ac74de694a
Update volatility3/framework/layers/registry.py
...
Co-authored-by: ikelos <ikelos@users.noreply.github.com >
2025-03-11 09:46:10 -05:00
Dave Lassalle
d148d8f9d8
#1446 - black fixes
2025-03-11 09:31:54 -05:00
Dave Lassalle
cbab1d1f49
#1446 - pid is objects.Pointer, not int
2025-03-11 09:30:38 -05:00
ikelos and GitHub
1639ae2396
Merge pull request #1704 from volatilityfoundation/remove_module_creation_at_offset_zero
...
No longer allocate session modules in support of the GUI objects at o…
2025-03-10 23:30:36 +00:00
ikelos and GitHub
398578aff6
Merge pull request #1703 from volatilityfoundation/update_gui_pool_types
...
Allow desktops and window stations to come from the paged or non-page…
2025-03-10 22:39:56 +00:00
Andrew Case
740ce520d6
retrigger checks
2025-03-10 22:13:09 +00:00
Andrew Case
c1b4866ba7
retrigger checks
2025-03-10 21:36:54 +00:00
Andrew Case
f17907200d
No longer allocate session modules in support of the GUI objects at offset 0. Instantiate objects at the absolute address explicility.
2025-03-10 21:26:58 +00:00
Andrew Case
7d5d379144
Allow desktops and window stations to come from the paged or non-paged pool
2025-03-10 21:24:55 +00:00
Dave Lassalle
4b74de4104
#1645 - duplicate list_processes code
2025-03-10 15:32:13 -05:00
ikelos and GitHub
f69bdfad07
Merge pull request #1686 from volatilityfoundation/fix_fbdev
...
Update fbdev plugin to gracefully handle old/broken symbol tables
2025-03-10 19:47:13 +00:00
ikelos and GitHub
6ac7c1edb1
Merge pull request #1656 from volatilityfoundation/fix_linux_networking_paths
...
Fix broken code and APIs in Linux networking paths
2025-03-10 19:44:39 +00:00
ikelos and GitHub
831eea5daa
Merge pull request #1696 from volatilityfoundation/fix_symbol_table_api
...
Fix symbol table PDB API that mixes returns, None values, and exceptions
2025-03-10 19:37:50 +00:00
ikelos and GitHub
1c5fdccf1e
Merge pull request #1673 from volatilityfoundation/linux_kernel_api_overhaul
...
Merge two Linux APIs for mapping kernel modules to pointers. Fix bugs…
2025-03-10 19:36:56 +00:00
Dave Lassalle
9b23feef2b
#1476 - ruff fixes
2025-03-10 14:17:24 -05:00
Dave Lassalle
f52a857aa0
#1476 - code cleanup
2025-03-10 14:10:59 -05:00
e0168c7bec
Potential fix for code scanning alert no. 374: Testing equality to None
...
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2025-03-10 14:03:45 -05:00
6061270816
Potential fix for code scanning alert no. 381: Unused import
...
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2025-03-10 14:03:34 -05:00
Dave Lassalle
e1c88f065b
#1476 - black fixes
2025-03-10 13:57:14 -05:00
Dave Lassalle
a41721277d
#1476 - merge develop
2025-03-10 13:56:08 -05:00
Dave Lassalle
8b302ff7fc
#1476 - additional exception handling for registry plugins
2025-03-10 13:39:00 -05:00
Andrew Case
6c96ffacdd
Update fbdev plugin to gracefully handle old/broken symbol tables
2025-03-10 16:38:30 +00:00
Andrew Case
2d4e0f66d8
Update fbdev plugin to gracefully handle old/broken symbol tables
2025-03-10 16:38:30 +00:00
Andrew Case
f7f8cf24cd
Address feedback
2025-03-10 16:36:53 +00:00
Andrew Case
dad88965e9
Fix broken code and APIs in Linux networking paths
2025-03-10 16:30:16 +00:00
Andrew Case
897069c6d0
Throw more specific exception
2025-03-10 16:27:49 +00:00
Andrew Case
2a99a53784
Make exception throwing consistent in the PDB gathering API. Avoid returning an empty symbol_table name when the PDB cannot be downloaded.
2025-03-10 16:23:00 +00:00
Andrew Case
a4bbdfdded
Make exception throwing consistent in the PDB gathering API. Avoid returning an empty symbol_table name when the PDB cannot be downloaded.
2025-03-10 16:23:00 +00:00
Andrew Case
9e4fdbf8ef
Address feedback
2025-03-10 16:21:56 +00:00
ikelos and GitHub
d3799022ef
Merge pull request #1698 from DT9/patch-1
...
README: Modern shell / Python3 Fix for local installation
2025-03-10 10:15:06 +00:00
ikelos and GitHub
083974d755
Merge pull request #1697 from volatilityfoundation/stabilize_poolscanning_symbol_tables
...
Ensure that new symbol tables are only created when needed. Avoid nam…
2025-03-10 09:26:17 +00:00
D and GitHub
66df9f2066
Modern shell / Python3 Fix
2025-03-10 15:57:29 +09:00
Andrew Case
b8c0b1eaa8
Add missing files
2025-03-10 03:39:57 +00:00
Andrew Case
7289f7dc70
Ensure that new symbol tables are only created when needed. Avoid name collisions leading to inconsistent behaviour. Make API for symbol table acquisition sane.
2025-03-10 03:27:56 +00:00
Andrew Case and David McDonald
3eae04c1e8
Add removal_date to deprecation API
2025-03-09 22:23:33 -05:00
Andrew Case and David McDonald
6cabb0586b
Add removal_date to deprecation API
2025-03-09 22:23:33 -05:00
Andrew Case and David McDonald
4a87bf506a
Add new deprecation module
2025-03-09 22:23:33 -05:00
Andrew Case and David McDonald
b68b4f3e72
Bring back change after merge conflict
2025-03-09 22:23:33 -05:00
Andrew Case and David McDonald
6a32aa4b6a
Deprecation API updates
2025-03-09 22:23:33 -05:00
ikelos and David McDonald
00678fbf19
Update volatility3/framework/plugins/linux/hidden_modules.py
...
Ensure black doesn't complain
2025-03-09 22:23:33 -05:00
636bb10f9f
Update volatility3/framework/plugins/linux/hidden_modules.py
...
Co-authored-by: ikelos <ikelos@users.noreply.github.com >
2025-03-09 22:23:33 -05:00
Andrew Case and David McDonald
2ead4d3dc6
update for black
2025-03-09 22:23:33 -05:00
Andrew Case and David McDonald
bdc3443c13
Merge two Linux APIs for mapping kernel modules to pointers. Fix bugs in new API. Add deprecation warnings throughout old API.
2025-03-09 22:23:33 -05:00
ikelos and GitHub
b99918c423
Merge pull request #1694 from j-t-1/comment
...
Remove comment
2025-03-09 13:07:49 +00:00
ikelos and GitHub
f008edbb33
Merge pull request #1695 from j-t-1/capstone
...
Remove duplicate reference of capstone
2025-03-09 12:45:52 +00:00
j-t-1 and GitHub
2074b8fb23
Remove duplicate reference of capstone
...
The capstone dependency under test is not needed, because test references volatility3[dev] which references volatility3[full,cloud], and full has the capstone dependency.
2025-03-09 10:47:51 +00:00
j-t-1 and GitHub
2e56787bf2
Remove comment
...
These mypy issues are now closed.
2025-03-09 09:21:20 +00:00
j-t-1 and GitHub
5b088561db
Remove comment and handling of an empty pid_list
...
These mypy issues are now closed.
2025-03-09 08:55:15 +00:00
ikelos and GitHub
78794aaad8
Merge pull request #1693 from volatilityfoundation/fix_handles_api
...
Fix handles API and callers. Bump version number and requirements
2025-03-08 23:41:51 +00:00
Andrew Case
9919c1e614
Fix handles API and callers. Bump version number and requirements
2025-03-08 22:49:16 +00:00