comet and ikelos
beed68b8bf
update
2020-01-27 23:31:05 +00:00
Mike Auty
acc74af06f
pdbparse-to-json: Fix missing HRESULT type.
2019-10-31 23:04:37 +00:00
Mike Auty
72567e1c50
Yapf-0.28.0 rerun across the whole codebase.
2019-09-21 21:08:23 +01:00
Mike Auty
39fa9057ff
Remove errant scan_kernel from svcscan for rekall.
2019-08-11 23:32:34 +01:00
Mike Auty
75f386784a
Clean up development directory.
2019-08-11 17:33:53 +01:00
Mike Auty
0b71c1130f
Add in the image-hash to make results easier to match up.
2019-08-11 17:19:59 +01:00
Mike Auty
40d04ed1ff
Improve comparison titles, store stderr and output up until timeout.
2019-08-11 11:33:42 +01:00
Mike Auty
cdc19ad5fa
Add in 5 minute timeout for comparison tests.
2019-08-10 18:58:47 +01:00
Mike Auty
6f7dc1a75e
Add in the scan_kernel parameter for rekall to offer a fair comparison.
2019-08-08 23:20:59 +01:00
Mike Auty
6c23968a11
Add in support for choosing specific frameworks to test.
2019-08-06 13:32:03 +01:00
Mike Auty
f8587a08f2
Refactor and add support for testing rekall.
2019-08-05 01:20:24 +01:00
Mike Auty
d1227220b5
Add in additional plugins and pypy support.
2019-07-22 23:49:43 +01:00
Mike Auty
8e6cba022b
Add in more debugging information to the schema validator development script.
2019-07-10 14:09:59 +01:00
Mike Auty
272224a1b0
Refactor all references to Context.memory to Context.layers.
2019-07-07 17:42:51 +01:00
Mike Auty
84a1307c93
More minor typing fixes.
2019-05-11 23:10:39 +01:00
Mike Auty
4cfde031f6
Additional typing fixes.
2019-05-11 22:57:06 +01:00
Mike Auty
db480bb1b8
Fix up minor typing issue.
2019-05-05 16:00:26 +01:00
Mike Auty
573dd88885
Add some typing information and better error checking in pdbconv.
2019-05-05 15:51:47 +01:00
Mike Auty
287ed2be94
Fix up the logging messages.
2019-04-28 14:00:36 +01:00
Mike Auty
d89ade4e02
Remove requests dependency.
...
It turns out the MS servers don't require a specific header anymore, so
we can use the built in urllib.
2019-04-28 13:56:54 +01:00
Mike Auty
4959bb93b1
Don't write empty temporary files when there's a 404.
2019-04-27 22:50:02 +01:00
Mike Auty
5d380d666f
Make sure we convert names for pointers.
2019-04-27 22:25:41 +01:00
Mike Auty
08e22e9bee
Fix up some terrible code where we caught all exceptions.
2019-04-27 22:19:55 +01:00
Mike Auty
a99a40b691
Use base-types to define pointer types.
2019-04-27 22:16:03 +01:00
Mike Auty
67d0c18e8a
Add in missing types to pdbconv.
2019-04-27 22:09:50 +01:00
Mike Auty
ca46f090c2
Fix up pdbparse GUID parsing to use Bytes.
2019-04-27 22:02:02 +01:00
Mike Auty
470d3906dc
Improve PDB parsing to include symbol undecoration.
2019-04-27 21:05:55 +01:00
Mike Auty
60144c44d3
Add in base-type generation for pdbconv.py.
2019-04-23 22:28:29 +01:00
Mike Auty
93ddb9596b
Add in base-type generator.
2019-04-23 21:37:51 +01:00
Mike Auty
c229cf4db2
Fix schema issues with pdbconv and a couple small issues.
2019-04-23 00:15:49 +01:00
Mike Auty
a1f7d1a1de
Add in missing import.
2019-04-22 23:29:25 +01:00
Mike Auty
717f67fd1a
Clean up after downloading a PDB and support additional determining of size.
2019-04-22 21:09:17 +01:00
Mike Auty
d9d3a29b08
Remove llvm2json since pdbconv now exists.
2019-04-22 20:50:36 +01:00
Mike Auty
c07c4f5625
Add in pdb retreival and argparse support.
2019-04-22 20:49:30 +01:00
Mike Auty
75fb8aa301
Add in GUID production to pdbconv.
2019-04-22 14:41:08 +01:00
Mike Auty
81d5fdd58d
Add in some missing types.
2019-04-22 13:51:23 +01:00
Mike Auty
1f0947d7e1
Add in pdbconv script to completely generate the JSON from a PDB file using pdbparse.
2019-04-22 01:45:00 +01:00
Mike Auty
f1bbba1048
Make the comparison output quiet and ignore the volatility script name.
2019-03-15 14:43:15 +00:00
Mike Auty
d15dd469b5
Add in a volatility3 vs volatility2 test-rig.
2019-03-10 12:35:33 +00:00
Mike Auty
784336bb6e
Add in mac KDK generate_json script.
2019-03-03 01:12:07 +00:00
Mike Auty
1e9205a75f
Add in mac KDK dmg kernel extraction script.
2019-03-01 01:40:19 +00:00
Mike Auty
26ae324050
Add in attempt at name demangling for symbols.
2019-02-27 11:26:24 +00:00
Mike Auty
d8413efc1d
Add in further ignoring of the 0xf7 unicode character.
2019-02-25 22:51:41 +00:00
Mike Auty
4c2a29ae01
Convert to ruamel.yaml and allow \x7f characters, since llvm sometimes outputs them.
2019-01-27 18:20:59 +00:00
Mike Auty
35451e3514
Initial attempt at supporting symbols from llvm-8.
2019-01-25 01:35:36 +00:00
Mike Auty
43cc7b836c
Fix small typo in llvm2json utility.
2019-01-25 01:35:00 +00:00
Mike Auty
db63b2b345
Add support for directly running llvm-pdbutil.
2019-01-21 01:24:16 +00:00
Mike Auty
2080d5625f
Update llvm2json with metadata and a command line parser.
2019-01-21 01:15:40 +00:00
Mike Auty
1071dca087
Add in a rudimentary (read ugly) convertor for llvm pdb2yaml files.
...
This will need some help from @npetroni in places, but produces
close-to-identical JSON files for pdbs.
It does not yet produce metadata, base_types, or any symbols (since
they aren't exported by llvm-pdbutil's pdb2yaml) or base_types.
Ideally all of those can be fixed over time, but the symbols will
require changing llvm. 5:(
2019-01-20 00:10:06 +00:00
Mike Auty
e65a00894a
Minor style tweaks and mass changes across the codebase because of it.
2018-12-17 12:46:14 +00:00
