WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-08-20 05:35:41 +02:00
Code Issues Packages Projects Releases Wiki Activity
2,049 Commits 80 Branches 17 Tags
threadpool
Commit Graph
66 Commits
Author SHA1 Message Date
Mike Auty acc74af06f pdbparse-to-json: Fix missing HRESULT type. 2019-10-31 23:04:37 +00:00
Mike Auty 72567e1c50 Yapf-0.28.0 rerun across the whole codebase. 2019-09-21 21:08:23 +01:00
Mike Auty 39fa9057ff Remove errant scan_kernel from svcscan for rekall. 2019-08-11 23:32:34 +01:00
Mike Auty 75f386784a Clean up development directory. 2019-08-11 17:33:53 +01:00
Mike Auty 0b71c1130f Add in the image-hash to make results easier to match up. 2019-08-11 17:19:59 +01:00
Mike Auty 40d04ed1ff Improve comparison titles, store stderr and output up until timeout. 2019-08-11 11:33:42 +01:00
Mike Auty cdc19ad5fa Add in 5 minute timeout for comparison tests. 2019-08-10 18:58:47 +01:00
Mike Auty 6f7dc1a75e Add in the scan_kernel parameter for rekall to offer a fair comparison. 2019-08-08 23:20:59 +01:00
Mike Auty 6c23968a11 Add in support for choosing specific frameworks to test. 2019-08-06 13:32:03 +01:00
Mike Auty f8587a08f2 Refactor and add support for testing rekall. 2019-08-05 01:20:24 +01:00
Mike Auty d1227220b5 Add in additional plugins and pypy support. 2019-07-22 23:49:43 +01:00
Mike Auty 8e6cba022b Add in more debugging information to the schema validator development script. 2019-07-10 14:09:59 +01:00
Mike Auty 272224a1b0 Refactor all references to Context.memory to Context.layers. 2019-07-07 17:42:51 +01:00
Mike Auty 84a1307c93 More minor typing fixes. 2019-05-11 23:10:39 +01:00
Mike Auty 4cfde031f6 Additional typing fixes. 2019-05-11 22:57:06 +01:00
Mike Auty db480bb1b8 Fix up minor typing issue. 2019-05-05 16:00:26 +01:00
Mike Auty 573dd88885 Add some typing information and better error checking in pdbconv. 2019-05-05 15:51:47 +01:00
Mike Auty 287ed2be94 Fix up the logging messages. 2019-04-28 14:00:36 +01:00
Mike Auty d89ade4e02 Remove requests dependency. 
It turns out the MS servers don't require a specific header anymore, so
we can use the built in urllib.
 2019-04-28 13:56:54 +01:00
Mike Auty 4959bb93b1 Don't write empty temporary files when there's a 404. 2019-04-27 22:50:02 +01:00
Mike Auty 5d380d666f Make sure we convert names for pointers. 2019-04-27 22:25:41 +01:00
Mike Auty 08e22e9bee Fix up some terrible code where we caught all exceptions. 2019-04-27 22:19:55 +01:00
Mike Auty a99a40b691 Use base-types to define pointer types. 2019-04-27 22:16:03 +01:00
Mike Auty 67d0c18e8a Add in missing types to pdbconv. 2019-04-27 22:09:50 +01:00
Mike Auty ca46f090c2 Fix up pdbparse GUID parsing to use Bytes. 2019-04-27 22:02:02 +01:00
Mike Auty 470d3906dc Improve PDB parsing to include symbol undecoration. 2019-04-27 21:05:55 +01:00
Mike Auty 60144c44d3 Add in base-type generation for pdbconv.py. 2019-04-23 22:28:29 +01:00
Mike Auty 93ddb9596b Add in base-type generator. 2019-04-23 21:37:51 +01:00
Mike Auty c229cf4db2 Fix schema issues with pdbconv and a couple small issues. 2019-04-23 00:15:49 +01:00
Mike Auty a1f7d1a1de Add in missing import. 2019-04-22 23:29:25 +01:00
Mike Auty 717f67fd1a Clean up after downloading a PDB and support additional determining of size. 2019-04-22 21:09:17 +01:00
Mike Auty d9d3a29b08 Remove llvm2json since pdbconv now exists. 2019-04-22 20:50:36 +01:00
Mike Auty c07c4f5625 Add in pdb retreival and argparse support. 2019-04-22 20:49:30 +01:00
Mike Auty 75fb8aa301 Add in GUID production to pdbconv. 2019-04-22 14:41:08 +01:00
Mike Auty 81d5fdd58d Add in some missing types. 2019-04-22 13:51:23 +01:00
Mike Auty 1f0947d7e1 Add in pdbconv script to completely generate the JSON from a PDB file using pdbparse. 2019-04-22 01:45:00 +01:00
Mike Auty f1bbba1048 Make the comparison output quiet and ignore the volatility script name. 2019-03-15 14:43:15 +00:00
Mike Auty d15dd469b5 Add in a volatility3 vs volatility2 test-rig. 2019-03-10 12:35:33 +00:00
Mike Auty 784336bb6e Add in mac KDK generate_json script. 2019-03-03 01:12:07 +00:00
Mike Auty 1e9205a75f Add in mac KDK dmg kernel extraction script. 2019-03-01 01:40:19 +00:00
Mike Auty 26ae324050 Add in attempt at name demangling for symbols. 2019-02-27 11:26:24 +00:00
Mike Auty d8413efc1d Add in further ignoring of the 0xf7 unicode character. 2019-02-25 22:51:41 +00:00
Mike Auty 4c2a29ae01 Convert to ruamel.yaml and allow \x7f characters, since llvm sometimes outputs them. 2019-01-27 18:20:59 +00:00
Mike Auty 35451e3514 Initial attempt at supporting symbols from llvm-8. 2019-01-25 01:35:36 +00:00
Mike Auty 43cc7b836c Fix small typo in llvm2json utility. 2019-01-25 01:35:00 +00:00
Mike Auty db63b2b345 Add support for directly running llvm-pdbutil. 2019-01-21 01:24:16 +00:00
Mike Auty 2080d5625f Update llvm2json with metadata and a command line parser. 2019-01-21 01:15:40 +00:00
Mike Auty 1071dca087 Add in a rudimentary (read ugly) convertor for llvm pdb2yaml files. 
This will need some help from @npetroni in places, but produces
close-to-identical JSON files for pdbs.

It does not yet produce metadata, base_types, or any symbols (since
they aren't exported by llvm-pdbutil's pdb2yaml) or base_types.
Ideally all of those can be fixed over time, but the symbols will
require changing llvm.  5:(
 2019-01-20 00:10:06 +00:00
Mike Auty e65a00894a Minor style tweaks and mass changes across the codebase because of it. 2018-12-17 12:46:14 +00:00
Mike Auty 19572b6e1e Reformat all python files using yapf with custom volatility style. 2018-12-16 16:50:17 +00:00