
|
linux: minor docstring improvements
|
2025-01-13 18:07:46 +11:00 |
|
|
Gustavo Moreira
|
fba8f05c80
|
linux: Rename variable to clarify pointer type and avoid confusion with the 'dentry' class.
|
2025-01-13 18:07:40 +11:00 |
|
|
Gustavo Moreira
|
35fa9321b3
|
Linux: file struct: Remove f_dentry and f_vfsmnt, as they were preprocessor macro shortcuts, not actual members of the type.
|
2025-01-13 18:07:25 +11:00 |
|
|
Gustavo Moreira
|
0d9715136c
|
Linux: Ensure VMA enumration functions yield only valid objects consistently
|
2025-01-13 17:15:37 +11:00 |
|
|
Gustavo Moreira
|
093b12b7cd
|
Linux and Windows: Ensure linked list object extensions consistently yield valid entries
|
2025-01-13 16:56:59 +11:00 |
|
|
Gustavo Moreira
|
6817d2c765
|
linux: ensure process listing functions yield only valid tasks
|
2025-01-13 16:05:52 +11:00 |
|
|
Abyss Watcher
|
0e4e751844
|
stateless classmethods
|
2025-01-11 14:05:36 +01:00 |
|
|
ikelosandGitHub
|
a6777146f6
|
Merge pull request #1538 from Abyss-W4tcher/plugins_argparse_epilogue
Introduce customizable plugin arparse epilog
|
2025-01-10 22:42:17 +00:00 |
|
|
Abyss Watcher
|
8842375341
|
2.15.0 -> 2.16.0 bump
|
2025-01-10 23:28:02 +01:00 |
|
|
ikelosandGitHub
|
bedcaa24cd
|
Merge pull request #1541 from volatilityfoundation/revert-1539-mac
Revert "Small readability improvements"
|
2025-01-10 21:10:38 +00:00 |
|
|
ikelosandGitHub
|
7913fb2bb0
|
Revert "Small readability improvements"
|
2025-01-10 21:07:08 +00:00 |
|
|
Abyss Watcher
|
1cf0232d25
|
less specific argparse epilog reference
|
2025-01-10 21:19:31 +01:00 |
|
|
ikelosandGitHub
|
b96a758809
|
Merge pull request #1539 from j-t-1/mac
Small readability improvements
|
2025-01-10 20:08:21 +00:00 |
|
|
ikelosandGitHub
|
89d32df403
|
Merge pull request #1540 from volatilityfoundation/certificates_traceback
Windows: Certificates - handle uncaught RegistryFormatException
|
2025-01-10 19:54:00 +00:00 |
|
|
j-t-1andGitHub
|
5c21f4a526
|
Small readability improvements
|
2025-01-10 19:08:56 +00:00 |
|
|
j-t-1andGitHub
|
a26ff8fa6e
|
Small readability improvements
|
2025-01-10 19:03:51 +00:00 |
|
|
Abyss Watcher
|
615d1d5a2e
|
more compact _argparse_epilog
|
2025-01-10 19:49:25 +01:00 |
|
|
Abyss Watcher
|
96eca6e016
|
more compact _argparse_epilog
|
2025-01-10 19:38:07 +01:00 |
|
|
David McDonald
|
a7661d45e7
|
Windows: Certificates - handle uncaught RegistryFormatException
Changes variable import to module import, and catches an unhandled
`RegistryFormatException` in certificates.py
|
2025-01-10 09:26:53 -06:00 |
|
|
j-t-1andGitHub
|
530617a700
|
Small readability improvements
|
2025-01-10 11:52:54 +00:00 |
|
|
Abyss Watcher
|
5859011052
|
introduce customizable plugin arparse epilog
|
2025-01-10 12:35:04 +01:00 |
|
|
ikelosandGitHub
|
803c4ec364
|
Merge pull request #1533 from j-t-1/typo
Change one letter of a typo
|
2025-01-09 23:42:39 +00:00 |
|