WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-09 11:17:38 +02:00
Code Issues Packages Projects Releases Wiki Activity
3,972 Commits 80 Branches 17 Tags
21af01ddd2c52ddcdae4cea710f017955d34ac83
Commit Graph
3972 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
ikelosandGitHub 21af01ddd2 Merge pull request #1034 from eve-mem/linux_maple_tree_seen_parameter_fix 
Linux: update maple tree extension to fix issue #1032
 2023-12-01 13:57:45 +00:00
Eve 276e695237 Linux: update maple tree extension comment around the seen set. 2023-12-01 13:46:00 +00:00
Eve 7fe086f64f Linux: update maple tree extension to fix issue #1032 correcting the mutable type used as a default parameter. 2023-12-01 13:37:09 +00:00
ikelosandGitHub 292bef9fcc Merge pull request #1051 from eve-mem/linux_iomem_absolute_address_bugfix 
Linux: fix bug with iomem plugin due to absolute address misuse
 2023-11-29 21:04:44 +00:00
Eve 099403d07c Linux: fix bug with iomem plugin where an absolute address is used to make an object but the absolute flag is not set 2023-11-29 20:47:14 +00:00
Mike Auty b20643d5e0 Linux: Tidy up the elf symbol table name 2023-11-29 12:03:43 +00:00
ikelosandGitHub 0769df4b3c Merge pull request #1039 from Abyss-W4tcher/linux_extensions_patches 
Linux extensions patches
 2023-11-29 12:02:46 +00:00
Abyss Watcher 39144ff45f type hint get_symbols_names_and_addresses 2023-11-29 12:51:08 +01:00
ikelosandGitHub 4ce42fcac4 Merge pull request #1049 from volatilityfoundation/issues/improve-mftscan 
Simplify attribute object accesses
 2023-11-28 21:45:13 +00:00
Mike Auty 8d5877e904 Simplify attribute object accesses 
This is a very small percentage slower, for some reason, than the
previous mechanism, probably overhead from object creation/member
access.  However, it vastly simplifies the code and makes better use of
the volatility object model.
 2023-11-27 01:00:00 +00:00
ikelosandGitHub 9f9afbf90f Merge pull request #1048 from volatilityfoundation/issues/issue922 
Issues/issue922
 2023-11-26 12:53:49 +00:00
Mike Auty 8b6ab44310 Core: Fix array_of_pointers to act only on those pointers 2023-11-26 12:30:06 +00:00
Mike Auty 62506aece6 Core: Fix up github security issues 
This fixes an unused import, an improper use of self and lots and lots
of places where we implicitly return None.  This now explicitly returns
None to improve readability and prevent mixed implicit and explicit
return values.  This should also somewhat aid type checking by humans.
 2023-11-26 11:24:53 +00:00
ikelosandGitHub 7012edb815 Merge pull request #885 from eve-mem/vmayarascan 
add linux.vmayarascan
 2023-11-23 09:08:17 +00:00
Abyss Watcher 80483722eb split module functions to keep current API 2023-11-20 11:57:56 +01:00
Abyss Watcher 6372b6f367 symbols getters follow vol2 format 2023-11-17 17:52:58 +01:00
Abyss Watcher 1a73717b93 set 'module' as config string 2023-11-17 17:49:54 +01:00
ikelosandGitHub d56297c4b1 Merge pull request #1038 from eve-mem/linux_check_afinfo_member_checks 
Linux: add member presence checks to linux.checks_afinfo
 2023-11-15 23:00:25 +00:00
Eve 4f4e2efd99 Linux: update warning logic in linux.checks_afinfo so that only one warning is shown and debug logs are cleaner 2023-11-15 10:29:06 +00:00
ikelosandGitHub c616c0b35e Merge pull request #1011 from eve-mem/layer_debug_info 
Layer debug info to show file size
 2023-11-15 01:06:13 +00:00
ikelosandGitHub 2e4d6cde17 Merge pull request #1035 from eve-mem/linux_bash_get_sections_only_once 
Linux: update bash plugin to only get memory sections once
 2023-11-15 00:59:30 +00:00
ikelosandGitHub 19d40b1a7f Merge pull request #1027 from daddycocoaman/fix/pdbutility-signature 
fix guid and pdb_name for #1026
 2023-11-14 23:38:53 +00:00
Abyss Watcher 36327a4315 check if symbol name is empty after strip 2023-11-14 17:20:16 +01:00
Abyss Watcher bf68fa8ce2 use KSYM_NAME_LEN for symbol name length 2023-11-14 17:09:36 +01:00
Abyss Watcher 2de97af061 use refcnt for inheritance 2023-11-14 16:54:10 +01:00
Abyss Watcher 83de6274ef fix symbols and function calls 2023-11-14 16:53:08 +01:00
Eve f7d5e722a2 Linux: add member presence checks to linux.checks_afinfo _check_afinfo function to stop crashes when none of the required members are present 2023-11-13 07:05:30 +00:00
Eve 9fe7d479f6 Linux: update bash plugin to only get memory sections once 2023-11-10 20:58:07 +00:00
Eve ebe19bf179 Linux: update maple tree extension to fix issue #1032 2023-11-10 20:30:38 +00:00
ikelosandGitHub 82c5af76df Merge pull request #1024 from volatilityfoundation/feature/citation 
Documentation: Add in a CITATION.cff file
 2023-11-08 20:20:09 +00:00
Leron GrayandGitHub 40dcff16e9 Merge branch 'volatilityfoundation:develop' into fix/pdbutility-signature 2023-11-06 11:37:01 -06:00
ikelosandGitHub fda1db4695 Merge pull request #1023 from volatilityfoundation/feature/santitize-filenames 
Core: Add (optional) sanitization to the FileHandler class
 2023-11-06 08:24:19 +00:00
Leron Gray c2b008969c update pefile requirements 2023-11-05 16:25:43 -06:00
Leron Gray b9c4a1d8a7 fix guid and pdb_name for #1026 2023-10-31 13:52:26 -05:00
Mike Auty 3bb1285dbf Layers: Make removal of a layer more efficient, as noted in #809 2023-10-29 13:53:55 +00:00
ikelosandGitHub e5d3134508 Merge pull request #1025 from Abyss-W4tcher/remote_isf 
Core: Remote ISF - correct sql query and strip identifier
 2023-10-23 19:03:46 +01:00
Abyss Watcher c20baf9d1f black formatting 2023-10-23 17:49:03 +02:00
Abyss Watcher 2d3b3158dc correct sql query and strip identifier 2023-10-21 23:34:17 +02:00
ikelosandGitHub 11ddafde44 Merge pull request #999 from 616c696365/fix-issue-895 
Windows: Update pslist.py, add friendly option
 2023-10-19 10:29:42 +01:00
ikelosandGitHub 104623ede2 Merge pull request #1018 from volatilityfoundation/1017-printkey-breaks-when-encountering-invalid-root-node 
issue #1017 - check for valid root node type
 2023-10-19 10:18:55 +01:00
ikelosandGitHub 806801ea69 Merge pull request #1020 from volatilityfoundation/1019-printkey-timestamps-are-misleadingincorrect 
issue #1019 - for subkeys, return the modified time of the subkey its…
 2023-10-19 10:18:22 +01:00
Dave Lassalle a497216beb issue #1019 - black updates 2023-10-18 14:09:42 -05:00
Dave Lassalle fcaba2d95a issue #1017 - black updates 2023-10-18 14:08:50 -05:00
616c696365 7323bd3a59 windows.pslist process name added to dumped file by default 2023-10-18 19:16:10 +01:00
Mike Autyand616c696365 5d43071f57 Core: Add (optional) sanitization to the FileHandler class 2023-10-18 19:16:10 +01:00
616c696365andGitHub f2f412d555 Merge branch 'volatilityfoundation:develop' into fix-issue-895 2023-10-18 18:44:24 +01:00
Mike Auty 14fa5ad771 Documentation: Add in a CITATION.cff file 
Initial addition of a CITATION file, no version information was included
because keeping it up to date with the version in the repo automatically
would be tricky and not doing so would lead it to becoming out of sync.

Fixes #1013.
 2023-10-17 16:27:29 +01:00
Mike Auty 63ace60995 Core: Add (optional) sanitization to the FileHandler class 2023-10-17 15:54:10 +01:00
ikelosandGitHub 57924c5da1 Merge pull request #1001 from xabrouck/oldkernel 
Making cred optional as it didn't exist in old 2.6 kernels
 2023-10-17 15:34:10 +01:00
ikelosandGitHub 15ad1db01b Merge pull request #1016 from eve-mem/vmem_warnings 
vmware: Add warning when no metadata file is found for a vmem file.
 2023-10-17 15:02:11 +01:00