WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-08-21 05:52:22 +02:00
Code Issues Packages Projects Releases Wiki Activity
2,717 Commits 80 Branches 17 Tags
feature/writecrashdump-plugin
Commit Graph
2717 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Mike Auty 14a902a384 Plugins: Initial protype crashdump writer 2021-03-07 13:21:36 +00:00
Mike Auty 5e01ab811b CLI: Improve URI handling error for windows 2021-03-07 13:08:48 +00:00
Mike Auty 6a6e2a0e5c CLI: Fix and refactor the URI handling code 2021-03-07 13:03:45 +00:00
Mike Auty 01025c88bb CLI: Fixes windows file path handling 
Closes: #470
 2021-03-07 12:44:15 +00:00
ikelosandGitHub 099042ec3d Merge pull request #471 from chop0/patch-1 
Update copyright notice
 2021-03-07 10:50:41 +00:00
Alec PetridisandGitHub 69d303da8c Update copyright notice 2021-03-06 22:44:19 -08:00
Mike Auty 1b57a899e8 Objects: Encode strings as bytes when writing 2021-03-05 01:16:14 +00:00
Mike Auty 62c1d1df35 Layers: Avoid writing to unwritable physical layers 2021-03-05 01:14:44 +00:00
Mike Auty 963b448d36 Objects: Revert setting attributes to write data 2021-03-05 01:13:34 +00:00
Mike Auty f251a1db15 Windows: Update PDB code to work without cache 2021-03-05 01:10:26 +00:00
Mike Auty bc47073903 CLI: Fix logging issue after root logger change 2021-03-05 00:17:09 +00:00
ikelosandGitHub 3fe8e2d4d9 Merge pull request #469 from volatilityfoundation/feature/improved-object-writing 
Objects: Improve writing of objects
 2021-03-04 23:45:14 +00:00
ikelosandGitHub 9ef972192d Merge pull request #468 from volatilityfoundation/feature/improved-typing 
Core: Improve typing across codebase
 2021-03-04 23:36:42 +00:00
Mike Auty a75ccd72b1 Layers: Restore a loss from a rebase/merge 2021-03-04 23:34:04 +00:00
Mike Auty f51b534792 Merge branch 'feature/better-nonexistant-file-handling' into develop 2021-03-04 23:26:07 +00:00
Mike Auty 2fe7e22bf8 CLI: Tidy up single_location handling 2021-03-04 23:25:53 +00:00
ikelosandGitHub 7613cd7a00 Merge pull request #467 from volatilityfoundation/feature/partial-cache-to-tmpfile-move 
Layers: Allow manual cache control and disable for PDB
 2021-03-04 23:15:56 +00:00
Mike Auty 0c8c52ba32 Layers: Allow manual cache control and disable for PDB 2021-03-04 23:13:44 +00:00
Mike Auty 0b4f49736c Volshell: Fix missing import 2021-03-04 18:48:58 +00:00
ikelosandGitHub 51c3818d71 Merge pull request #461 from volatilityfoundation/feature/regex-trie 
Layers: Improve regex scanning for linux/mac
 2021-03-02 15:54:37 +00:00
Mike Auty 2a41b1eee9 Linux: Make bang_addrs has something to search for 2021-03-02 15:50:21 +00:00
Mike Auty 1d35406ffe CLI: Improve file parameter handling 2021-03-02 15:45:21 +00:00
Mike Auty 9deb0c9d8a CLI: Fix early logging target 2021-03-02 11:15:16 +00:00
Mike Auty 681b68f252 Objects: Improve writing of objects 2021-02-28 02:44:41 +00:00
Mike Auty 77e406e408 Layers: Fix issue if leechcore not available 2021-02-25 18:07:28 +00:00
Mike Auty 70a94bf205 Automagic: Make sure Linux gets in the metadata too 2021-02-25 18:02:16 +00:00
ikelosandGitHub b180cc163a Merge pull request #459 from AsafEitani/match-pid-result-fields 
changing PID field names
 2021-02-25 01:29:54 +00:00
ikelosandGitHub 561058624c Merge pull request #460 from volatilityfoundation/feature/leechcore-support 
Layers: Add in LeechCore physical file support
 2021-02-24 17:43:12 +00:00
Mike Auty e27fc115dc Layers: Improve regex scanning for linux/mac 2021-02-24 17:39:43 +00:00
Mike Auty e18e9700f2 Core: Improve typing across codebase 2021-02-24 01:13:49 +00:00
Mike Auty 8131a9e817 Layers: Add in LeechCore physical file support 2021-02-23 14:46:43 +00:00
AsafEitani cf3ad1a6eb changing PID field names 
Changing the pid name field of the result to match the PID of all other plugins
 2021-02-23 12:28:17 +02:00
ikelosandGitHub 5144995a76 Merge pull request #458 from AsafEitani/cachedump-concat-bugfix 
Fix bytes to str concat - resulting in error
 2021-02-23 10:25:47 +00:00
AsafEitani b8c8e0f852 Update cachedump.py 
fix bytes to str concat
 2021-02-23 12:19:12 +02:00
Mike Auty 8b6c6b604d Layers: Allow handler to avoid caching 2021-02-19 01:17:34 +00:00
Mike Auty f562c3e864 Plugins: Layerwriter should not require an architecture 2021-02-17 02:01:36 +00:00
Mike Auty 00a4d5ea4f Layers: Fix circular import issue 2021-02-16 18:03:21 +00:00
ikelosandGitHub 9466c154e0 Merge pull request #455 from volatilityfoundation/issues/metadata-inheritance 
Layers: Metadata inheritance wasn't per-instance
 2021-02-16 17:59:55 +00:00
Mike Auty 2de3cfcce2 Layers: Metadata inheritance wasn't per-instance 2021-02-16 16:51:29 +00:00
ikelosandGitHub e0fb13284f Merge pull request #436 from volatilityfoundation/issues/more-efficient-scanning 
Issues/more efficient scanning
 2021-02-15 18:08:26 +00:00
ikelosandGitHub 51c8ad6263 Merge pull request #454 from volatilityfoundation/issues/out-of-bound-mapping 
Layers: Don't map intel out-of-bounds addresses
 2021-02-07 20:55:22 +00:00
Mike Auty 130ae7e446 Interfaces: Fix LGTM warning without changing behaviour 2021-02-07 20:50:16 +00:00
Mike Auty bf9329fa93 Plugins: netstat yapf and remove unused codeblock 2021-02-07 20:34:33 +00:00
Mike Auty c6181d0dcf Layers: Group the linearity settings together 2021-02-05 01:15:52 +00:00
Mike Auty f5ddb88806 Layers: Scan by available and then chunk 
This changes the order of scanning to make it (potentially) more
efficient.

A layer can efficiently map (and ignore large segments that don't exist)
and then have the available space chunked, rather than creating all the
chunks and repeatedly asking the layer whether each can be mapped or
not.
 2021-02-05 01:15:52 +00:00
Mike Auty 7a2ce9e999 Layers: Make linear scanning more efficient 
Previously we'd chop the entire space up into scan_chunk sized blocks
and then chop those up into mapped chunks.  The mapping process can much
more efficiently provide which blocks exist, so now we ask the layer to
map itself in its entirety, and then any chunks of data we get, we cut
into scan_chunk blocks.
 2021-02-05 01:15:52 +00:00
ikelosandGitHub c51a9aced4 Merge pull request #448 from volatilityfoundation/issues/issue447-memmap-file-offset 
Windows: Memmap include file offset
 2021-02-05 01:08:04 +00:00
ikelosandGitHub 30fe201c4b Merge pull request #443 from volatilityfoundation/feature/cache-path-override 
Feature/cache path override
 2021-02-05 01:06:42 +00:00
Mike Auty afd394dab2 Layers: Don't map intel out-of-bounds addresses 2021-02-04 16:46:55 +00:00
Mike Auty d66357c64c Documentation: Fix an unnecessary unicode apostrophe 2021-02-04 16:07:54 +00:00