Commit Graph
17 Commits
Author SHA1 Message Date
Michael Lighandikelos d0f9cf9a2f refs #139 use _EPROCESS.ControlFlowGuardEnabled to distinguish between windows 10 <= 15063 versus >= 16299 2019-12-04 21:19:19 +00:00
Mike Auty 249c3ec223 Svcscan: Ensure or later checks are done in order.
Relates to issue 139.
2019-11-18 20:57:34 +00:00
Mike Auty ee31ece006 Fix a logging on add_process_layer exceptions.
There were a number of issues with commit 3df5e995 that was applied in
haste (notably, that exceptions wasn't imported in several cases, which
would break the code if it were ever run).

We now give debugging output when a process can't be constructed and
provide as much available information as possible.

Two unused lines were also removed from verinfo.
2019-11-03 23:15:38 +00:00
atcuno 3df5e9957e Windows - add missing add_process_layer exception handling in a few plugins 2019-10-17 11:47:19 -04:00
Mike Auty e0b9d72c84 Update the license URL and LICENSE.txt 2019-09-25 21:44:05 +01:00
Mike Auty 72567e1c50 Yapf-0.28.0 rerun across the whole codebase. 2019-09-21 21:08:23 +01:00
Michael Lighandikelos 4e3db7a3de add PluginRequirements for ssdt and svcscan. add missing _version to svcscan 2019-09-08 16:08:48 +01:00
Mike Auty e922cef316 Improve docstrings for all plugins, and reformat all docstrings. 2019-09-07 22:59:54 +01:00
Mike Auty 9cde94bceb Change the license blurb on all files. 2019-08-27 23:11:00 +01:00
Mike Auty 47c349e240 Add plugin requirements for all plugins. 2019-08-27 21:08:29 +01:00
Mike Auty e78839b5e9 DON'T import from framework.plugins. It won't work. 2019-07-16 00:37:23 +01:00
Analystandikelos 6e4fa57421 move type_classes to dictionaries stored in their modules rather than separate classes (see 81d3293) 2019-07-15 21:16:32 +01:00
Analystandikelos 79c7c6df95 change context.memory to context.layers per 272224a 2019-07-15 21:16:32 +01:00
Analystandikelos a26b9bb57d don't require pslist.PsList.list_processes_filter_requirements - it introduces --pid to the plugin's arguments 2019-07-15 21:16:32 +01:00
Analystandikelos 20d7152050 remove unnecessary debugging 2019-07-15 21:16:32 +01:00
Analystandikelos 3ea0432ee4 fix the typing for get_record_tuple() 2019-07-15 21:16:32 +01:00
Analystandikelos e6ae049d18 add svcscan and associated types 2019-07-15 21:16:32 +01:00