ikelos and GitHub
03b2efa58f
Merge pull request #659 from volatilityfoundation/issues/issue652-2
...
Objects: Don't try to read 0 bytes when unmarshalling
2022-02-26 13:26:09 +00:00
Mike Auty
1b09f20b5c
Windows: Raise PE extraction size and make it a constant
2022-02-26 13:21:34 +00:00
Mike Auty
78b3553b2a
Objects: Implement minor code optimization by @paulkermann
2022-02-25 16:33:54 +00:00
Mike Auty
265b282569
Objects: Don't try to read 0 bytes when unmarshalling
2022-02-23 22:53:54 +00:00
ikelos and GitHub
9a0ba988ab
Merge pull request #609 from volatilityfoundation/issues/issue599
...
Automagic: Warn when multiple symbol files match a banner
2022-02-23 21:44:28 +00:00
ikelos and GitHub
aa198f2709
Merge pull request #657 from paulkermann/bugfix/get_guid_from_mz
...
Fix read whole module
2022-02-22 01:09:13 +00:00
Paul Kermann
f2e3df27f4
fix read whole module
2022-02-21 14:57:31 +02:00
ikelos and GitHub
c024c2eecb
Merge pull request #644 from paulkermann/bugfix/object_info
...
Object information ChainMap invalid order
2022-02-20 23:22:56 +00:00
ikelos and GitHub
4a1c701ff4
Merge pull request #651 from volatilityfoundation/feature/volshell-kernel-requirement
...
Volshell: Update to use KernelRequirement
2022-02-20 22:59:28 +00:00
Paul Kermann
bfc4c50e67
related
2022-02-20 14:49:06 +02:00
ikelos and GitHub
a2b0bdfe25
Merge pull request #653 from paulkermann/feature/fast_pdb_scanning
...
Improve slow pdb scanning
2022-02-17 14:13:31 +00:00
Paul Kermann
3036875136
run optimized scan before slow scan
2022-02-17 16:10:44 +02:00
Paul Kermann
da7dd32271
Improve slow pdb scanning
2022-02-17 15:31:48 +02:00
Mike Auty
e6c3c94a10
Volshell: Update docs slightly
2022-02-17 01:46:54 +00:00
Mike Auty
9fb59e4714
Volshell: Further improvements for mac/linux
2022-02-17 01:43:50 +00:00
Mike Auty
094a3c0a47
Volshell: Update to use KernelRequirement
2022-02-17 00:21:59 +00:00
ikelos and GitHub
96d4aafd6c
Merge pull request #647 from volatilityfoundation/issues/issue646
...
Fix infinite loop in mftscan and timeliner body file updates
2022-02-14 20:35:24 +00:00
ikelos and GitHub
f5ecdbe28d
Merge pull request #645 from pudii/issues/issue313
...
Implement LDRmodules plugin
2022-02-14 01:12:21 +00:00
Mike Auty
22a7328e4c
Windows: Prevent infinite loop in mftscan
2022-02-13 20:45:42 +00:00
pudii
12c3f34037
Add comments and fix minor code issues
2022-02-13 18:29:35 +01:00
Mike Auty
9cabf5362b
Timeliner: Write out directly to the body file
...
Since the body file doesn't need sorting, we can output it immediately,
and this also means that partial results can be recorded even in the run
is terminted before it compeletes.
Goes someway to improving #646
2022-02-13 00:19:32 +00:00
pudii
cf11de174a
Implement LDRmodules plugin
2022-02-11 18:19:53 +01:00
Paul Kermann
edbbc0159f
bug fix
2022-02-10 10:31:18 +02:00
Mike Auty
05b4eb22fa
Core: Bump the development version to 2.0.2
2022-02-09 20:19:17 +00:00
Mike Auty
497eaea512
Core: Slight speed-up for all single struct.unpack calls
2022-02-09 20:07:13 +00:00
ikelos and GitHub
3e742bf1f7
Merge pull request #643 from ilay122/bugfix/mz_parsing
...
fix pdb mz parsing
2022-02-09 19:46:09 +00:00
trashcan122
ce166b9263
fix pdb mz parsing
2022-02-09 16:30:40 +02:00
ikelos and GitHub
dbf6245b85
Merge pull request #641 from paulkermann/bugfix/pdb-scanning-offset-bug
...
Fixed pdb scanning bug
2022-02-09 09:04:11 +00:00
Paul Kermann
a67121f1c1
Added data_offset to pattern matching result, fixes pdb scanning bug
2022-02-09 10:40:37 +02:00
ikelos and GitHub
52f325ed54
Merge pull request #633 from Digitalisx/develop
...
Correcting typo for Windows constants code comment.
2022-01-31 11:38:12 +00:00
Donghyun Kim and GitHub
7c238f93a0
Update __init__.py
...
Correcting typos for Windows Constants
2022-01-31 20:15:39 +09:00
ikelos and GitHub
b84e478371
Merge pull request #623 from volatilityfoundation/issues/issue542
...
Plugins: Timeliner improve support for body files
2022-01-18 21:01:46 +00:00
ikelos and GitHub
0de8448f89
Merge pull request #622 from volatilityfoundation/issues/issue616
...
Plugins: yara python module check improvement
2022-01-18 21:00:33 +00:00
Mike Auty
0f90f7f6ca
Plugins: Remove unused timeliner parameter
2022-01-18 20:58:48 +00:00
ikelos and GitHub
290e9fdb39
Merge pull request #628 from kevthehermit/plugin/sessions
...
add timeliner output to windows.sessions
2022-01-18 20:53:07 +00:00
KevTheHermit
ac7cecf231
add timeliner output to windows.sessions
2022-01-18 20:42:38 +00:00
ikelos and GitHub
a686042789
Merge pull request #626 from kevthehermit/plugin/sessions
...
Sessions Plugin
2022-01-18 19:37:37 +00:00
KevTheHermit
be0dd49d31
Sessions Plugin use ModuleRequirement
2022-01-18 19:34:06 +00:00
KevTheHermit
0f23089cb4
Create Sessions Plugin
2022-01-17 00:28:59 +00:00
Mike Auty
91a844a8b0
Merge branch 'stable' into develop
2022-01-16 23:26:54 +00:00
ikelos and GitHub
02ff56ba71
Merge pull request #624 from volatilityfoundation/readthedocs-requirements
...
Fix readthedocs builds
2022-01-16 22:54:24 +00:00
Nick L. Petroni, Jr
fa2a608cd2
update doc copyright
2022-01-16 17:32:02 -05:00
Nick L. Petroni, Jr
64acff1b59
use doc/requirements.txt when building with readthedocs
2022-01-16 17:11:53 -05:00
Mike Auty
57c9470f66
Documentation: Fix building from different directories
2022-01-16 22:09:15 +00:00
ikelos and GitHub
7650cfd7d1
Merge pull request #614 from kevthehermit/plugin/mftscan
...
Create MFTScanner plugin
2022-01-16 14:08:08 +00:00
KevTheHermit
e3a7ac5668
Use lookups on mft enums instead of choices
2022-01-16 02:20:55 +00:00
ikelos and GitHub
45e2597399
Merge pull request #610 from volatilityfoundation/feature/pretty-multiline-output
...
CLI: Support multi-line fields and tabstops in pretty renderer
2022-01-16 01:34:13 +00:00
ikelos and GitHub
84df55a15b
Merge pull request #612 from volatilityfoundation/issues/issue588
...
Automagic: Allow automagic to exclude unsupported OSes
2022-01-16 01:28:52 +00:00
Mike Auty
a31f846b14
Documentation: Reorganize and consolidate pages
2022-01-16 00:47:40 +00:00
KevTheHermit
f31bc853c4
remove MFTIntermedSymbols
2022-01-15 23:30:39 +00:00
