Abyss Watcher
55cd4d9759
adjust dummy page table check
2026-03-06 14:24:48 +01:00
ikelos and GitHub
ba466f8064
Merge pull request #1948 from Androsh7/1945-set-default-encoding-to-utf8
...
Set default encoding to utf-8
2026-03-02 08:50:23 +00:00
androsh7@gmail.com
5606baf4e6
Added argument to set default encoding to utf-8
2026-03-01 22:14:40 -05:00
ikelos and GitHub
ca83f52f3e
Merge pull request #1941 from volatilityfoundation/issues/issue1940-timerliner-output
...
Timeliner output repeated lines and entries due to how it was constructed
2026-02-26 10:24:57 +00:00
ikelos and GitHub
4762fb5e26
Merge pull request #1942 from volatilityfoundation/issues/issue1875-improve-win11-detection
...
Improve Win11 DTB detection
2026-02-26 10:24:02 +00:00
Mike Auty
e095851ab9
Improve Win11 DTB detection
...
It seems windows 11 has started moving the DTB further afield. This
change adds another region located empirically, so it might need
extending for everything between the second and third regions
potentially. It may also be possible to shrink the third region, but
that will need more example images (it's still not clear what causes
the use of the higher DTB, although the image it was found in was 18Gb).
2026-02-20 18:34:39 +00:00
Mike Auty
81fae3a83b
We weren't breaking between accumulating lines and outputting them
2026-02-19 22:48:03 +00:00
Mike Auty
fd22429b0b
Ubunutu-latest no longer supports 3.9
2026-02-19 20:20:10 +00:00
ikelos and GitHub
c65c2ef43a
Merge pull request #1929 from volatilityfoundation/issues/windows11-dtb
...
Improve windows intel detection for Windows 11
2026-02-19 20:08:42 +00:00
ikelos and GitHub
e8ffe1ddb0
Merge pull request #1937 from volatilityfoundation/issues/issue1373-add-windows-support-to-banners
...
Issues/issue1373 add windows support to banners
2026-02-05 16:07:14 +00:00
Mike Auty
48a5000f78
Make the output of banners match the identifier in isfinfo
2026-01-31 18:03:55 +00:00
Mike Auty
743927d6a2
Make black happy
2026-01-31 18:00:07 +00:00
Mike Auty
1b58e7e25b
Add version to pdb signature scanner and require it for the banners plugin
2026-01-31 17:58:45 +00:00
Mike Auty
881d4e85e8
Add in intial support for locating windows 'banners'
2026-01-31 17:53:30 +00:00
Mike Auty
a52b26e15c
Merge branch 'stable' into develop
2026-01-29 21:54:34 +00:00
ikelos and GitHub
f54c4db6ef
Merge pull request #1935 from volatilityfoundation/release/v2.27.0
...
Release/v2.27.0
2026-01-29 21:28:51 +00:00
Mike Auty
d8485fe460
Add arrow support to pyinstaller build
2026-01-29 21:04:51 +00:00
Mike Auty
6b9a6f84c3
Bump year for copyrights to 2026
2026-01-29 20:39:09 +00:00
ikelos and GitHub
0f95d6e44c
Merge pull request #1932 from kyrre/feature/multitypedata-repr
...
Fix format_hints.MultiTypeData representation in Parquet/Arrow renderers
2026-01-25 14:01:45 +00:00
kyrre
9949565bd8
use pa.bytes instead of pa.utf8 for format_hints.MultiTypeData
2026-01-14 19:55:43 +01:00
Mike Auty
d0ed42456c
Increment the size of the amount scanned, not just the start location
2026-01-08 22:34:32 +00:00
Mike Auty
1abd67746f
Appease black
2026-01-08 22:04:18 +00:00
Mike Auty
9d67420d0e
Improve windows intel detection for Windows 11
2026-01-08 21:59:03 +00:00
Mike Auty
0da666fbba
Reduce code reuse
2026-01-04 14:19:32 +00:00
Mike Auty
b461e77c5e
Rebased version of the fix for issue1255
2026-01-04 14:14:42 +00:00
ikelos and GitHub
ad1da577e0
Merge pull request #1926 from volatilityfoundation/issues/issue1309
...
Avoid trying to lookup child nodes that have been filtered
2026-01-03 13:52:09 +00:00
ikelos and GitHub
ade1cf27d8
Merge pull request #1826 from SolitudePy/linux_procspoof
...
process_spoofing plugin
2025-12-31 21:11:27 +00:00
SolitudePy
e8087dd68d
Plugins: process_spoofing put reference in docstring
2025-12-31 20:23:05 +02:00
SolitudePy
088a64379c
black
2025-12-31 20:13:01 +02:00
SolitudePy
2478c1398e
Plugins: get first argument using utility.address_to_string in process_spoofing
2025-12-31 20:06:50 +02:00
ikelos and GitHub
590b5abe89
Merge pull request #1120 from eve-mem/linux_sockscan
...
Add linux sockscan plugin
2025-12-31 15:54:39 +00:00
eve
94f989be7a
Linux: update sockscan to add docstring to _find_file_ops_needles
2025-12-31 12:54:41 +00:00
eve
66ec4f4372
Linux: update sockstat docstring for _walk_file_ops_needles. Rename physical_memory_layer_name for clarity
2025-12-31 12:49:45 +00:00
eve
6aa552cd03
Fix black formatting in sockscan
2025-12-31 12:25:22 +00:00
f11347739b
Apply suggestions from code review
...
Co-authored-by: ikelos <ikelos@users.noreply.github.com >
2025-12-31 12:22:48 +00:00
c47ab6ba11
Apply suggestion from @ikelos
...
Co-authored-by: ikelos <ikelos@users.noreply.github.com >
2025-12-31 12:21:47 +00:00
55c0b9b0a8
Apply suggestion from @ikelos
...
Co-authored-by: ikelos <ikelos@users.noreply.github.com >
2025-12-31 12:21:32 +00:00
4369935be4
Apply suggestion from @ikelos
...
Co-authored-by: ikelos <ikelos@users.noreply.github.com >
2025-12-31 12:21:19 +00:00
da6a1e5444
Update volatility3/framework/plugins/linux/sockscan.py
...
Co-authored-by: ikelos <ikelos@users.noreply.github.com >
2025-12-31 12:20:57 +00:00
13aa0dd2dc
Update volatility3/framework/plugins/linux/sockscan.py
...
Co-authored-by: ikelos <ikelos@users.noreply.github.com >
2025-12-31 12:20:44 +00:00
35d24d8d17
Update volatility3/framework/plugins/linux/sockscan.py
...
Co-authored-by: ikelos <ikelos@users.noreply.github.com >
2025-12-31 12:20:30 +00:00
4fbd54361a
Update volatility3/framework/plugins/linux/sockscan.py
...
Co-authored-by: ikelos <ikelos@users.noreply.github.com >
2025-12-31 12:20:20 +00:00
3872133f5d
Update volatility3/framework/plugins/linux/sockscan.py
...
Co-authored-by: ikelos <ikelos@users.noreply.github.com >
2025-12-31 12:20:09 +00:00
7ba46943bb
Update volatility3/framework/plugins/linux/sockscan.py
...
Co-authored-by: ikelos <ikelos@users.noreply.github.com >
2025-12-31 12:19:59 +00:00
be11441ef0
Update volatility3/framework/plugins/linux/sockscan.py
...
Co-authored-by: ikelos <ikelos@users.noreply.github.com >
2025-12-31 12:19:50 +00:00
c7510f7e00
Update volatility3/framework/plugins/linux/sockscan.py
...
Co-authored-by: ikelos <ikelos@users.noreply.github.com >
2025-12-31 12:19:37 +00:00
5205d2cee0
Update volatility3/framework/plugins/linux/sockscan.py
...
Co-authored-by: ikelos <ikelos@users.noreply.github.com >
2025-12-31 12:19:08 +00:00
a2e033dfc8
Update volatility3/framework/plugins/linux/sockscan.py
...
Co-authored-by: ikelos <ikelos@users.noreply.github.com >
2025-12-31 12:18:48 +00:00
Eve and GitHub
aabca91e4b
Merge branch 'volatilityfoundation:develop' into linux_sockscan
2025-12-31 11:19:29 +00:00
ikelos and GitHub
a7f96b4b25
Merge pull request #1814 from Abyss-W4tcher/vma_enumeration_smearing_protection
...
Linux: enhance VMA enumeration smearing protection
2025-12-31 01:54:38 +00:00
Abyss Watcher