David McDonald
0f73686364
Framework: Fix remaining missing requirements
...
This adds all of the missing requirements discovered via the new code
analysis script.
2025-03-28 13:22:01 -05:00
David McDonald
2ad1536b4e
Testing: Verify VersionRequirements
...
This adds a script and GitHub action to the `test` directory that
dynamically imports all modules in `volatility3`, searches for usages of
`VersionableInterface` objects within classes that inherit from
`ConfigurableInterface` but don't enumerate the used component as a
requirement in `get_requirements()`, and returns -1 if any violations
are found.
Fixes
2025-03-28 13:21:10 -05:00
ikelos and GitHub
49d0404031
Merge pull request #1747 from volatilityfoundation/issues/update-api-changes-log
...
Update the various MINOR version bumps to the current version
2025-03-28 16:37:40 +00:00
ikelos and GitHub
f844f80d2a
Update API_CHANGES.md
...
Fix typo highlighted by @eve-mem
2025-03-28 14:29:35 +00:00
ikelos and GitHub
d77d69cffa
Merge pull request #1746 from volatilityfoundation/fix_hidden_modules
...
Fix hidden_modules to actually list hidden modules...
2025-03-28 01:48:12 +00:00
Mike Auty
ee0ad0b4af
Update the various MINOR version bumps to the current version
2025-03-28 01:46:14 +00:00
Andrew Case
a3069a3192
Fix hidden_modules to actually list hidden modules...
2025-03-27 20:06:09 -05:00
ikelos and GitHub
e8e8e76e79
Merge pull request #1740 from volatilityfoundation/lkm_extraction
...
Add module extraction API. Add plugin to directly extract modules. Ho…
2025-03-28 00:55:57 +00:00
Andrew Case
61575ca2b1
Require parity framework version
2025-03-27 19:30:58 -05:00
Andrew Case
aab95ea18e
Add required interface version to plugin
2025-03-27 18:39:29 -05:00
Andrew Case
5cfd55eba8
ordering fix
2025-03-27 17:17:08 -05:00
Andrew Case
ed7e013aac
Bug fix
2025-03-27 17:06:14 -05:00
Andrew Case
82d4de90df
Address feedback update
2025-03-27 17:02:23 -05:00
Andrew Case
7f55ec6dd5
Address feedback
2025-03-27 16:46:51 -05:00
ikelos and GitHub
f33e9daa48
Merge pull request #1707 from volatilityfoundation/1471-registry-plugins-spread-across-directories-needs-standardization
...
1471 registry plugins spread across directories needs standardization
2025-03-27 16:36:58 +00:00
70e101ff90
Potential fix for code scanning alert no. 407: First argument to super() is not enclosing class
...
Think this is more correct
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2025-03-27 14:13:25 +00:00
Dave Lassalle
bfc7e01d75
fix merge conflicts
2025-03-27 08:25:34 -05:00
Dave Lassalle
ef29008cc8
#1471 - fix class deprecation and update other plugins
2025-03-26 17:53:19 -05:00
ikelos and GitHub
8de46033d7
Merge pull request #1737 from Abyss-W4tcher/additional_windows_testing
...
Windows: Additional testing
2025-03-26 20:30:15 +00:00
Abyss Watcher
dca182dc72
trigger tests
2025-03-26 15:59:35 +01:00
ikelos and GitHub
f74082ec36
Merge pull request #1742 from volatilityfoundation/1741-consoles-requirements
...
Consoles: Fix requirement versions
2025-03-26 14:50:15 +00:00
David McDonald
1c21b3cd04
Consoles: Fix requirement versions
...
When I updated the requirements for `Consoles` in #1738 , I bumped the
version number on the `VerInfo` requirement instead of on the `Info`
requirement.
closes #1741
2025-03-26 09:07:32 -05:00
Abyss-W4tcher and GitHub
ff8d6dbd42
Merge branch 'develop' into additional_windows_testing
2025-03-26 14:42:14 +01:00
Abyss Watcher
b80a34110e
adjust thrdscan
2025-03-26 14:41:05 +01:00
Dave Lassalle
f431f519b6
#1471 - black and ruff fixes
2025-03-26 08:22:37 -05:00
Dave Lassalle
67533b034a
#1471 - deprecation class for moving
2025-03-26 08:21:28 -05:00
Andrew Case
25eaaff06c
Bring hidden module to expose dump option. Fix CodeQL found bug
2025-03-26 01:30:26 +00:00
Andrew Case
e93df37649
Add module extraction API. Add plugin to directly extract modules. Hook module dumping into existing module listing plugins.
2025-03-26 01:16:53 +00:00
ikelos and GitHub
4fd0f20ff9
Merge pull request #1739 from volatilityfoundation/fix_thrdscan_checks
...
Fix checks in thrdscan that broke tests
2025-03-26 00:55:32 +00:00
Andrew Case
444305afc2
Handle kernel processes properly this time
2025-03-26 00:55:48 +00:00
Andrew Case
43ab95f4c5
Change thrdscan from looking for kernel processes
2025-03-26 00:50:34 +00:00
Andrew Case
e52aea886e
Fix checks in thrdscan that broke tests
2025-03-26 00:41:26 +00:00
ikelos and GitHub
2ebda44482
Merge pull request #1738 from volatilityfoundation/framework/missing_version_requirements
...
Framework: Missing `VersionRequirement`s
2025-03-25 23:16:25 +00:00
David McDonald
66992a5d9a
Requirements: Insert missing version requirements
...
This audits the entire codebase for missing `VersionRequirements` and
adds them as needed.
2025-03-25 17:44:35 -05:00
David McDonald
d5fc050224
Timeliner: add VersionableInterface superclass
...
This adds `interfaces.configuration.VersionableInterface` as a
superclass to `TimelinerInterface` in order to be consistent with other
versioned interfaces such as `PluginInterface`.
2025-03-25 17:44:35 -05:00
Abyss Watcher
d70d8820a9
use winxp against scanner plugins (performances)
2025-03-25 11:41:28 +01:00
ikelos and GitHub
b881fa1fac
Merge pull request #1731 from volatilityfoundation/process_ghosting_update_with_delete_on_close
...
Add delete on close detection to process ghosting. Update plugin to c…
2025-03-25 09:15:23 +00:00
ikelos and GitHub
d0e32e593a
Merge pull request #1735 from volatilityfoundation/issue_1732_pe_symbols
...
Fix issue when pe_symbols limited to searching one process. Remove ne…
2025-03-25 09:13:52 +00:00
ikelos and GitHub
4ac8599d17
Merge pull request #1730 from volatilityfoundation/threads_useful_columns
...
Add win32 start address listing. Add paths for both thread starting a…
2025-03-25 09:12:57 +00:00
Andrew Case
3a4e622854
Change pending checking and OS version
2025-03-24 20:19:59 -05:00
Andrew Case
1a2427b54b
Change column order
2025-03-24 20:18:54 -05:00
Andrew Case
0f098fc160
Address feedback
2025-03-24 20:13:10 -05:00
Andrew Case and GitHub
19520799bb
Merge branch 'develop' into threads_useful_columns
2025-03-24 20:03:07 -05:00
ikelos and GitHub
083dae71b4
Merge pull request #1733 from volatilityfoundation/add-script-only-volshell-feature
...
Add a --script-only flag that exits after the given volshell script i…
2025-03-25 00:51:50 +00:00
ikelos and GitHub
e527f76a2d
Merge pull request #1734 from volatilityfoundation/plugin_requirement_deprecation
...
Framework: Replace PluginRequirements
2025-03-25 00:48:31 +00:00
ikelos and GitHub
46561dd664
Merge pull request #1728 from volatilityfoundation/add_perf_events
...
Add performance event plugin to detect eBPF malware
2025-03-25 00:17:55 +00:00
ikelos and GitHub
6dc0157841
Merge pull request #1729 from the-rectifier/volshell_byteorder
...
Volshell: Add byteorder argument for display_* functions
2025-03-25 00:10:19 +00:00
Abyss Watcher
6a28d1432f
adjust curl cmds
2025-03-24 20:39:44 +01:00
Andrew Case
166d0e0c14
Fix issue when pe_symbols limited to searching one process. Remove need to track symbol indexes. Provide much more useful debugging information. Fixes #1732
2025-03-24 19:37:59 +00:00
Abyss Watcher
f80b207aab
download symbols_win-10_19041-2025_03.zip
2025-03-24 20:36:25 +01:00
David McDonald