WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-09 19:27:39 +02:00
Code Issues Packages Projects Releases Wiki Activity
6,047 Commits 80 Branches 17 Tags
bugfix/missing_modules
Commit Graph
6047 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
atcuno 0be5dad2bd Prevent pslist from backtracing on invalid process. Include a warning with the offset. 2021-03-19 11:51:23 -05:00
Andrew Case d3b407515a Initial commit for mass testing 2021-03-19 11:29:19 -05:00
ikelosandGitHub 8e420dec41 Merge pull request #481 from volatilityfoundation/feature/version-pdbutility 
Windows: Generalize symbol_table_from_pdb
 2021-03-18 14:42:09 +00:00
Mike Auty ea71cbe9c9 Windows: Fix the verinfo versioning 
This should already have been versioned because it had a classmethod.
Since it wasn't, we can start at (1, 0, 0) but it should only need
framrwork version (1, 0, 0) as well.
 2021-03-17 21:02:55 +00:00
Mike Auty 9c30ed19ef Windows: Deprecate netstat create_tcpip_symbol_table 2021-03-17 20:07:29 +00:00
Mike Auty 8d8b2ea2dd Windows: Fix up hardcoded filename in pdbutil 2021-03-17 15:31:58 +00:00
Mike Auty 180087e746 Windows: Update vadyarascan with compiled file option 2021-03-15 22:58:48 +00:00
Mike Auty 88bddbd596 Windows: Clarify separate yara compiled method 2021-03-15 22:56:40 +00:00
ikelosandGitHub c75bef2b05 Merge pull request #477 from dadokkio/develop 
enable support for compiled rules in Yara
 2021-03-15 22:54:55 +00:00
Mike Auty 05ffab9108 Windows: Make generate_mapping externally visible 2021-03-15 22:39:24 +00:00
Mike Auty 0890a96249 Windows: Check strings file before use 
This will cause the strings plugin to exit early if the strings file has
formatting issues.
 2021-03-15 22:16:49 +00:00
Mike Auty 0a7a749667 Documentation: Add text about banners and isfinfo 2021-03-15 11:15:44 +00:00
Mike Auty 95a9effbe3 Windows: Generalize symbol_table_from_pdb 2021-03-14 23:28:00 +00:00
Mike Auty 970d15a82e Documentation: Document volshell 2021-03-14 21:47:53 +00:00
Mike Auty 4e50402f11 Windows: Add additional version info finding method 2021-03-14 20:17:06 +00:00
Mike Auty f41c75775a Windows: Group JSON symbols under directories 2021-03-14 19:24:45 +00:00
Mike Auty 5d77a7ca6b PDB: Don't bump the version unnecessarily 
The version field of the producer should be enough to determine the
difference
 2021-03-13 18:50:29 +00:00
Mike Auty 638d73b822 PDB: Improve pdb parsing 2021-03-13 15:34:02 +00:00
Mike Auty cdf67cad2b Windows: Cache PDB files again 
Unfortunately, opening the file as a layer will cause it to cache anyway
 2021-03-13 01:50:11 +00:00
dadokkio cd3ad1e067 fix config 2021-03-12 13:09:38 +01:00
Arcuri DavideandGitHub 5c8bd3c9d9 enable support for compiled rules 2021-03-12 11:30:04 +01:00
Frank BlockandGitHub 9c1603e372 Added Comment/TODO for transition state issue 
See https://github.com/volatilityfoundation/volatility3/pull/475
 2021-03-11 23:55:37 +01:00
Frank BlockandGitHub 3e04b347cd Added Comment/TODO for transition state issue 
See https://github.com/volatilityfoundation/volatility3/pull/475
 2021-03-11 23:54:03 +01:00
Frank BlockandGitHub 5d55bcfa52 Adjusted bit operation for PFN calculation 2021-03-11 23:33:39 +01:00
Frank BlockandGitHub 085aacc86a Moved new _maxphyaddr to WindowsIntel32e 2021-03-11 23:24:21 +01:00
Mike Auty 5eaa5ef7b2 CLI: Remove unnecessary urllib imports 2021-03-11 15:50:45 +00:00
Frank BlockandGitHub d5f85e9cc6 Temporary workaround for changes in transition PTE 2021-03-11 14:14:33 +01:00
Frank BlockandGitHub 3bb8ddf089 Temporary workaround for changes in transition PTE 2021-03-11 14:11:39 +01:00
Mike Auty a9e91ea19b Objects: Writing an object should return the re-read object 2021-03-07 16:08:36 +00:00
Mike Auty 5e01ab811b CLI: Improve URI handling error for windows 2021-03-07 13:08:48 +00:00
Mike Auty 6a6e2a0e5c CLI: Fix and refactor the URI handling code 2021-03-07 13:03:45 +00:00
Mike Auty 01025c88bb CLI: Fixes windows file path handling 
Closes: #470
 2021-03-07 12:44:15 +00:00
ikelosandGitHub 099042ec3d Merge pull request #471 from chop0/patch-1 
Update copyright notice
 2021-03-07 10:50:41 +00:00
Alec PetridisandGitHub 69d303da8c Update copyright notice 2021-03-06 22:44:19 -08:00
Mike Auty 1b57a899e8 Objects: Encode strings as bytes when writing 2021-03-05 01:16:14 +00:00
Mike Auty 62c1d1df35 Layers: Avoid writing to unwritable physical layers 2021-03-05 01:14:44 +00:00
Mike Auty 963b448d36 Objects: Revert setting attributes to write data 2021-03-05 01:13:34 +00:00
Mike Auty f251a1db15 Windows: Update PDB code to work without cache 2021-03-05 01:10:26 +00:00
Mike Auty bc47073903 CLI: Fix logging issue after root logger change 2021-03-05 00:17:09 +00:00
ikelosandGitHub 3fe8e2d4d9 Merge pull request #469 from volatilityfoundation/feature/improved-object-writing 
Objects: Improve writing of objects
 2021-03-04 23:45:14 +00:00
ikelosandGitHub 9ef972192d Merge pull request #468 from volatilityfoundation/feature/improved-typing 
Core: Improve typing across codebase
 2021-03-04 23:36:42 +00:00
Mike Auty a75ccd72b1 Layers: Restore a loss from a rebase/merge 2021-03-04 23:34:04 +00:00
Mike Auty f51b534792 Merge branch 'feature/better-nonexistant-file-handling' into develop 2021-03-04 23:26:07 +00:00
Mike Auty 2fe7e22bf8 CLI: Tidy up single_location handling 2021-03-04 23:25:53 +00:00
ikelosandGitHub 7613cd7a00 Merge pull request #467 from volatilityfoundation/feature/partial-cache-to-tmpfile-move 
Layers: Allow manual cache control and disable for PDB
 2021-03-04 23:15:56 +00:00
Mike Auty 0c8c52ba32 Layers: Allow manual cache control and disable for PDB 2021-03-04 23:13:44 +00:00
Mike Auty 0b4f49736c Volshell: Fix missing import 2021-03-04 18:48:58 +00:00
ikelosandGitHub 51c3818d71 Merge pull request #461 from volatilityfoundation/feature/regex-trie 
Layers: Improve regex scanning for linux/mac
 2021-03-02 15:54:37 +00:00
Mike Auty 2a41b1eee9 Linux: Make bang_addrs has something to search for 2021-03-02 15:50:21 +00:00
Mike Auty 1d35406ffe CLI: Improve file parameter handling 2021-03-02 15:45:21 +00:00