6450 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Mike Auty	0da666fbba	Reduce code reuse	2026-01-04 14:19:32 +00:00
Mike Auty	b461e77c5e	Rebased version of the fix for issue1255	2026-01-04 14:14:42 +00:00
ikelosandGitHub	ad1da577e0	Merge pull request #1926 from volatilityfoundation/issues/issue1309 ... Avoid trying to lookup child nodes that have been filtered	2026-01-03 13:52:09 +00:00
ikelosandGitHub	ade1cf27d8	Merge pull request #1826 from SolitudePy/linux_procspoof ... process_spoofing plugin	2025-12-31 21:11:27 +00:00
SolitudePy	e8087dd68d	Plugins: process_spoofing put reference in docstring	2025-12-31 20:23:05 +02:00
SolitudePy	088a64379c	black	2025-12-31 20:13:01 +02:00
SolitudePy	2478c1398e	Plugins: get first argument using utility.address_to_string in process_spoofing	2025-12-31 20:06:50 +02:00
ikelosandGitHub	590b5abe89	Merge pull request #1120 from eve-mem/linux_sockscan ... Add linux sockscan plugin	2025-12-31 15:54:39 +00:00
eve	94f989be7a	Linux: update sockscan to add docstring to _find_file_ops_needles	2025-12-31 12:54:41 +00:00
eve	66ec4f4372	Linux: update sockstat docstring for _walk_file_ops_needles. Rename physical_memory_layer_name for clarity	2025-12-31 12:49:45 +00:00
eve	6aa552cd03	Fix black formatting in sockscan	2025-12-31 12:25:22 +00:00
3 people	f11347739b	Apply suggestions from code review ... Co-authored-by: ikelos <ikelos@users.noreply.github.com>	2025-12-31 12:22:48 +00:00
3 people	c47ab6ba11	Apply suggestion from @ikelos ... Co-authored-by: ikelos <ikelos@users.noreply.github.com>	2025-12-31 12:21:47 +00:00
3 people	55c0b9b0a8	Apply suggestion from @ikelos ... Co-authored-by: ikelos <ikelos@users.noreply.github.com>	2025-12-31 12:21:32 +00:00
3 people	4369935be4	Apply suggestion from @ikelos ... Co-authored-by: ikelos <ikelos@users.noreply.github.com>	2025-12-31 12:21:19 +00:00
3 people	da6a1e5444	Update volatility3/framework/plugins/linux/sockscan.py ... Co-authored-by: ikelos <ikelos@users.noreply.github.com>	2025-12-31 12:20:57 +00:00
3 people	13aa0dd2dc	Update volatility3/framework/plugins/linux/sockscan.py ... Co-authored-by: ikelos <ikelos@users.noreply.github.com>	2025-12-31 12:20:44 +00:00
3 people	35d24d8d17	Update volatility3/framework/plugins/linux/sockscan.py ... Co-authored-by: ikelos <ikelos@users.noreply.github.com>	2025-12-31 12:20:30 +00:00
3 people	4fbd54361a	Update volatility3/framework/plugins/linux/sockscan.py ... Co-authored-by: ikelos <ikelos@users.noreply.github.com>	2025-12-31 12:20:20 +00:00
3 people	3872133f5d	Update volatility3/framework/plugins/linux/sockscan.py ... Co-authored-by: ikelos <ikelos@users.noreply.github.com>	2025-12-31 12:20:09 +00:00
3 people	7ba46943bb	Update volatility3/framework/plugins/linux/sockscan.py ... Co-authored-by: ikelos <ikelos@users.noreply.github.com>	2025-12-31 12:19:59 +00:00
3 people	be11441ef0	Update volatility3/framework/plugins/linux/sockscan.py ... Co-authored-by: ikelos <ikelos@users.noreply.github.com>	2025-12-31 12:19:50 +00:00
3 people	c7510f7e00	Update volatility3/framework/plugins/linux/sockscan.py ... Co-authored-by: ikelos <ikelos@users.noreply.github.com>	2025-12-31 12:19:37 +00:00
3 people	5205d2cee0	Update volatility3/framework/plugins/linux/sockscan.py ... Co-authored-by: ikelos <ikelos@users.noreply.github.com>	2025-12-31 12:19:08 +00:00
3 people	a2e033dfc8	Update volatility3/framework/plugins/linux/sockscan.py ... Co-authored-by: ikelos <ikelos@users.noreply.github.com>	2025-12-31 12:18:48 +00:00
EveandGitHub	aabca91e4b	Merge branch 'volatilityfoundation:develop' into linux_sockscan	2025-12-31 11:19:29 +00:00
ikelosandGitHub	a7f96b4b25	Merge pull request #1814 from Abyss-W4tcher/vma_enumeration_smearing_protection ... Linux: enhance VMA enumeration smearing protection	2025-12-31 01:54:38 +00:00
SolitudePy	d13de25b46	Constants: add MAX_ARG_STRLEN linux constant	2025-12-31 00:26:09 +02:00
SolitudePy	9c5950e595	Plugins: process_spoofing bump required_framework_version	2025-12-29 19:00:30 +02:00
SolitudePy	4cb326fb6e	black and ruff	2025-12-29 19:00:30 +02:00
SolitudePy	c3ddc094cb	Plugins: process spoofing handle none values and set more classmethods	2025-12-29 19:00:30 +02:00
SolitudePy	cbe5b46b8e	Plugins: process_spoofing change extract_process_names to classmethod	2025-12-29 19:00:30 +02:00
SolitudePy	1359a11f24	Plugins: truncate deleted to check spoofing in process_spoofing	2025-12-29 19:00:30 +02:00
SolitudePy	9686b5ae8b	Plugins: utilize linuxutilities.path_for_file (deleted) logic solely	2025-12-29 19:00:30 +02:00
SolitudePy	d384f62721	Plugins: make get_executable_path more accurate in process_spoofing	2025-12-29 19:00:30 +02:00
SolitudePy	41f964cfe1	Plugins: determine process exe deletion structurally	2025-12-29 19:00:30 +02:00
SolitudePy	5c7cf11152	black	2025-12-29 19:00:30 +02:00
SolitudePy	d11f50906a	Plugins: swap notes for boolean flags in process_spoofing	2025-12-29 19:00:30 +02:00
SolitudePy	1a92e749ff	Plugins: more precise exception handling in process_spoofing	2025-12-29 19:00:30 +02:00
SolitudePy	8349479643	Plugins: process_spoofing log exceptions as debug	2025-12-29 19:00:30 +02:00
SolitudePy	939034cd33	Plugins: consistent return values in process_spoofing	2025-12-29 19:00:30 +02:00
SolitudePy	cc6aa2117b	Plugins: convert useful methods to classmethods	2025-12-29 19:00:30 +02:00
SolitudePy	d55cf9a9d0	Plugins: remove exe_file dereference()	2025-12-29 19:00:30 +02:00
SolitudePy	15dc9ec463	Plugins: precise exception handling in process_spoofing	2025-12-29 19:00:30 +02:00
SolitudePy	fd270a208d	categorize as a malware plugin	2025-12-29 19:00:30 +02:00
SolitudePy	5c3fca3544	added mechanism for deleted exe	2025-12-29 19:00:30 +02:00
SolitudePy	cf6fa422b4	cosmetics	2025-12-29 19:00:30 +02:00
SolitudePy	5aea7f92e9	process_spoofing plugin	2025-12-29 19:00:29 +02:00
ikelosandGitHub	fa6b9a8db3	Merge pull request #1773 from Abyss-W4tcher/issue_1761_module_sect_attr_fix ... Issue #1761: handle new bin_attribute format for module sections	2025-12-29 10:01:33 +00:00
ikelosandGitHub	36b70a09bc	Merge branch 'develop' into vma_enumeration_smearing_protection	2025-12-29 09:54:34 +00:00