k1nd0ne
fa2b840b55
Object Storage Layer for PR #1037
2023-11-18 15:05:11 +01:00
Abyss Watcher
6372b6f367
symbols getters follow vol2 format
2023-11-17 17:52:58 +01:00
Abyss Watcher
1a73717b93
set 'module' as config string
2023-11-17 17:49:54 +01:00
ikelos and GitHub
d56297c4b1
Merge pull request #1038 from eve-mem/linux_check_afinfo_member_checks
...
Linux: add member presence checks to linux.checks_afinfo
2023-11-15 23:00:25 +00:00
Eve
4f4e2efd99
Linux: update warning logic in linux.checks_afinfo so that only one warning is shown and debug logs are cleaner
2023-11-15 10:29:06 +00:00
ikelos and GitHub
c616c0b35e
Merge pull request #1011 from eve-mem/layer_debug_info
...
Layer debug info to show file size
2023-11-15 01:06:13 +00:00
ikelos and GitHub
2e4d6cde17
Merge pull request #1035 from eve-mem/linux_bash_get_sections_only_once
...
Linux: update bash plugin to only get memory sections once
2023-11-15 00:59:30 +00:00
ikelos and GitHub
19d40b1a7f
Merge pull request #1027 from daddycocoaman/fix/pdbutility-signature
...
fix guid and pdb_name for #1026
2023-11-14 23:38:53 +00:00
Abyss Watcher
36327a4315
check if symbol name is empty after strip
2023-11-14 17:20:16 +01:00
Abyss Watcher
bf68fa8ce2
use KSYM_NAME_LEN for symbol name length
2023-11-14 17:09:36 +01:00
Abyss Watcher
2de97af061
use refcnt for inheritance
2023-11-14 16:54:10 +01:00
Abyss Watcher
83de6274ef
fix symbols and function calls
2023-11-14 16:53:08 +01:00
Eve
5ab0e4f83f
Linux: remove _valid_magic from linux elf extension, check for _type_prefix and _hdr attrs instead
2023-11-14 07:22:00 +00:00
Eve
f7d5e722a2
Linux: add member presence checks to linux.checks_afinfo _check_afinfo function to stop crashes when none of the required members are present
2023-11-13 07:05:30 +00:00
Eve
9fe7d479f6
Linux: update bash plugin to only get memory sections once
2023-11-10 20:58:07 +00:00
Eve
ebe19bf179
Linux: update maple tree extension to fix issue #1032
2023-11-10 20:30:38 +00:00
ikelos and GitHub
82c5af76df
Merge pull request #1024 from volatilityfoundation/feature/citation
...
Documentation: Add in a CITATION.cff file
2023-11-08 20:20:09 +00:00
Leron Gray and GitHub
40dcff16e9
Merge branch 'volatilityfoundation:develop' into fix/pdbutility-signature
2023-11-06 11:37:01 -06:00
ikelos and GitHub
fda1db4695
Merge pull request #1023 from volatilityfoundation/feature/santitize-filenames
...
Core: Add (optional) sanitization to the FileHandler class
2023-11-06 08:24:19 +00:00
Leron Gray
c2b008969c
update pefile requirements
2023-11-05 16:25:43 -06:00
Leron Gray
b9c4a1d8a7
fix guid and pdb_name for #1026
2023-10-31 13:52:26 -05:00
Mike Auty
3bb1285dbf
Layers: Make removal of a layer more efficient, as noted in #809
2023-10-29 13:53:55 +00:00
ikelos and GitHub
e5d3134508
Merge pull request #1025 from Abyss-W4tcher/remote_isf
...
Core: Remote ISF - correct sql query and strip identifier
2023-10-23 19:03:46 +01:00
Abyss Watcher
c20baf9d1f
black formatting
2023-10-23 17:49:03 +02:00
Abyss Watcher
3a65626671
black formatting
2023-10-23 17:47:57 +02:00
Abyss Watcher
2d3b3158dc
correct sql query and strip identifier
2023-10-21 23:34:17 +02:00
ikelos and GitHub
11ddafde44
Merge pull request #999 from 616c696365/fix-issue-895
...
Windows: Update pslist.py, add friendly option
2023-10-19 10:29:42 +01:00
ikelos and GitHub
104623ede2
Merge pull request #1018 from volatilityfoundation/1017-printkey-breaks-when-encountering-invalid-root-node
...
issue #1017 - check for valid root node type
2023-10-19 10:18:55 +01:00
ikelos and GitHub
806801ea69
Merge pull request #1020 from volatilityfoundation/1019-printkey-timestamps-are-misleadingincorrect
...
issue #1019 - for subkeys, return the modified time of the subkey its…
2023-10-19 10:18:22 +01:00
Dave Lassalle
a497216beb
issue #1019 - black updates
2023-10-18 14:09:42 -05:00
Dave Lassalle
fcaba2d95a
issue #1017 - black updates
2023-10-18 14:08:50 -05:00
616c696365
7323bd3a59
windows.pslist process name added to dumped file by default
2023-10-18 19:16:10 +01:00
Mike Auty and 616c696365
5d43071f57
Core: Add (optional) sanitization to the FileHandler class
2023-10-18 19:16:10 +01:00
616c696365 and GitHub
f2f412d555
Merge branch 'volatilityfoundation:develop' into fix-issue-895
2023-10-18 18:44:24 +01:00
Eve and GitHub
604218816d
Merge branch 'volatilityfoundation:develop' into linux_elf_padded_magic_read
2023-10-18 08:59:01 +01:00
Mike Auty
14fa5ad771
Documentation: Add in a CITATION.cff file
...
Initial addition of a CITATION file, no version information was included
because keeping it up to date with the version in the repo automatically
would be tricky and not doing so would lead it to becoming out of sync.
Fixes #1013 .
2023-10-17 16:27:29 +01:00
Mike Auty
63ace60995
Core: Add (optional) sanitization to the FileHandler class
2023-10-17 15:54:10 +01:00
ikelos and GitHub
57924c5da1
Merge pull request #1001 from xabrouck/oldkernel
...
Making cred optional as it didn't exist in old 2.6 kernels
2023-10-17 15:34:10 +01:00
ikelos and GitHub
15ad1db01b
Merge pull request #1016 from eve-mem/vmem_warnings
...
vmware: Add warning when no metadata file is found for a vmem file.
2023-10-17 15:02:11 +01:00
Eve
e45380f4f5
Update vmware layer metadata file warning to be less doom and gloom.
2023-10-13 09:29:46 +01:00
Dave Lassalle
95c468c4f8
issue #1019 - for subkeys, return the modified time of the subkey itself, not its parent key
2023-10-12 10:16:56 -05:00
Dave Lassalle
9cc73b6a03
issue #1017 - check for valid root node type
2023-10-12 09:57:24 -05:00
Eve
310b6508db
vmware: Add warning when no metadata file is found for a vmem file.
2023-10-11 09:09:15 +01:00
Eve and GitHub
faa8b2eaa9
Merge branch 'volatilityfoundation:develop' into vmayarascan
2023-10-09 17:16:56 +01:00
Mike Auty
93b2972832
Renderers: Allow nodes to be turned into dictionaries
2023-10-08 22:19:17 +01:00
Abyss Watcher
6e5d41c38b
manually instantiate queue_entry for tasks symbol
2023-10-08 03:37:17 +02:00
Abyss Watcher
57d995a81d
manually instantiate queue_entry for tasks symbol
2023-10-08 03:15:23 +02:00
RuBublik
62466c7953
fixed merge conflicts with 'volatilityfoundation:develop' branch - bumped VERSION_PATCH
2023-10-03 21:37:41 +03:00
Eve and GitHub
40d993b1a0
Merge branch 'volatilityfoundation:develop' into layer_debug_info
2023-10-03 07:43:13 +01:00
Eve
41a02fbf5b
Linux: use try/except in linux elf extension to catch paged and invalid addresses rather than crashing
2023-10-03 07:13:28 +01:00
k1nd0ne