SolitudePy
21da9002d7
categorize windows.processghosting as a malware plugin
2025-06-07 13:31:26 +03:00
Mike Auty
fb76bf6b6c
Linux: Minor linting fixes to fbdev plugin
2025-06-07 10:22:53 +01:00
Mike Auty
0d7f985ef6
Plugins: Add in __init__ files to create submodules for OS plugins
2025-06-07 10:16:22 +01:00
Mike Auty
8924776698
Plugins: Remove deprecated PluginRequirement in favour of VersionRequirement
2025-06-07 09:41:19 +01:00
ikelos and GitHub
1571e65ad8
Merge pull request #1821 from eve-mem/deprecation_warning_for_PluginRequirement
...
Add a deprecation warning for PluginRequirement
2025-05-29 19:48:50 +01:00
ikelos and GitHub
9fd734762b
Merge pull request #1823 from j-t-1/malfind
...
Tweak comments
2025-05-29 19:48:37 +01:00
eve
3ce515bc01
Add return for matches_required in VersionRequirement
2025-05-29 16:53:35 +01:00
ikelos and GitHub
8e9e2d6f08
Merge pull request #1822 from eve-mem/linux_perf_events_VersionRequirement
...
Linux: update PerfEvents plugin to use VersionRequirement for pslist
2025-05-29 09:47:05 +01:00
ikelos and GitHub
1206b69abd
Update volatility3/framework/plugins/windows/malfind.py
2025-05-29 09:45:26 +01:00
eve
a4bc02e41f
Move version checking logic into versionutils module
2025-05-29 07:26:53 +01:00
j-t-1 and GitHub
bb4cee7071
Tweak comments
...
Also remove zeroes starting a slice.
2025-05-29 06:47:03 +01:00
eve
0be4d809c1
Linux: update PerfEvents plugin to use VersionRequirement for pslist
2025-05-28 21:16:04 +01:00
eve
83cfc84f36
Add a deprecation warning for PluginRequirement
2025-05-28 20:05:03 +01:00
Mike Auty
40a3d23e2d
Infra: Update checkout actions
2025-05-26 10:19:28 +01:00
ikelos and GitHub
c9e25a3f86
Merge pull request #1815 from ddogfoodd/fix-typos
...
fix: typos
2025-05-26 10:00:50 +01:00
Jost Alemann
4f11586ef1
fix: typos
2025-05-23 10:52:33 +02:00
ikelos and GitHub
a8f9c9449d
Merge pull request #1813 from geekscrapy/enablenocase
...
Make nocase accessible in yarascan.YaraScan yara_string
2025-05-19 14:14:13 +01:00
ikelos and GitHub
b3c53fde26
Merge pull request #1812 from JakePeralta7/develop
...
Minor fix to Hashdump.get_user_keys()
2025-05-19 12:42:46 +01:00
ikelos and GitHub
b414ee3ba2
Merge pull request #1794 from volatilityfoundation/feature/volshell-breakpoints
...
Volshell breakpointing
2025-05-19 12:41:26 +01:00
geekscrapy and GitHub
2180c07c03
Make nocase accessible
2025-05-19 14:47:29 +04:00
Elad Levi and GitHub
dc34070739
Merge branch 'volatilityfoundation:develop' into develop
2025-05-19 13:25:09 +03:00
Elad Levi and GitHub
cb3e18ec9e
Update hashdump.py
...
calling `<reg_key>.Name` returns array, changed to `<reg_key>.get_name()` which returns a string (the if statement in the code didn't work before this change)
2025-05-19 13:24:58 +03:00
ikelos and GitHub
b3e770dd0c
Merge pull request #1811 from j-t-1/the
...
Remove extra word in comment
2025-05-18 20:20:36 +01:00
Mike Auty
6269091be7
CLI: Support listing/clearing breakpoints in volshell
2025-05-18 20:18:29 +01:00
j-t-1 and GitHub
8bc2271e6f
Remove extra word in comment
2025-05-17 09:31:19 +01:00
j-t-1 and GitHub
c93d2248d1
Remove extra word in comment
2025-05-17 09:30:52 +01:00
j-t-1 and GitHub
4eef4c0084
Remove extra word in comment
2025-05-17 09:30:15 +01:00
j-t-1 and GitHub
c1d1c66daf
Remove extra word in comment
2025-05-17 09:28:49 +01:00
ikelos and GitHub
a413c44b00
Merge pull request #1810 from j-t-1/align
...
Align SeCreateTokenPrivilege with the other privileges
2025-05-16 22:29:00 +01:00
j-t-1 and GitHub
f79d0cb5ef
Align SeCreateTokenPrivilege with the other privileges
2025-05-16 20:10:50 +01:00
ikelos and GitHub
1a71b03b8d
Merge pull request #1791 from volatilityfoundation/feature/code-coverage
...
Add in coverage recording to the test process
2025-05-11 13:55:45 +01:00
ikelos and GitHub
28a72b8dd8
Merge pull request #1802 from eve-mem/linux_lsof_smear_comment
...
Linux: Add comment for explaining the behaviour with smear
2025-05-10 15:10:25 +01:00
eve
92eae9c50f
Linux: Add comment for explaining the behaviour with smear
2025-05-09 09:06:43 +01:00
ikelos and GitHub
ff6de6eab4
Merge pull request #1795 from Abyss-W4tcher/dentry_names_forward_slashes
...
Linux: prevent "forward slashes only" dentry names
2025-05-08 23:12:11 +01:00
ikelos and GitHub
686057d806
Merge pull request #1800 from SolitudePy/develop
...
add functions to etwpatch
2025-05-07 22:03:37 +01:00
SolitudePy and GitHub
f719efb9ec
dupe
2025-05-07 20:39:46 +03:00
SolitudePy
9ddf2d9abb
refs
2025-05-07 19:55:30 +03:00
SolitudePy
fc7e13f6f8
black
2025-05-07 19:30:58 +03:00
SolitudePy
94a0292328
add functions to etwpatch
2025-05-07 19:05:05 +03:00
ikelos and GitHub
57b28e5fa2
Merge pull request #1798 from volatilityfoundation/issues/fix-exe-build
...
Reformat and install volatility package deps before build
2025-05-06 23:06:43 +01:00
ikelos and GitHub
142add17a5
Merge pull request #1799 from volatilityfoundation/stable
...
Stable
2025-05-06 22:41:52 +01:00
ikelos and GitHub
606fecf5f8
Update volatility3/framework/plugins/windows/vadyarascan.py
2025-05-06 22:41:33 +01:00
ikelos and GitHub
c0c7119c38
Update volatility3/framework/plugins/windows/thrdscan.py
2025-05-06 22:41:27 +01:00
ikelos and GitHub
718f8ca2b5
Update volatility3/framework/plugins/linux/vmayarascan.py
2025-05-06 22:41:21 +01:00
ikelos and GitHub
65d3ff63bc
Merge branch 'develop' into stable
2025-05-06 22:37:47 +01:00
Mike Auty
ee445d9746
Add in workflow_dispatch for pyinstaller action
2025-05-06 22:27:03 +01:00
Mike Auty
92673be42c
Reformat and install volatility package deps before build
2025-05-06 22:15:38 +01:00
ikelos and GitHub
a7d64ad39d
Merge pull request #1796 from volatilityfoundation/release/v2.26.0
...
Release/v2.26.0
v2.26.0
2025-05-06 21:27:58 +01:00
ikelos and GitHub
bb65fa31a6
Merge branch 'stable' into release/v2.26.0
2025-05-06 21:09:27 +01:00
Abyss Watcher
2759df89db
tag potentially smeared dentry names
2025-05-06 00:31:09 +02:00