Commit Graph
38 Commits
Author SHA1 Message Date
Mike Auty 6f73310d88 Add in initial Elf64 support. 2019-11-03 20:37:12 +00:00
Mike Auty 153b3b7d39 Make sure we catch the most general exception for what we mean. 2019-09-27 11:19:53 +01:00
Mike Auty e0b9d72c84 Update the license URL and LICENSE.txt 2019-09-25 21:44:05 +01:00
Mike Auty 37cb541013 Change the layer naming convention to include the underscores when necessary. 2019-09-25 19:38:39 +01:00
Mike Auty 926288a7ac Ensure process layer name contains the process ID. 2019-09-25 01:15:58 +01:00
Mike Auty e922cef316 Improve docstrings for all plugins, and reformat all docstrings. 2019-09-07 22:59:54 +01:00
Mike Auty a3caf39097 Use a mapping to determine kind to class. 2019-08-31 12:57:53 +01:00
Mike Auty 9cde94bceb Change the license blurb on all files. 2019-08-27 23:11:00 +01:00
Mike Auty 42b2fb120a Swap TranslationLayerInterface decendents over to LinearMappedLayers 2019-08-27 21:09:13 +01:00
Mike Auty 272224a1b0 Refactor all references to Context.memory to Context.layers. 2019-07-07 17:42:51 +01:00
Mike Auty 7904be3fd2 Yapf reformat all files. 2019-03-04 22:11:44 +00:00
Andrew Caseandikelos 984615ebba fix plugins for new API 2018-12-27 22:41:03 +00:00
Mike Auty fdc6efc4ad Add in the LICENSE and the README. 2018-12-19 23:55:03 +00:00
Mike Auty 70e8204113 Fix up linux version of mmap_iter property to get_mmap_iter. 2018-12-19 22:38:43 +00:00
Mike Auty e65a00894a Minor style tweaks and mass changes across the codebase because of it. 2018-12-17 12:46:14 +00:00
Mike Auty 19572b6e1e Reformat all python files using yapf with custom volatility style. 2018-12-16 16:50:17 +00:00
Mike Auty 29d41470a4 Mass reformat of typing imports
Relented on the strict import of direct objects/classes for the typing
module only.  Typing module components can be directly imported because
it makes the code really painful to read and write otherwise.

This is still in-line with the python style guide adopted from Google at
http://google.github.io/styleguide/pyguide.html section 2.2.
2018-12-16 13:04:22 +00:00
Mike Auty c9a08603c7 Move the get_requirements over to the IntermedSymbols which actually requires the parameter. 2018-12-13 01:39:26 +00:00
Mike Auty 8acbe8bba3 Refactor conversion code from objects.utility to a conversion module in renderers. 2018-12-12 23:39:10 +00:00
Mike Auty b5d532555c Convert the adhoc scanner into a layer scanner using sections. 2018-12-08 18:21:39 +00:00
Mike Auty 649a39a13d Change time_as_integer from a property to get_time_as_integer method. 2018-12-08 18:00:44 +00:00
Andrew Caseandikelos 8705fb3047 update time_object to get_time_object 2018-12-08 17:34:48 +00:00
Andrew Caseandikelos 0e7b6b6702 Updated hist_entry type and references, add bash plugin 2018-12-08 17:34:48 +00:00
Andrew Caseandikelos c6e9763e5a Linux - add bash plugin 2018-12-08 17:34:48 +00:00
Mike Auty e27ba8d089 Fix up naming for objects/symbols_utility imports. 2018-11-08 00:48:38 +00:00
Mike Auty db7320e426 Bulk lint and a couple of typos fixed. 2018-11-08 00:19:17 +00:00
Andrew Caseandikelos 625952680a mass convert hasattr -> has_member 2018-11-08 00:19:17 +00:00
Andrew Caseandikelos 9c01b93c94 Check that mount type exists before appling type 2018-11-08 00:19:17 +00:00
Andrew Caseandikelos 98e472e211 major updates and new plugins 2018-11-08 00:19:17 +00:00
Andrew Caseandikelos 63e9cd4604 initial set of Linux plugins and extensions for ikelos review 2018-11-08 00:19:17 +00:00
Mike Auty 7a52ac9deb Fix a large number of typing issues.
There are several instances where mypy didn't detect

if blah is not None:
    blah = thing

and so were rewritten as:

blah = blah or thing
2018-06-04 01:25:02 +01:00
Mike Auty 623180ddbd Make many typing fixes, based on mypy-0.590. 2018-04-22 20:45:59 +01:00
Mike Auty 942de5f166 Finish adding type-annotations thoughout the code. 2017-12-13 20:48:52 +00:00
Mike Auty 01043b9f3e Rework isf_filename to isf_url since we can load it from a remote location if required. 2017-11-04 15:47:52 +00:00
Mike Auty aa87c87a22 Remove the additional import that was entirely my fault being there in the first place. 2017-08-16 21:40:58 +01:00
Nick L. Petroni, Jr c4e6b07ee0 refactored constants.linux usage 2017-08-16 16:30:12 -04:00
Nick L. Petroni, Jr 5bb2aef9fc Created linux.proc.Maps plugin.
Added object extensions for the key structures. Also added
constants.linux, which will contain Linux-specific constants
that can't be extracted via dwarf.
2017-08-16 16:14:33 -04:00
Nick L. Petroni, Jr 8fcbf988b5 initial linux.pslist.PsList plugin 2017-05-14 22:24:05 -04:00