Commit Graph
6047 Commits
Author SHA1 Message Date
Mike Auty 5ac191b310 Automagic: Set the cache period back to 3 days 2022-11-02 21:43:18 +00:00
Mike Auty 0c80ae4f81 Automagic: Check file datetime to determine whether to recache 2022-11-02 21:39:27 +00:00
Andrew Case 0b33a79dc6 Report IRP entries that point inside a hidden module. This is a common rootkit technique. 2022-11-02 21:10:51 +00:00
Mike Auty d09f23a7d7 Mac: Fix additional possibility of failure from refactoring 2022-11-02 20:55:24 +00:00
Mike Auty aa0c2b6c74 Mac: Fix bug found by buildbot/npetroni due refactoring 2022-11-02 20:53:00 +00:00
Gustavo Moreira 87afe154a4 Merge remote-tracking branch 'upstream/develop' into linux_sockstats_plugin 2022-10-31 15:44:28 +11:00
Gustavo Moreira 25ceccb65b Improve and fix issues in bluetooth family. Disaggregate pid, fds, and socket address to new columns. Removed task association by socket address feature. 2022-10-31 15:42:47 +11:00
Gustavo Moreira 017fcc05f3 Split address and port. Fix potential issues in xdp_sock(s) with older kernels. Postpone any kind of formatting to the generator making it more appropriate to be used as a library. 2022-10-29 12:55:16 +11:00
Andrew Case 85dcd04961 Add drivermodule plugin and wrap common access to a Drver's names in a method 2022-10-28 19:59:53 +00:00
Gustavo Moreira dfadf5376a Fix issue with AF_XDP socket family, issues with older kernel versions and other fixes and improvements 2022-10-28 20:46:08 +11:00
Gustavo Moreira 1f185d0ee2 Minor fix comment typo 2022-10-28 16:51:03 +11:00
ikelosandGitHub c3b7e9229c Merge pull request #840 from digitalisx/fix/setup-find-packages
Fix: `find_namepsace_packages` method for `setup.py`.
2022-10-24 10:39:18 +01:00
ikelosandGitHub 91718e3704 Merge pull request #850 from digitalisx/develop
Fix: typo for linux tutorial.
2022-10-24 10:31:44 +01:00
Mike Auty 94bb22d4bc Automagic: Make cache period longer and configurable 2022-10-23 22:49:06 +01:00
Donghyun KimandGitHub 87963ccfb3 Merge branch 'volatilityfoundation:develop' into develop 2022-10-22 18:22:34 +09:00
Donghyun Kim 88e9441920 Fix: typo for linux tutorial 2022-10-22 18:20:22 +09:00
Donghyun KimandGitHub 80630182af Merge branch 'volatilityfoundation:develop' into feature/vadwalk 2022-10-17 04:59:18 +09:00
ikelosandGitHub 1282257d97 Merge pull request #849 from digitalisx/develop
Fix: typo for linux tutorial.
2022-10-16 20:54:00 +01:00
Donghyun Kim 439835a61d Fix: typo for linux tutorial 2022-10-17 04:50:58 +09:00
Mike Auty 537f6a6a55 Documentation: Fix minor typo 2022-10-16 15:55:45 +01:00
Mike Auty b71e367d38 Documentation: Rename, fix grammar and avoid using personal pronouns 2022-10-16 15:50:22 +01:00
ikelosandGitHub 1a838aecb5 Merge pull request #693 from tejas15802/documentation
Documentation - Improvising with examples
2022-10-16 15:11:46 +01:00
Tejas 9d9eb226ab Removed the commands which were present for LIME 2022-10-16 19:21:42 +05:30
Tejas fba734b284 AVML added. Restructured Acquiring Memory. 2022-10-16 19:10:55 +05:30
ikelosandGitHub 7f819f02de Merge pull request #846 from a5hlynx/develop
correct ImageFileName
2022-10-16 10:56:11 +01:00
Tejas 95e4078b77 Added FTK as another example to avoid favouritism 2022-10-16 08:25:35 +05:30
Tejas 146afc0f07 Incomplete sentence - fixedf 2022-10-16 08:07:43 +05:30
Gustavo Moreira f3ef9a6ded Merge remote-tracking branch 'upstream/develop' into linux_sockstats_plugin 2022-10-13 16:08:37 +11:00
Gustavo Moreira 6a0b6eb20f Merge branch 'develop' into linux_sockstats_plugin 2022-10-13 14:43:03 +11:00
a5hlynx 1ffe9f222f correct ImageFileName 2022-10-07 00:57:20 +09:00
ikelosandGitHub 9333dab52a Merge pull request #841 from digitalisx/fix/unused-module
Fix: unsused module for `objects` initialize code.
2022-10-04 09:46:41 +01:00
Paul Kermann d9c434da3f Removed extra flag 2022-09-28 11:19:46 +03:00
Donghyun KimandGitHub aed6a8c511 Merge branch 'volatilityfoundation:develop' into fix/unused-module 2022-09-23 08:02:33 +09:00
Donghyun Kim 949b15a368 Fix: unsused module for objects initialize code 2022-09-23 08:01:11 +09:00
Donghyun Kim 3523985d0a Fix: to find_namepsace_packages method 2022-09-23 07:47:03 +09:00
Donghyun Kim b8959065e3 Fix: ssl error for python37 2022-09-23 00:59:21 +09:00
Mike Auty dad8fba67f Core: Bump to python 3.7 with warnings for old global config variables 2022-09-21 21:23:42 +01:00
ikelosandGitHub 72d928fecd Merge pull request #819 from volatilityfoundation/feature/cache-path-fix
Core: Allow for deprecation of constants gracefully
2022-09-21 21:22:36 +01:00
ikelosandGitHub 7f24c4dcd7 Merge pull request #818 from volatilityfoundation/issue_713_fix_vad_end_off_by_one_pr
refs #713 add a vad.get_size() method and fix several off-by-one issues with calculating vad size
2022-09-21 21:19:06 +01:00
Mike Auty 7529c7b246 Core: Revert volatility 3.7 bump and associated features 2022-09-21 21:15:40 +01:00
ikelosandGitHub 42d0a6cbd2 Merge pull request #837 from volatilityfoundation/issues/issue829
Windows: When constructing a buffer, manually dereference onto the native layer
2022-09-21 21:03:29 +01:00
ikelosandGitHub 82a46a3d36 Merge branch 'develop' into issue_713_fix_vad_end_off_by_one_pr 2022-09-21 21:00:54 +01:00
iMHLv2 e5d4e599d3 refs #713 update API_CHANGES.md 2022-09-21 14:55:17 -05:00
Mike Auty 4985dcd9a3 Windows: When constructing a buffer, manually dereference onto the native layer 2022-09-21 20:53:41 +01:00
941b5ff9c1 Update volatility3/framework/constants/__init__.py
Yep, quite right

Co-authored-by: Donghyun Kim <digitalisx99@gmail.com>
2022-09-21 20:19:42 +01:00
Donghyun KimandGitHub d3e7385d7b Merge branch 'volatilityfoundation:develop' into feature/vadwalk 2022-09-22 04:15:33 +09:00
ikelosandGitHub fe76207d7e Merge pull request #828 from digitalisx/update/api-changes
Add: `API_CHANGES.md` description for `2.3.1` version.
2022-09-21 19:46:57 +01:00
ikelosandGitHub b58a16b156 Merge pull request #834 from paulkermann/bugfix/windows_csv_lineterminator
Bugfix CSV format line terminator
2022-09-21 19:45:29 +01:00
iMHLv2 ee3895867f refs #713 bump VERSION_MINOR to 4 2022-09-21 13:40:28 -05:00
Donghyun KimandGitHub ae1da5ba47 Merge branch 'volatilityfoundation:develop' into feature/vadwalk 2022-09-18 01:53:38 +09:00