WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-13 21:27:39 +02:00
Code Issues Packages Projects Releases Wiki Activity
5,528 Commits 80 Branches 17 Tags
development/plugin_module_stubs
Commit Graph
5528 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
ikelosandGitHub 130d1188e8 Merge pull request #1307 from dgmcdona/dgmcdona/windows-scheduled-tasks 
Windows: Adds scheduled tasks plugin
 2024-11-06 22:58:25 +00:00
Gustavo MoreiraandGitHub f05a1691b6 Merge branch 'develop' into linux_boottime_support 2024-11-05 06:05:50 -03:00
Gustavo Moreira c0fa2cfcd6 Linux: Boottime API: User linux_constanst import 2024-11-05 20:02:55 +11:00
Gustavo Moreira 2efb4e7d28 Merge branch 'develop' into linux_boottime_support 2024-11-05 19:56:15 +11:00
Gustavo Moreira 6610779e5c linux: VMCoreInfo: Remove debug comment 2024-11-04 19:30:30 +11:00
Gustavo Moreira b4b7834276 linux: K/ASLR via VMCoreInfo 2024-11-04 17:47:57 +11:00
Gustavo Moreira 512c1abe80 linux: VMCoreInfo plugin: Add VMCoreInfo API and its respective plugin 2024-11-04 17:45:56 +11:00
Abyss Watcher b209ea36a2 remove slashes in columns 2024-11-01 15:12:52 +01:00
Abyss Watcher 9d08c4681a add module offset to seen_addresses 2024-11-01 15:07:23 +01:00
Abyss Watcher 9440f53429 use a dict of dataclasses for taint_flags 2024-11-01 15:05:25 +01:00
Abyss Watcher c88ebe8927 introduce modxview linux plugin 2024-10-31 12:35:54 +01:00
Abyss Watcher e1b343a284 add module taints parsing apis 2024-10-31 12:33:54 +01:00
Abyss Watcher d5a0b93383 add TAINT_FLAGS constant 2024-10-31 12:28:40 +01:00
ikelosandGitHub a00a59cd23 Merge pull request #1329 from gcmoreira/linux_fix_merge_hidden_modules 
linux: hidden_modules: Fix mess with merge #1283
 2024-10-30 22:17:59 +00:00
Gustavo Moreira e183f81de6 linux: hidden_modules: Fix mess with merge #1283 2024-10-31 08:28:07 +11:00
ikelosandGitHub 0ee0f4488e Merge pull request #1283 from gcmoreira/linux_hidden_modules 
Add linux hidden_modules plugin
 2024-10-30 20:46:36 +00:00
Gustavo Moreira 4f86b3f1c0 Merge branch 'develop' into linux_hidden_modules 2024-10-31 07:26:11 +11:00
ikelosandGitHub 73f8ddbf47 Merge pull request #1328 from gcmoreira/linux_module_mod_mem_type_cache 
Linux refactory module extension object mod_mem_type cache
 2024-10-30 15:32:55 +00:00
ikelosandGitHub efe1e1e579 Merge pull request #1326 from gcmoreira/linux_pagecache_fix_typing 
Linux: PageCache API: Fix typing
 2024-10-30 15:31:24 +00:00
ikelosandGitHub 6414c66804 Merge pull request #1327 from gcmoreira/linux_vfsmount_fix_type_comparison 
Linux: vfsmount type: Fix type comparison
 2024-10-30 15:30:43 +00:00
Gustavo Moreira b098596687 Linux: module extension object: Add type annotation to the mod_mem_type property 2024-10-30 19:50:13 +11:00
Gustavo Moreira aecf8d4327 Linux: module extension object: Refactor to replace custom property cache with functools.cached_property that's available from Python 3.8 2024-10-30 18:53:20 +11:00
Gustavo Moreira 84a2233d04 Linux: vfsmount type: Fix type comparison 2024-10-30 16:25:28 +11:00
Gustavo Moreira cf94b078cd Linux: PageCache API: Fix typing 2024-10-30 16:11:03 +11:00
Gustavo Moreira a05397e8b6 Linux: Boottime API: Minor. Fix docstring typo 2024-10-30 15:57:00 +11:00
Gustavo Moreira e197fbaf5f Linux: Boottime API: Refactor __sub__ to operate through __add__() and negate() for improved clarity and reuse 2024-10-30 15:39:40 +11:00
Gustavo Moreira 7abe92cf2f Linux: Boottime API: Minor. Move negate() up 2024-10-30 15:36:46 +11:00
Gustavo Moreira 42d918c05d Linux: Boottime API: Refactor Timespec Methods. 
Move TimespecVol3 methods to an abstract class Timespec64Abstract, which is now inherited by Timespec64 and Timespec64Concrete.
 2024-10-30 15:21:13 +11:00
Gustavo Moreira 722ccd527e Linux: Extensions: Clean up the Linux constants imports in the object extension file 2024-10-30 12:56:09 +11:00
Gustavo Moreira 4b76b699ad Linux: hidden_modules: Add docstrings and comments to enhance the documentation of the module verification process. Move the hardcoded values to the linux constants file. 2024-10-30 09:56:05 +11:00
Gustavo Moreira f537c4a7e0 Merge branch 'develop' into linux_hidden_modules 2024-10-30 09:24:51 +11:00
Gustavo Moreira 8960bdab08 Linux: hidden_modules: Add a symbol table check for a recent dwarf2json version 2024-10-29 17:33:06 +11:00
Gustavo Moreira 1c6a548017 Linux: hidden_modules: Simplify symbols type checks 2024-10-29 17:30:47 +11:00
Gustavo Moreira dfd8a1f195 Linux: hidden_modules: Include kernel version and commit details 2024-10-29 17:22:48 +11:00
Gustavo Moreira cbe071ff3e Linux: hidden_modules: Import the whole architectures module 2024-10-29 17:19:30 +11:00
Gustavo Moreira 526007f948 Linux: hidden_modules: Use child_template 2024-10-29 16:41:47 +11:00
Gustavo Moreira bee2a398eb Linux: Minor: Add comment/header on each set of constants 2024-10-29 15:13:26 +11:00
Gustavo Moreira bb6dc9a595 Merge branch 'develop' into linux_boottime_support 2024-10-29 14:41:51 +11:00
Gustavo Moreira 57ffd5b939 Linux: Boottime API: Refactor TimespecVol3::negate() to return a new object instead of modifying the original. It also normalizes its values, aligning with the behavior of the other addition and subtraction operators 2024-10-29 14:24:16 +11:00
Gustavo Moreira c4274c942c Linux: Fix exception message in TimespecVol3::__sub__() 2024-10-29 13:49:58 +11:00
Gustavo Moreira 4895af47bd Linux: Boottime timeliner: Rollback timeliner event type changes and use the created time for the boot time plugin 2024-10-29 13:46:19 +11:00
Gustavo Moreira 094cdf18f1 Linux: netfilter plugin: Fix hooked field to match vol2 output 2024-10-29 10:59:18 +11:00
David McDonald efdbc27b95 Windows: Scheduled tasks - removes special time type 
Removes the TaskSchedulerTime dataclass and discards the
is_localized value parsed with the timestamp.
 2024-10-25 14:15:06 -05:00
David McDonald 0413cc5e26 Windows: Scheduled tasks - code review fixes 2024-10-25 12:56:18 -05:00
ikelosandGitHub a1961401d5 Merge pull request #1320 from dgmcdona/dgmcdona/linux_pagecache_missing_iter_implementation 
Linux: Extensions - removes abc.Iterable definition
 2024-10-25 00:35:24 +01:00
David McDonald 4c2d2f98da Removes collections.abc.Iterable superclass 
Per @gcmoreira this is the correct fix vs the one previously proposed,
since self.vol.member_name cannot be used as the member name to
iterate this type.
 2024-10-24 15:39:15 -05:00
David McDonald 388a3e6458 Linux: Adds missing abc.Iterable implementation 
`hlist_head` is missing an implementation for
`collections.abc.Iterable`, resulting in a crash at runtime. This fixes
the issue by providing the required `__iter__` implementation for
`hlist_head`.
 2024-10-24 14:39:22 -05:00
ikelosandGitHub 62aa9c1e12 Merge pull request #1318 from Abyss-W4tcher/use_volshell_additional_locals 
Allow to import external locals in volshell environment
 2024-10-24 00:05:32 +01:00
Abyss Watcher 7f2d8eabb7 set correct locals priority 2024-10-23 21:39:57 +02:00
Abyss Watcher 708d933021 use additional_locals in run method 2024-10-23 21:23:14 +02:00