Commit Graph
5528 Commits
Author SHA1 Message Date
Donghyun KimandGitHub 5dd0e1a33e Merge branch 'volatilityfoundation:develop' into feature/vadwalk 2022-05-08 20:52:30 +09:00
ikelosandGitHub ea440c1e16 Merge pull request #728 from digitalisx/fix/typo
Fix: typo for documents (`symbol-tables`, `volshell`)
2022-05-08 10:51:01 +01:00
Donghyun Kim 8f369180e4 Fix: typo for documents 2022-05-08 18:33:38 +09:00
Donghyun Kim 000fdd74c8 Fix: change left and right value 2022-05-08 00:44:49 +09:00
Donghyun Kim 0edee3fe25 Add: vadwalk plugin initialize version 2022-05-08 00:35:53 +09:00
ikelosandGitHub f191a32c37 Merge pull request #725 from digitalisx/fix/gitignore
Add: python virtual environments, memory dump on `.gitignore`.
2022-05-07 13:30:18 +01:00
Donghyun Kim 8b6194f8f4 Remove: environment .bak on .gitignore 2022-05-07 18:16:43 +09:00
ikelosandGitHub 683c6d40f6 Merge pull request #726 from digitalisx/fix/typo
Fix: typo for `dlllist` plugin.
2022-05-07 00:25:00 +01:00
Donghyun Kim 16313c5939 Fix: typo for dlllist 2022-05-06 01:18:31 +09:00
Donghyun Kim 6b7d5b63fe Add: venv environments, memory dump for .gitignore 2022-05-06 00:49:03 +09:00
Donghyun KimandGitHub 51dffba82c Merge branch 'volatilityfoundation:develop' into fix/ethread 2022-05-03 15:53:01 +09:00
Mike Auty 14c11b24f6 Symbols: Make _IMAGE_NT_HEADERS optional since not all Windows versions contain it 2022-05-02 14:33:35 +01:00
ikelosandGitHub a7c746a1d3 Merge pull request #714 from paulkermann/feature/minor_improvments
Improving object type_name resolution
2022-05-02 12:26:28 +01:00
Paul Kermann bb1e41f59b remove at_layer 2022-05-02 09:36:50 +03:00
Paul Kermann 8bd7daf28f fix minor improvments 2022-05-02 09:33:41 +03:00
Donghyun Kim aa597505de Merge branch 'fix/ethread' of https://github.com/Digitalisx/volatility3 into fix/ethread 2022-05-02 10:34:13 +09:00
Donghyun Kim 51b9019601 Bump: patch version 2.1.1 2022-05-02 10:34:04 +09:00
Donghyun KimandGitHub d3ed864870 Merge branch 'volatilityfoundation:develop' into fix/ethread 2022-05-02 00:34:42 +09:00
Donghyun Kim 78eb31014b Fix: get owning process method from _ETHREAD 2022-05-02 00:00:33 +09:00
Mike Auty 818002aba4 Codebase: Fix LGTM issues 2022-04-30 15:13:34 +01:00
Gustavo Moreira db9f287cb1 Unrelated to this PR. Removed unused import. 2022-04-30 15:25:55 +10:00
Gustavo Moreira 9b0b2547d5 Manage invalid address exception when reading src and dst addresses 2022-04-30 14:37:51 +10:00
Gustavo Moreira 5f70c7031c Added kernel 'socket' and 'vsock_sock' struct extensions.
This removes hardcoding state in same socket families, taking the information directly from the generic 'socket'.
2022-04-30 14:29:52 +10:00
Gustavo Moreira f919d29c50 Changing properties for getters 2022-04-30 14:14:18 +10:00
Gustavo Moreira 1679769da7 Catch exception when it is unable to get the kernel module name 2022-04-29 12:58:32 +10:00
Gustavo Moreira 37d8328a18 Adding typing information to container_of() 2022-04-29 12:41:11 +10:00
Gustavo Moreira a17d1617f4 Remove author 2022-04-29 12:08:04 +10:00
Gustavo Moreira 333bb090cd Minor. Constants regrouped 2022-04-29 10:21:28 +10:00
Gustavo Moreira b4081a83fd Merge remote-tracking branch 'upstream/develop' into linux_sockstats_plugin 2022-04-29 10:04:54 +10:00
ikelosandGitHub 48c1533e89 Merge pull request #600 from gcmoreira/linux_pslist_pstree_improvements
Linux PSList and PSTree plugins improvements
2022-04-29 00:53:39 +01:00
Gustavo Moreira 7b30d46908 Merge remote-tracking branch 'upstream/develop' into linux_pslist_pstree_improvements 2022-04-29 07:03:44 +10:00
Gustavo Moreira 9aba96a197 Remove unused import module 2022-04-29 06:46:58 +10:00
Gustavo Moreira e1b8a0b5cc container_of() is no longer needed here 2022-04-29 06:42:37 +10:00
Andrew Case 3175e25420 Remove the inheritance from pslist 2022-04-28 16:11:51 +00:00
Andrew Case b43d61ca03 Address feedback from ikelos 2022-04-28 15:42:10 +00:00
Mike Auty 5f87964916 Linux: Make sure the pslist offset column says that it's virtual 2022-04-28 15:41:29 +01:00
ikelosandGitHub f8bdac06a2 Merge pull request #654 from cpuu/develop
Add offset information in pslist plugin for Linux
2022-04-28 15:39:59 +01:00
Gustavo Moreira 192759b5d5 Updated to use the new task::get_threads 2022-04-28 10:17:39 +10:00
Gustavo Moreira 0a3c629782 Updated to use task's is_thread_group_leader function 2022-04-28 10:14:49 +10:00
Gustavo Moreira ed5d373771 Merge remote-tracking branch 'upstream/develop' into linux_pslist_pstree_improvements 2022-04-28 09:49:17 +10:00
ikelosandGitHub 8ac2b6ac89 Merge pull request #722 from digitalisx/patch-1
Fix typo for `API_CHANGES`
2022-04-28 00:34:27 +01:00
Donghyun KimandGitHub a236bdd600 Fix typo for API_CHANGES.md 2022-04-28 08:26:52 +09:00
Gustavo Moreira 73a42577d7 VERSION_PATCH has to be reset after VERSION_MINOR was increased. 2022-04-28 09:24:19 +10:00
Mike Auty 0dc0b8ca40 Core: Bump the API correctly for an addition (to 2.1.0) 2022-04-28 00:12:41 +01:00
Gustavo Moreira b18d6cc037 Merge branch 'mountinfo' of https://github.com/gcmoreira/volatility3 into mountinfo 2022-04-28 08:58:26 +10:00
Gustavo Moreira c6fbb9ce14 Restoring framework minor version to meet the mountinfo plugin see f23b288ffc 2022-04-28 08:58:05 +10:00
gcmoreiraandGitHub 5cc110417c Merge branch 'volatilityfoundation:develop' into mountinfo 2022-04-28 08:52:49 +10:00
Gustavo Moreira e5494ce8c9 Temporarely setting interface minor version to zero to allow to merge the upstream latest changes 2022-04-28 08:52:25 +10:00
Gustavo Moreira a59de1b918 Updated to resolve merge conflict 2022-04-28 08:13:24 +10:00
Gustavo Moreira 5679135f1a The exception message is not accurate
In the hypothetical case that the framework has a lower version than the module requirement, the message would be, for instance:
'Framework interface version 2 is an older revision than the required version 2.2'
instead of:
'Framework interface version 2.1 is an older revision than the required version 2.2'

See https://github.com/volatilityfoundation/volatility3/pull/593#discussion_r769238045
2022-04-28 08:12:06 +10:00