Mike Auty
ac7127d05a
Volshell: Sync errors with the CLI concerning unsatisfied requirements
...
Fixes #607
2021-12-31 00:55:23 +00:00
Mike Auty
571ab8f659
Volshell: Update the linux pslist requirement
2021-12-31 00:51:21 +00:00
Mike Auty
c13b49262d
Renderers: Make appending rows massively more efficient
...
Previously we were generating the list of children (for most likely the
root node) for every single append statement, during which we were
recalculating the length of the list, twice. In plugins that output a
lot of rows this would add an enourmous overhead (that likely grew as
the length of the output grew). Without this overhead, the time taken
for the TreeGrid._append method went from 1230.0s to 2.4s.
2021-12-30 01:47:51 +00:00
Mike Auty
f38fc22002
CLI: Support multi-line fields and tabstops in pretty renderer
2021-12-29 23:51:28 +00:00
Mike Auty
c8dd8d08bd
Volshell: Synchronize with the standard CLI cache clearing
2021-12-29 22:26:28 +00:00
Mike Auty
7b0a90afa6
Automagic: Warn when multiple symbol files match a banner
2021-12-29 22:19:29 +00:00
ikelos and GitHub
8134b8e2d0
Merge pull request #605 from cstation/qemu_additional_sections
...
QEMU: Add 'dirty-bitmap' and 'pbs-state', handle page_size more consistently
2021-12-29 21:30:15 +00:00
cstation
a96f5de6a0
QEMU: Add 'dirty-bitmap' and 'pbs-state', handle page_size more consistently
2021-12-29 22:19:38 +01:00
Gustavo Moreira
8f8e04da97
vfs_inode is not being used nor required
2021-12-21 15:52:22 +11:00
Gustavo Moreira
fe105dc4a7
Add doc strings and typing info everywhere.
...
Improve some variable names
2021-12-21 15:01:29 +11:00
Gustavo Moreira
7099a7a52e
Fix. We should call the net type method here.
2021-12-21 14:54:38 +11:00
Gustavo Moreira
a7520a377d
Supporting socket and reuseport filters in all the socket families.
2021-12-21 14:53:13 +11:00
Mike Auty
3bc90b8200
Plugins: Add more information to layerwriter --list
2021-12-20 20:38:12 +00:00
Gustavo Moreira
39c97b8e97
Moving thread type check methods to the task object
2021-12-20 15:26:45 +11:00
ikelos and GitHub
fc12956706
Merge pull request #603 from volatilityfoundation/feature/none-renderer
...
CLI: Add in None renderer to avoid text output
2021-12-19 22:21:56 +00:00
Mike Auty
997b857246
CLI: Add in None renderer to avoid text output
2021-12-19 22:16:53 +00:00
Gustavo Moreira
86d3785bea
Fixing constant module and reference comment
2021-12-17 14:42:23 +11:00
Gustavo Moreira
16cb449a77
Added changes to the Linux pslist and pstree plugins to be able to show user threads.
2021-12-17 14:23:14 +11:00
Gustavo Moreira
f23b288ffc
Bump framework and plugin required minor version
2021-12-15 17:52:07 +11:00
Gustavo Moreira
fcf9983d51
Removed --all-process and added --mntns.
2021-12-15 13:48:46 +11:00
Gustavo Moreira
a1d145c34f
Cleaning space issues
2021-12-14 22:10:52 +11:00
Gustavo Moreira
7dc33b8314
fix typo
2021-12-14 17:28:38 +11:00
Gustavo Moreira
a1ff8d7809
Fix comment. This was related to netlink_sock not packer_sock
2021-12-14 17:25:58 +11:00
Gustavo Moreira
34176a8066
Moving log lines from warning to LOGLEVEL_V
2021-12-14 17:10:45 +11:00
Gustavo Moreira
f4e1f4729f
Added type annotations
2021-12-14 16:56:27 +11:00
Gustavo Moreira
8af7422928
Parameterized generator
2021-12-14 16:52:47 +11:00
Gustavo Moreira
b4bcdd0856
Minor changes
2021-12-14 16:51:02 +11:00
Gustavo Moreira
7ed5739e24
socket is no longer imported in this file. Remove the underscore
2021-12-14 16:24:57 +11:00
Gustavo Moreira
52181c7e8f
Improvements to the parameterized generator changes
2021-12-14 16:22:30 +11:00
Gustavo Moreira
c54818e630
Remove redundancies around array_to_string(). It returns a str() already.
2021-12-14 16:00:11 +11:00
Gustavo Moreira
a386a7a948
Removed underscore from unused arguments
2021-12-14 15:40:51 +11:00
Gustavo Moreira
86676cf4e8
Changing BPF_PROG_TYPE_UNSPEC constant in favor of a literal 0 and a comment.
2021-12-14 15:37:55 +11:00
Gustavo Moreira
6970776c4c
Renaming function to use single underscore and name from extra to extended
2021-12-14 15:37:48 +11:00
Gustavo Moreira
2e93db9b57
Adding versioning to SockHandlers
2021-12-14 15:37:43 +11:00
Gustavo Moreira
9766327433
Parameterized generator
2021-12-14 15:37:37 +11:00
Gustavo Moreira
5c507f5ae8
Plugins versioning fixes
2021-12-14 15:37:19 +11:00
ikelos and GitHub
3c11099e66
Merge pull request #596 from gcmoreira/assorted-fixes
...
Assorted fixes
2021-12-12 22:54:18 +00:00
Gustavo Moreira
c5c1f355ef
Changing not not for a more explicit if statement
2021-12-13 09:51:25 +11:00
Gustavo Moreira
6456e55ddc
Added Sockstat linux plugin to enumerate all processes sockets.
...
The output format is based on the `ss` tools. It supports:
* Unix socket
* Inet/Inet6 sockets
* Netlink sockets
* VSock sockets
* Packet sockets
* XDP sockets (eBPF)
* Bluetooth sockets (When the respective symbols are present)
Changes to the linux Lsof plugin were required to be able to reuse its filedescriptor listing capability.
2021-12-10 17:51:27 +11:00
Gustavo Moreira
02bf609fd1
Prepare linux.lsof.Lsof plugin to work as a helper library for other plugin.
2021-12-10 17:50:52 +11:00
Gustavo Moreira
d2ad867d1e
my mistake, it should be negated twice to get True when is valid
2021-12-10 13:20:43 +11:00
Gustavo Moreira
e1942976bf
wrong comparison with None
2021-12-10 13:10:47 +11:00
Gustavo Moreira
8e7aff4ad8
not in please
2021-12-10 13:09:41 +11:00
Gustavo Moreira
36ac92c11c
undefined layers module
2021-12-10 13:06:38 +11:00
Gustavo Moreira
17e0b04cb3
undefined glob module
2021-12-10 13:06:15 +11:00
Mike Auty
581251cb05
Linux: Fix long standing typo (thanks to @gcmoreira)
2021-12-08 23:34:53 +00:00
Mike Auty
832bdc2ab1
Linux: Fix long standing typo (thanks to @gcmoreira)
2021-12-08 23:34:23 +00:00
ikelos and GitHub
32ec4afed3
Merge pull request #586 from volatilityfoundation/issues/qemu-speed-up
...
Layers: Speed up qemu by not bisecting
2021-12-08 23:08:32 +00:00
ikelos and GitHub
8f083ed1dd
Merge pull request #476 from japhlange/issues/issue474_netscan_win8sp1x64
...
adds netstat symbols to Win8x64 ISF files
2021-12-06 20:10:25 +00:00
Jan
125658ee0d
re-adds accidentally deleted file
2021-12-06 21:09:39 +01:00
Mike Auty