Commit Graph
6147 Commits
Author SHA1 Message Date
SolitudePy 21da9002d7 categorize windows.processghosting as a malware plugin 2025-06-07 13:31:26 +03:00
Mike Auty fb76bf6b6c Linux: Minor linting fixes to fbdev plugin 2025-06-07 10:22:53 +01:00
Mike Auty 0d7f985ef6 Plugins: Add in __init__ files to create submodules for OS plugins 2025-06-07 10:16:22 +01:00
Mike Auty 8924776698 Plugins: Remove deprecated PluginRequirement in favour of VersionRequirement 2025-06-07 09:41:19 +01:00
ikelosandGitHub 1571e65ad8 Merge pull request #1821 from eve-mem/deprecation_warning_for_PluginRequirement
Add a deprecation warning for PluginRequirement
2025-05-29 19:48:50 +01:00
ikelosandGitHub 9fd734762b Merge pull request #1823 from j-t-1/malfind
Tweak comments
2025-05-29 19:48:37 +01:00
eve 3ce515bc01 Add return for matches_required in VersionRequirement 2025-05-29 16:53:35 +01:00
ikelosandGitHub 8e9e2d6f08 Merge pull request #1822 from eve-mem/linux_perf_events_VersionRequirement
Linux: update PerfEvents plugin to use VersionRequirement for pslist
2025-05-29 09:47:05 +01:00
ikelosandGitHub 1206b69abd Update volatility3/framework/plugins/windows/malfind.py 2025-05-29 09:45:26 +01:00
eve a4bc02e41f Move version checking logic into versionutils module 2025-05-29 07:26:53 +01:00
j-t-1andGitHub bb4cee7071 Tweak comments
Also remove zeroes starting a slice.
2025-05-29 06:47:03 +01:00
eve 0be4d809c1 Linux: update PerfEvents plugin to use VersionRequirement for pslist 2025-05-28 21:16:04 +01:00
eve 83cfc84f36 Add a deprecation warning for PluginRequirement 2025-05-28 20:05:03 +01:00
Mike Auty 40a3d23e2d Infra: Update checkout actions 2025-05-26 10:19:28 +01:00
ikelosandGitHub c9e25a3f86 Merge pull request #1815 from ddogfoodd/fix-typos
fix: typos
2025-05-26 10:00:50 +01:00
Jost Alemann 4f11586ef1 fix: typos 2025-05-23 10:52:33 +02:00
ikelosandGitHub a8f9c9449d Merge pull request #1813 from geekscrapy/enablenocase
Make nocase accessible in yarascan.YaraScan yara_string
2025-05-19 14:14:13 +01:00
ikelosandGitHub b3c53fde26 Merge pull request #1812 from JakePeralta7/develop
Minor fix to Hashdump.get_user_keys()
2025-05-19 12:42:46 +01:00
ikelosandGitHub b414ee3ba2 Merge pull request #1794 from volatilityfoundation/feature/volshell-breakpoints
Volshell breakpointing
2025-05-19 12:41:26 +01:00
geekscrapyandGitHub 2180c07c03 Make nocase accessible 2025-05-19 14:47:29 +04:00
Elad LeviandGitHub dc34070739 Merge branch 'volatilityfoundation:develop' into develop 2025-05-19 13:25:09 +03:00
Elad LeviandGitHub cb3e18ec9e Update hashdump.py
calling `<reg_key>.Name` returns array, changed to `<reg_key>.get_name()` which returns a string (the if statement in the code didn't work before this change)
2025-05-19 13:24:58 +03:00
ikelosandGitHub b3e770dd0c Merge pull request #1811 from j-t-1/the
Remove extra word in comment
2025-05-18 20:20:36 +01:00
Mike Auty 6269091be7 CLI: Support listing/clearing breakpoints in volshell 2025-05-18 20:18:29 +01:00
j-t-1andGitHub 8bc2271e6f Remove extra word in comment 2025-05-17 09:31:19 +01:00
j-t-1andGitHub c93d2248d1 Remove extra word in comment 2025-05-17 09:30:52 +01:00
j-t-1andGitHub 4eef4c0084 Remove extra word in comment 2025-05-17 09:30:15 +01:00
j-t-1andGitHub c1d1c66daf Remove extra word in comment 2025-05-17 09:28:49 +01:00
ikelosandGitHub a413c44b00 Merge pull request #1810 from j-t-1/align
Align SeCreateTokenPrivilege with the other privileges
2025-05-16 22:29:00 +01:00
j-t-1andGitHub f79d0cb5ef Align SeCreateTokenPrivilege with the other privileges 2025-05-16 20:10:50 +01:00
ikelosandGitHub 1a71b03b8d Merge pull request #1791 from volatilityfoundation/feature/code-coverage
Add in coverage recording to the test process
2025-05-11 13:55:45 +01:00
ikelosandGitHub 28a72b8dd8 Merge pull request #1802 from eve-mem/linux_lsof_smear_comment
Linux: Add comment for  explaining the behaviour with smear
2025-05-10 15:10:25 +01:00
eve 92eae9c50f Linux: Add comment for explaining the behaviour with smear 2025-05-09 09:06:43 +01:00
ikelosandGitHub ff6de6eab4 Merge pull request #1795 from Abyss-W4tcher/dentry_names_forward_slashes
Linux: prevent "forward slashes only" dentry names
2025-05-08 23:12:11 +01:00
ikelosandGitHub 686057d806 Merge pull request #1800 from SolitudePy/develop
add functions to etwpatch
2025-05-07 22:03:37 +01:00
SolitudePyandGitHub f719efb9ec dupe 2025-05-07 20:39:46 +03:00
SolitudePy 9ddf2d9abb refs 2025-05-07 19:55:30 +03:00
SolitudePy fc7e13f6f8 black 2025-05-07 19:30:58 +03:00
SolitudePy 94a0292328 add functions to etwpatch 2025-05-07 19:05:05 +03:00
ikelosandGitHub 57b28e5fa2 Merge pull request #1798 from volatilityfoundation/issues/fix-exe-build
Reformat and install volatility package deps before build
2025-05-06 23:06:43 +01:00
ikelosandGitHub 142add17a5 Merge pull request #1799 from volatilityfoundation/stable
Stable
2025-05-06 22:41:52 +01:00
ikelosandGitHub 606fecf5f8 Update volatility3/framework/plugins/windows/vadyarascan.py 2025-05-06 22:41:33 +01:00
ikelosandGitHub c0c7119c38 Update volatility3/framework/plugins/windows/thrdscan.py 2025-05-06 22:41:27 +01:00
ikelosandGitHub 718f8ca2b5 Update volatility3/framework/plugins/linux/vmayarascan.py 2025-05-06 22:41:21 +01:00
ikelosandGitHub 65d3ff63bc Merge branch 'develop' into stable 2025-05-06 22:37:47 +01:00
Mike Auty ee445d9746 Add in workflow_dispatch for pyinstaller action 2025-05-06 22:27:03 +01:00
Mike Auty 92673be42c Reformat and install volatility package deps before build 2025-05-06 22:15:38 +01:00
ikelosandGitHub a7d64ad39d Merge pull request #1796 from volatilityfoundation/release/v2.26.0
Release/v2.26.0
v2.26.0
2025-05-06 21:27:58 +01:00
ikelosandGitHub bb65fa31a6 Merge branch 'stable' into release/v2.26.0 2025-05-06 21:09:27 +01:00
Abyss Watcher 2759df89db tag potentially smeared dentry names 2025-05-06 00:31:09 +02:00