 ikelosandGitHub
|
718f8ca2b5
|
Update volatility3/framework/plugins/linux/vmayarascan.py
|
2025-05-06 22:41:21 +01:00 |
|
|
ikelosandGitHub
|
65d3ff63bc
|
Merge branch 'develop' into stable
|
2025-05-06 22:37:47 +01:00 |
|
|
Mike Auty
|
ee445d9746
|
Add in workflow_dispatch for pyinstaller action
|
2025-05-06 22:27:03 +01:00 |
|
|
Mike Auty
|
92673be42c
|
Reformat and install volatility package deps before build
|
2025-05-06 22:15:38 +01:00 |
|
|
ikelosandGitHub
|
a7d64ad39d
|
Merge pull request #1796 from volatilityfoundation/release/v2.26.0
Release/v2.26.0
v2.26.0
|
2025-05-06 21:27:58 +01:00 |
|
|
ikelosandGitHub
|
bb65fa31a6
|
Merge branch 'stable' into release/v2.26.0
|
2025-05-06 21:09:27 +01:00 |
|
|
Abyss Watcher
|
2759df89db
|
tag potentially smeared dentry names
|
2025-05-06 00:31:09 +02:00 |
|
|
Abyss Watcher
|
140a16d1dd
|
prevent forward slashes only dentry names
|
2025-05-05 21:44:05 +02:00 |
|
|
Mike Auty
|
5bb4cd90c1
|
Remove no longer needed functools import
|
2025-05-05 13:16:29 +01:00 |
|
|
Mike Auty
|
ae08c8ecfc
|
Support setting the breakpoint on the lowest layer
|
2025-05-05 13:14:19 +01:00 |
|
|
Mike Auty
|
f5ec6dc7dd
|
Add in initial version of breakpointing
|
2025-05-05 12:55:48 +01:00 |
|
|
ikelosandGitHub
|
51f0a3081d
|
Merge pull request #1786 from volatilityfoundation/dgmcdona/handles_interface
Windows Handles: Refactor plugin
|
2025-05-01 17:49:58 +01:00 |
|
|
ikelosandGitHub
|
e22e82dcc2
|
Merge pull request #1787 from JakePeralta7/develop
Detect ETW Patching
|
2025-04-29 12:42:24 +01:00 |
|
|
Elad LeviandGitHub
|
19b094acf6
|
Fix lint errors
|
2025-04-29 14:20:42 +03:00 |
|
|
|
4738efefa3
|
Update volatility3/framework/plugins/windows/etwpatch.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-04-29 13:11:58 +03:00 |
|
|
|
cc1df7b461
|
Update volatility3/framework/plugins/windows/etwpatch.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-04-29 13:11:47 +03:00 |
|
|
|
39b35a3a80
|
Update volatility3/framework/plugins/windows/etwpatch.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-04-29 13:11:35 +03:00 |
|
|
Elad Levi
|
281a237e03
|
black and ruff fixes
|
2025-04-28 16:03:45 +00:00 |
|
|
Elad Levi
|
c5a4b34bfa
|
Fixed plugin docs
|
2025-04-28 15:18:53 +00:00 |
|
|
Elad Levi
|
817bd5ce7f
|
additional fixes
|
2025-04-28 15:07:03 +00:00 |
|
|
Elad Levi
|
c938678272
|
Fixed according to atcuno comments
|
2025-04-28 14:21:24 +00:00 |
|
|
Elad Levi
|
d449104d8b
|
removed unnecessary imports
|
2025-04-28 13:26:14 +00:00 |
|
|
Elad Levi
|
02634d0e30
|
oops
|
2025-04-28 12:54:46 +00:00 |
|
|
Elad Levi
|
533f96ec03
|
Added extended usage of pe_symbols
|
2025-04-28 12:53:46 +00:00 |
|
|
ikelosandGitHub
|
0c08b94547
|
Merge pull request #1793 from eve-mem/issue_1685
cli: add debug log of plugin version when the plugin is successfully constructed
|
2025-04-28 09:10:57 +01:00 |
|
|
eve
|
41142ef621
|
cli: add debug log of plugin version when the plugin is successfully constructed
|
2025-04-28 07:18:47 +01:00 |
|
|
ikelosandGitHub
|
8807e35cab
|
Merge pull request #1792 from volatilityfoundation/issues/update-codeql
Update codeql action from v2 to v3
|
2025-04-27 18:29:41 +01:00 |
|
|
Mike Auty
|
d3da34ce10
|
Update codeql action from v2 to v3
|
2025-04-27 16:18:47 +01:00 |
|
|
Mike Auty
|
f4a2c7aec2
|
Drop pycov requirement by 1 since github can't seem to find the most recent version
|
2025-04-27 15:02:12 +01:00 |
|
|
Mike Auty
|
bc265edcdc
|
Try to slightly loosen the pytest-cov requirement
|
2025-04-27 15:00:09 +01:00 |
|
|
Mike Auty
|
9c7655a635
|
Add in coverage recording to the test process
|
2025-04-27 14:56:17 +01:00 |
|
|
ikelosandGitHub
|
c6e8c0d4e8
|
Merge pull request #1783 from volatilityfoundation/bugfix/shimcache_tracebacks
Windows Shimcachemem: Fix tracebacks
|
2025-04-26 21:33:39 +01:00 |
|
|
ikelosandGitHub
|
577747f22c
|
Merge pull request #1789 from eve-mem/linux_issue_1603
Linux: update extensions used by kallsyms plugin to use utility.pointer_to_string fix issue #1603
|
2025-04-26 20:30:34 +01:00 |
|
|
eve
|
2d80f4680e
|
Linux: update kernel_symbol extensions _do_get_name and _do_get_namespace to use errors='ignore' to match previous implimentation
|
2025-04-25 16:52:48 +01:00 |
|
|
eve
|
2d1acaca51
|
Linux: update extensions used by kallsyms plugin to use utility.pointer_to_string
|
2025-04-25 16:40:06 +01:00 |
|
|
eve
|
7cfc03da5d
|
Linux: update sockscan to use minor version for the requirements this has been tested with
|
2025-04-25 12:13:16 +01:00 |
|
|
eve
|
6f11161bd5
|
Linux: add MultiStringScanner requirement for sockscan
|
2025-04-25 11:59:43 +01:00 |
|
|
eve
|
0d32cac067
|
Linux: fix sockscan use of direct imports of TreeGrid and NotAvailableValue
|
2025-04-25 11:58:29 +01:00 |
|
|
eve
|
ab5dac10d9
|
Linux: fix virtual to physical offsets for sockscan file_ops method
|
2025-04-25 11:54:55 +01:00 |
|
|
Mike Auty
|
b5c98a080a
|
Fix a default value being mutable
|
2025-04-25 11:31:45 +01:00 |
|
|
eve
|
787f3b629a
|
Revert "Linux: sockstat contiuned work to breakdown large generator function"
This reverts commit d532f37454.
|
2025-04-25 11:10:05 +01:00 |
|
|
Elad LeviandGitHub
|
a167ddc04d
|
Update etwpatch.py
|
2025-04-24 20:51:02 +03:00 |
|
|
Elad LeviandGitHub
|
31184afe85
|
Update etwpatch.py
|
2025-04-24 20:48:59 +03:00 |
|
|
Elad LeviandGitHub
|
6ac76b27ff
|
Update etwpatch.py
|
2025-04-24 20:47:08 +03:00 |
|
|
Elad LeviandGitHub
|
e25e23d8cf
|
Create etwpatch.py
|
2025-04-24 20:46:19 +03:00 |
|
|
eve
|
d532f37454
|
Linux: sockstat contiuned work to breakdown large generator function
|
2025-04-24 09:37:39 +01:00 |
|
|
eve
|
704f0f023d
|
Linux: Fix incorrect first parameter name in test_linux_sockscan
|
2025-04-24 09:35:04 +01:00 |
|
|
eve
|
ca584cce74
|
Linux: Update linux sockscan to work with SockHandlers v4.0.0
|
2025-04-24 09:23:21 +01:00 |
|
|
eve
|
e55ab3313f
|
Linux: update tests for sockscan
|
2025-04-24 09:16:23 +01:00 |
|
|
eve
|
1a57a66ce6
|
Linux: update sockstat ruff issue with f-string using no placeholders
|
2025-04-24 09:11:36 +01:00 |
|