Donghyun Kim and GitHub
5dd0e1a33e
Merge branch 'volatilityfoundation:develop' into feature/vadwalk
2022-05-08 20:52:30 +09:00
ikelos and GitHub
ea440c1e16
Merge pull request #728 from digitalisx/fix/typo
...
Fix: typo for documents (`symbol-tables`, `volshell`)
2022-05-08 10:51:01 +01:00
Donghyun Kim
8f369180e4
Fix: typo for documents
2022-05-08 18:33:38 +09:00
Donghyun Kim
000fdd74c8
Fix: change left and right value
2022-05-08 00:44:49 +09:00
Donghyun Kim
0edee3fe25
Add: vadwalk plugin initialize version
2022-05-08 00:35:53 +09:00
ikelos and GitHub
f191a32c37
Merge pull request #725 from digitalisx/fix/gitignore
...
Add: python virtual environments, memory dump on `.gitignore`.
2022-05-07 13:30:18 +01:00
Donghyun Kim
8b6194f8f4
Remove: environment .bak on .gitignore
2022-05-07 18:16:43 +09:00
ikelos and GitHub
683c6d40f6
Merge pull request #726 from digitalisx/fix/typo
...
Fix: typo for `dlllist` plugin.
2022-05-07 00:25:00 +01:00
Donghyun Kim
16313c5939
Fix: typo for dlllist
2022-05-06 01:18:31 +09:00
Donghyun Kim
6b7d5b63fe
Add: venv environments, memory dump for .gitignore
2022-05-06 00:49:03 +09:00
Donghyun Kim and GitHub
51dffba82c
Merge branch 'volatilityfoundation:develop' into fix/ethread
2022-05-03 15:53:01 +09:00
Mike Auty
14c11b24f6
Symbols: Make _IMAGE_NT_HEADERS optional since not all Windows versions contain it
2022-05-02 14:33:35 +01:00
ikelos and GitHub
a7c746a1d3
Merge pull request #714 from paulkermann/feature/minor_improvments
...
Improving object type_name resolution
2022-05-02 12:26:28 +01:00
Paul Kermann
bb1e41f59b
remove at_layer
2022-05-02 09:36:50 +03:00
Paul Kermann
8bd7daf28f
fix minor improvments
2022-05-02 09:33:41 +03:00
Donghyun Kim
aa597505de
Merge branch 'fix/ethread' of https://github.com/Digitalisx/volatility3 into fix/ethread
2022-05-02 10:34:13 +09:00
Donghyun Kim
51b9019601
Bump: patch version 2.1.1
2022-05-02 10:34:04 +09:00
Donghyun Kim and GitHub
d3ed864870
Merge branch 'volatilityfoundation:develop' into fix/ethread
2022-05-02 00:34:42 +09:00
Donghyun Kim
78eb31014b
Fix: get owning process method from _ETHREAD
2022-05-02 00:00:33 +09:00
Mike Auty
818002aba4
Codebase: Fix LGTM issues
2022-04-30 15:13:34 +01:00
Gustavo Moreira
db9f287cb1
Unrelated to this PR. Removed unused import.
2022-04-30 15:25:55 +10:00
Gustavo Moreira
9b0b2547d5
Manage invalid address exception when reading src and dst addresses
2022-04-30 14:37:51 +10:00
Gustavo Moreira
5f70c7031c
Added kernel 'socket' and 'vsock_sock' struct extensions.
...
This removes hardcoding state in same socket families, taking the information directly from the generic 'socket'.
2022-04-30 14:29:52 +10:00
Gustavo Moreira
f919d29c50
Changing properties for getters
2022-04-30 14:14:18 +10:00
Gustavo Moreira
1679769da7
Catch exception when it is unable to get the kernel module name
2022-04-29 12:58:32 +10:00
Gustavo Moreira
37d8328a18
Adding typing information to container_of()
2022-04-29 12:41:11 +10:00
Gustavo Moreira
a17d1617f4
Remove author
2022-04-29 12:08:04 +10:00
Gustavo Moreira
333bb090cd
Minor. Constants regrouped
2022-04-29 10:21:28 +10:00
Gustavo Moreira
b4081a83fd
Merge remote-tracking branch 'upstream/develop' into linux_sockstats_plugin
2022-04-29 10:04:54 +10:00
ikelos and GitHub
48c1533e89
Merge pull request #600 from gcmoreira/linux_pslist_pstree_improvements
...
Linux PSList and PSTree plugins improvements
2022-04-29 00:53:39 +01:00
Gustavo Moreira
7b30d46908
Merge remote-tracking branch 'upstream/develop' into linux_pslist_pstree_improvements
2022-04-29 07:03:44 +10:00
Gustavo Moreira
9aba96a197
Remove unused import module
2022-04-29 06:46:58 +10:00
Gustavo Moreira
e1b8a0b5cc
container_of() is no longer needed here
2022-04-29 06:42:37 +10:00
Andrew Case
3175e25420
Remove the inheritance from pslist
2022-04-28 16:11:51 +00:00
Andrew Case
b43d61ca03
Address feedback from ikelos
2022-04-28 15:42:10 +00:00
Mike Auty
5f87964916
Linux: Make sure the pslist offset column says that it's virtual
2022-04-28 15:41:29 +01:00
ikelos and GitHub
f8bdac06a2
Merge pull request #654 from cpuu/develop
...
Add offset information in pslist plugin for Linux
2022-04-28 15:39:59 +01:00
Gustavo Moreira
192759b5d5
Updated to use the new task::get_threads
2022-04-28 10:17:39 +10:00
Gustavo Moreira
0a3c629782
Updated to use task's is_thread_group_leader function
2022-04-28 10:14:49 +10:00
Gustavo Moreira
ed5d373771
Merge remote-tracking branch 'upstream/develop' into linux_pslist_pstree_improvements
2022-04-28 09:49:17 +10:00
ikelos and GitHub
8ac2b6ac89
Merge pull request #722 from digitalisx/patch-1
...
Fix typo for `API_CHANGES`
2022-04-28 00:34:27 +01:00
Donghyun Kim and GitHub
a236bdd600
Fix typo for API_CHANGES.md
2022-04-28 08:26:52 +09:00
Gustavo Moreira
73a42577d7
VERSION_PATCH has to be reset after VERSION_MINOR was increased.
2022-04-28 09:24:19 +10:00
Mike Auty
0dc0b8ca40
Core: Bump the API correctly for an addition (to 2.1.0)
2022-04-28 00:12:41 +01:00
Gustavo Moreira
b18d6cc037
Merge branch 'mountinfo' of https://github.com/gcmoreira/volatility3 into mountinfo
2022-04-28 08:58:26 +10:00
Gustavo Moreira
c6fbb9ce14
Restoring framework minor version to meet the mountinfo plugin see f23b288ffc
2022-04-28 08:58:05 +10:00
gcmoreira and GitHub
5cc110417c
Merge branch 'volatilityfoundation:develop' into mountinfo
2022-04-28 08:52:49 +10:00
Gustavo Moreira
e5494ce8c9
Temporarely setting interface minor version to zero to allow to merge the upstream latest changes
2022-04-28 08:52:25 +10:00
Gustavo Moreira
a59de1b918
Updated to resolve merge conflict
2022-04-28 08:13:24 +10:00
Gustavo Moreira
5679135f1a
The exception message is not accurate
...
In the hypothetical case that the framework has a lower version than the module requirement, the message would be, for instance:
'Framework interface version 2 is an older revision than the required version 2.2'
instead of:
'Framework interface version 2.1 is an older revision than the required version 2.2'
See https://github.com/volatilityfoundation/volatility3/pull/593#discussion_r769238045
2022-04-28 08:12:06 +10:00