 ikelosandGitHub
|
1718dc77e3
|
Merge pull request #1853 from tvanegro/dump_dirty_pages
Add dumping dirty pages to Linux Malfind
|
2025-09-28 23:05:56 +01:00 |
|
|
ikelosandGitHub
|
0dd8d3a8e9
|
Merge pull request #1827 from SolitudePy/lsof_deleted
Lsof improvements (show deleted as in lsof output) + files_only argument
|
2025-09-28 22:19:10 +01:00 |
|
|
ikelosandGitHub
|
f72b8ee21d
|
Update volatility3/framework/plugins/linux/malware/malfind.py
|
2025-09-28 22:11:48 +01:00 |
|
|
ikelosandGitHub
|
d41afc444e
|
Update volatility3/framework/plugins/linux/malware/malfind.py
|
2025-09-28 22:11:40 +01:00 |
|
|
ikelosandGitHub
|
16412537c0
|
Update volatility3/framework/plugins/linux/malware/malfind.py
|
2025-09-28 22:11:33 +01:00 |
|
|
ikelosandGitHub
|
438acddab6
|
Update volatility3/framework/plugins/linux/malware/malfind.py
|
2025-09-28 22:11:26 +01:00 |
|
|
ikelosandGitHub
|
2dbc06f995
|
Merge pull request #1825 from SolitudePy/pebmasq
pebmasquerade plugin
|
2025-09-23 20:18:38 +01:00 |
|
|
SolitudePy
|
0e17057b0b
|
Plugins - pebmasq required framework version
|
2025-09-23 21:16:47 +03:00 |
|
|
SolitudePy
|
a6d1b34d36
|
Plugins: pebmasq fix classmethod
|
2025-09-17 13:46:34 +03:00 |
|
|
SolitudePy
|
2dd0bec927
|
Plugins: pebmasq - change staticmethod to classmethod
|
2025-09-17 02:03:48 +03:00 |
|
|
SolitudePy
|
035b608633
|
Plugins: pebmasquerade remove unused code
|
2025-09-17 02:02:14 +03:00 |
|
|
SolitudePy
|
32def71eb5
|
remove notes
|
2025-09-17 02:02:14 +03:00 |
|
|
SolitudePy
|
4adc3305a3
|
remove error truncate
|
2025-09-17 02:02:14 +03:00 |
|
|
SolitudePy
|
bcc6ce68c5
|
PEBMASQ: parameterize _generator v2
|
2025-09-17 02:02:14 +03:00 |
|
|
SolitudePy
|
f79a6d6643
|
PEBMASQ: parameterize _generator
|
2025-09-17 02:02:14 +03:00 |
|
|
SolitudePy
|
36ce047ec0
|
PEBMASQ: return None instead of empty string
|
2025-09-17 02:02:14 +03:00 |
|
|
SolitudePy
|
156ca005de
|
changed staticmethods to classmethods
|
2025-09-17 02:02:14 +03:00 |
|
|
SolitudePy
|
22ea3d5542
|
moved to malware category
|
2025-09-17 02:02:14 +03:00 |
|
|
SolitudePy
|
231033428d
|
replace to utility function
|
2025-09-17 02:02:14 +03:00 |
|
|
SolitudePy
|
72f0bd1bba
|
UNICODE_STRING length checks to further detect spoofing
|
2025-09-17 02:02:14 +03:00 |
|
|
SolitudePy
|
207941759d
|
pebmasquerade plugin
|
2025-09-17 02:02:14 +03:00 |
|
|
ikelosandGitHub
|
78e05f9c8f
|
Merge pull request #1861 from kyrre/feature/parquet-arrow-renderer
Feature/parquet arrow renderer
|
2025-09-15 10:00:03 +01:00 |
|
|
ikelosandGitHub
|
81f2e7376a
|
Update test/renderers/test_parquet_renderers.py
|
2025-09-15 08:58:04 +01:00 |
|
|
ikelosandGitHub
|
50b3c22b7d
|
Merge pull request #1871 from blitztide/develop
Feature: vadyarascan enrichment
|
2025-09-15 08:54:38 +01:00 |
|
|
|
8090d72149
|
Update volatility3/framework/plugins/renderers/parquet_renderer.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-09-15 09:32:10 +02:00 |
|
|
|
4af48ae3b0
|
Update volatility3/framework/plugins/renderers/parquet_renderer.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-09-15 09:31:34 +02:00 |
|
|
|
4c7a9b517f
|
Update volatility3/framework/plugins/renderers/parquet_renderer.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-09-15 09:31:28 +02:00 |
|
|
|
86fe4485f0
|
Update volatility3/framework/plugins/renderers/parquet_renderer.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-09-15 09:31:20 +02:00 |
|
|
ikelosandGitHub
|
2b092bf32f
|
Merge pull request #1873 from j-t-1/README
Add newlines to README.md
|
2025-09-14 22:33:49 +01:00 |
|
|
j-t-1andGitHub
|
bec2fb4c7f
|
Add newlines to README.md
Purely for readability.
|
2025-09-06 10:09:28 +01:00 |
|
|
ikelosandGitHub
|
9ad82876e0
|
Merge pull request #1781 from volatilityfoundation/1780-dlllist-loadcount-missing
1780 dlllist loadcount missing
|
2025-09-06 00:52:12 +01:00 |
|
|
Dave Lassalle
|
88c8bfe1ad
|
#1780 - bump versions
|
2025-09-05 13:19:51 -05:00 |
|
|
Kyrre-Wahl-Kongsgard
|
d21a81d8c3
|
fix: update type hints to support Python 3.8
|
2025-09-05 06:55:00 +02:00 |
|
|
blitztide
|
d6a791cb67
|
VadYaraScan: Increment version
|
2025-09-04 22:39:46 +01:00 |
|
|
Dave Lassalle
|
4012887e75
|
#1780 - cast LoadCount
|
2025-09-04 14:50:30 -05:00 |
|
|
blitztide
|
47219aad67
|
Feature: vadyarascan enrichment
This add contextual data to each hit with vadyarascan, saves running pslist after processing.
Original didn't have imagename or PPID
|
2025-08-29 03:06:23 +01:00 |
|
|
Kyrre-Wahl-Kongsgard
|
3c830e6e67
|
black & ruff
|
2025-08-06 15:43:46 +02:00 |
|
|
Kyrre-Wahl-Kongsgard
|
eb7daa95a0
|
flatten tree output
|
2025-08-06 15:38:09 +02:00 |
|
|
Kyrre-Wahl-Kongsgard
|
533b305afb
|
Added tests for the Parquet and Arrow renderers
|
2025-08-02 18:07:05 +02:00 |
|
|
tvanegro
|
e7185b298f
|
PR comments
|
2025-07-23 11:06:20 +02:00 |
|
|
Kyrre-Wahl-Kongsgard
|
11b312383c
|
fix: update data type mappings for format_hints.Bin and format_hints.Hex to pa.uint64
|
2025-07-22 10:09:55 +02:00 |
|
|
Kyrre-Wahl-Kongsgard
|
6437148dc8
|
remove old parquet renderer
|
2025-07-21 23:47:24 +02:00 |
|
|
Kyrre-Wahl-Kongsgard
|
e7c1126b05
|
moved the arrow/parquet renderers to a subdir for renderers
|
2025-07-21 23:46:14 +02:00 |
|
|
Kyrre-Wahl-Kongsgard
|
72422d0db9
|
fix bug: hadn't properly renamed the write_data method name
|
2025-07-21 13:38:54 +02:00 |
|
|
Kyrre-Wahl-Kongsgard
|
0f32bec263
|
restore orginal text_renderer
|
2025-07-14 14:20:37 +02:00 |
|
|
Kyrre-Wahl-Kongsgard
|
066076b4d8
|
black formatting
|
2025-07-14 14:10:31 +02:00 |
|
|
Kyrre-Wahl-Kongsgard
|
8479fa1c13
|
moved renderer parsing to after the plugins are imported
|
2025-07-14 14:07:44 +02:00 |
|
|
Kyrre-Wahl-Kongsgard
|
d3a6b030b7
|
moved arrow/parquet parsers to it's own file and reverted changes
|
2025-07-14 13:38:35 +02:00 |
|
|
Mike Auty
|
1ebb82a0c0
|
Try to fix documentation builds
|
2025-07-12 11:09:47 +01:00 |
|
|
SolitudePy
|
eb790083e2
|
plugins: lsof change back to (deleted)
|
2025-07-11 15:39:34 +03:00 |
|