ikelos and GitHub
f33e9daa48
Merge pull request #1707 from volatilityfoundation/1471-registry-plugins-spread-across-directories-needs-standardization
...
1471 registry plugins spread across directories needs standardization
2025-03-27 16:36:58 +00:00
70e101ff90
Potential fix for code scanning alert no. 407: First argument to super() is not enclosing class
...
Think this is more correct
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2025-03-27 14:13:25 +00:00
Dave Lassalle
bfc7e01d75
fix merge conflicts
2025-03-27 08:25:34 -05:00
Dave Lassalle
ef29008cc8
#1471 - fix class deprecation and update other plugins
2025-03-26 17:53:19 -05:00
ikelos and GitHub
8de46033d7
Merge pull request #1737 from Abyss-W4tcher/additional_windows_testing
...
Windows: Additional testing
2025-03-26 20:30:15 +00:00
Abyss Watcher
dca182dc72
trigger tests
2025-03-26 15:59:35 +01:00
ikelos and GitHub
f74082ec36
Merge pull request #1742 from volatilityfoundation/1741-consoles-requirements
...
Consoles: Fix requirement versions
2025-03-26 14:50:15 +00:00
David McDonald
1c21b3cd04
Consoles: Fix requirement versions
...
When I updated the requirements for `Consoles` in #1738 , I bumped the
version number on the `VerInfo` requirement instead of on the `Info`
requirement.
closes #1741
2025-03-26 09:07:32 -05:00
Abyss-W4tcher and GitHub
ff8d6dbd42
Merge branch 'develop' into additional_windows_testing
2025-03-26 14:42:14 +01:00
Abyss Watcher
b80a34110e
adjust thrdscan
2025-03-26 14:41:05 +01:00
Dave Lassalle
f431f519b6
#1471 - black and ruff fixes
2025-03-26 08:22:37 -05:00
Dave Lassalle
67533b034a
#1471 - deprecation class for moving
2025-03-26 08:21:28 -05:00
Andrew Case
25eaaff06c
Bring hidden module to expose dump option. Fix CodeQL found bug
2025-03-26 01:30:26 +00:00
Andrew Case
e93df37649
Add module extraction API. Add plugin to directly extract modules. Hook module dumping into existing module listing plugins.
2025-03-26 01:16:53 +00:00
ikelos and GitHub
4fd0f20ff9
Merge pull request #1739 from volatilityfoundation/fix_thrdscan_checks
...
Fix checks in thrdscan that broke tests
2025-03-26 00:55:32 +00:00
Andrew Case
444305afc2
Handle kernel processes properly this time
2025-03-26 00:55:48 +00:00
Andrew Case
43ab95f4c5
Change thrdscan from looking for kernel processes
2025-03-26 00:50:34 +00:00
Andrew Case
e52aea886e
Fix checks in thrdscan that broke tests
2025-03-26 00:41:26 +00:00
ikelos and GitHub
2ebda44482
Merge pull request #1738 from volatilityfoundation/framework/missing_version_requirements
...
Framework: Missing `VersionRequirement`s
2025-03-25 23:16:25 +00:00
David McDonald
66992a5d9a
Requirements: Insert missing version requirements
...
This audits the entire codebase for missing `VersionRequirements` and
adds them as needed.
2025-03-25 17:44:35 -05:00
David McDonald
d5fc050224
Timeliner: add VersionableInterface superclass
...
This adds `interfaces.configuration.VersionableInterface` as a
superclass to `TimelinerInterface` in order to be consistent with other
versioned interfaces such as `PluginInterface`.
2025-03-25 17:44:35 -05:00
f0b6b0405f
Update CODING_STYLE.md
...
Hehehe, good catch, thanks! 5:D
Co-authored-by: Donghyun Kim <digitalisx99@gmail.com >
2025-03-25 17:27:31 +00:00
5c2d646829
Update CODING_STYLE.md
...
Co-authored-by: Donghyun Kim <digitalisx99@gmail.com >
2025-03-25 17:27:06 +00:00
d753e8ecb6
Update CODING_STYLE.md
...
Thanks, my fingers don't work as well as they used to, so I appreciate you picking up typos like this!
Co-authored-by: Donghyun Kim <digitalisx99@gmail.com >
2025-03-25 17:25:55 +00:00
Abyss Watcher
d70d8820a9
use winxp against scanner plugins (performances)
2025-03-25 11:41:28 +01:00
ikelos and GitHub
b881fa1fac
Merge pull request #1731 from volatilityfoundation/process_ghosting_update_with_delete_on_close
...
Add delete on close detection to process ghosting. Update plugin to c…
2025-03-25 09:15:23 +00:00
ikelos and GitHub
d0e32e593a
Merge pull request #1735 from volatilityfoundation/issue_1732_pe_symbols
...
Fix issue when pe_symbols limited to searching one process. Remove ne…
2025-03-25 09:13:52 +00:00
ikelos and GitHub
4ac8599d17
Merge pull request #1730 from volatilityfoundation/threads_useful_columns
...
Add win32 start address listing. Add paths for both thread starting a…
2025-03-25 09:12:57 +00:00
Andrew Case
3a4e622854
Change pending checking and OS version
2025-03-24 20:19:59 -05:00
Andrew Case
1a2427b54b
Change column order
2025-03-24 20:18:54 -05:00
Andrew Case
0f098fc160
Address feedback
2025-03-24 20:13:10 -05:00
Andrew Case and GitHub
19520799bb
Merge branch 'develop' into threads_useful_columns
2025-03-24 20:03:07 -05:00
ikelos and GitHub
083dae71b4
Merge pull request #1733 from volatilityfoundation/add-script-only-volshell-feature
...
Add a --script-only flag that exits after the given volshell script i…
2025-03-25 00:51:50 +00:00
ikelos and GitHub
e527f76a2d
Merge pull request #1734 from volatilityfoundation/plugin_requirement_deprecation
...
Framework: Replace PluginRequirements
2025-03-25 00:48:31 +00:00
ikelos and GitHub
46561dd664
Merge pull request #1728 from volatilityfoundation/add_perf_events
...
Add performance event plugin to detect eBPF malware
2025-03-25 00:17:55 +00:00
ikelos and GitHub
6dc0157841
Merge pull request #1729 from the-rectifier/volshell_byteorder
...
Volshell: Add byteorder argument for display_* functions
2025-03-25 00:10:19 +00:00
Mike Auty
de11e87f28
Fix ruff error (again)
2025-03-25 00:08:07 +00:00
Mike Auty
a013170a2d
Slotting has little effect, so don't change so much
2025-03-24 23:58:45 +00:00
Mike Auty
acfedd6d9c
Sets slots to none has no effect on memory as long as __dict__ isn't instanciated
2025-03-24 23:23:22 +00:00
Mike Auty
200746cbe6
Fix silly usage of update
2025-03-24 22:46:36 +00:00
Mike Auty
292ed6aeb4
Try to avoid variables changing types
2025-03-24 22:41:52 +00:00
Mike Auty
62d1d818b3
Restore use of ChainMap as well
2025-03-24 22:40:14 +00:00
Mike Auty
0ea5d795fd
Fix ruff issue
2025-03-24 22:36:12 +00:00
Mike Auty
8610c681ab
Restore the chainmap, since we need it for cloning
2025-03-24 22:33:25 +00:00
Abyss Watcher
6a28d1432f
adjust curl cmds
2025-03-24 20:39:44 +01:00
Andrew Case
166d0e0c14
Fix issue when pe_symbols limited to searching one process. Remove need to track symbol indexes. Provide much more useful debugging information. Fixes #1732
2025-03-24 19:37:59 +00:00
Abyss Watcher
f80b207aab
download symbols_win-10_19041-2025_03.zip
2025-03-24 20:36:25 +01:00
Mike Auty
3153cd7e30
Remove the chainmap and multiple dictionaries to reduce memory consumption
2025-03-24 19:21:51 +00:00
David McDonald
a6f9a0e95b
Framework: Replace PluginRequirements
...
This replaces all uses of `requirements.PluginRequirements` with
`requirements.VersionRequirement`.
2025-03-24 11:30:17 -05:00
Andrew Case
003c139597
Add a --script-only flag that exits after the given volshell script is completed
2025-03-24 15:10:37 +00:00
