WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-12 20:57:39 +02:00
Code Issues Packages Projects Releases Wiki Activity
3,719 Commits 80 Branches 17 Tags
2a459266ba1555f6f2e15729a3e8c2d2e98bb3b2
Commit Graph
3719 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
ikelosandGitHub 2a459266ba Merge pull request #905 from volatilityfoundation/feature/canonical-helper 
Add in the canonical helper functions for translating between volatility address ranges and intel canonical addresses
 2023-02-03 00:29:07 +00:00
Mike Auty 3297ba02e7 Core: Rather than scheduling it daily, only do it on commits 2023-01-29 12:46:06 +00:00
Mike Auty c2a1afb0ba Core: Update codeql action to only run once a week 2023-01-29 12:42:17 +00:00
ikelosandGitHub 91ec909b3c Merge pull request #903 from paulkermann/fix/missing-import 
Fix missing import
 2023-01-16 11:08:05 +00:00
Paul Kermann f036acdeb8 missing import 2023-01-16 13:02:20 +02:00
Mike Auty 4cafc982f4 Windows: Fix up callbacks typos and typing info 2023-01-16 10:47:09 +00:00
ikelosandGitHub 9f607d6903 Merge pull request #902 from paulkermann/bugfix/cmregisterscallbacks_smearing 
Handle smearing in volatility callbacks plugin
 2023-01-16 10:42:40 +00:00
Paul Kermann 5e33a98481 change default value to None 2023-01-16 12:39:08 +02:00
ikelosandGitHub 648fa78c95 Merge pull request #900 from paulkermann/improv/extra_logging_symbol_table_from_offset 
Add debug message for symbol_table_from_offset
 2023-01-16 10:18:19 +00:00
Paul Kermann 5aca49388e fix smearing 2023-01-16 12:01:45 +02:00
Paul Kermann bd291c43d5 added debug message 2023-01-16 10:15:36 +02:00
Mike Auty 1641a6e4c4 Windows: Fix up black issue with vadinfo 2023-01-12 19:58:51 +00:00
ikelosandGitHub 3cf47b9260 Merge pull request #835 from paulkermann/improv/vadinfo_containing_address 
Added new containing address flag to vadinfo plugin
 2023-01-12 19:05:20 +00:00
ikelosandGitHub adbc33ceed Merge branch 'develop' into improv/vadinfo_containing_address 2023-01-12 19:05:11 +00:00
Mike Auty a1eeecf6de Layers: Fix uncaught exception in Elf layer 2023-01-09 21:32:19 +00:00
Mike Auty cd89e39ee0 Layers: Fix QEMU layer cutting off the last byte of the config 2023-01-06 22:10:50 +00:00
Mike Auty af3b70320e linux: Apply black linting to outstanding files 2023-01-06 10:18:17 +00:00
ikelosandGitHub a9928d66f1 Merge pull request #597 from gcmoreira/linux_sockstats_plugin 
Linux sockstats plugin

Merging without black linting, but will add that as soon as it's landed.  This was waiting on review but the decision to move forward was made on Wednesday.
 2023-01-06 10:16:14 +00:00
ikelosandGitHub a19c2b8d14 Merge branch 'develop' into linux_sockstats_plugin 2023-01-06 09:35:37 +00:00
Mike Auty c1e425217b Initial canonical helper addition 
The intel 64-bit 4-page paging mechanism allows for 48-bit virtual
addresses.  They introduced a convention that the higher bits must
be set a particular way to avoid operating system developers abusing
those bits and creating problems that would be difficult to resolve in
the future.

Volatility requires that addresses for mapping or translation fit within
the available bounds of the virtual address space.  This unfortunately
means that addresses that have the protections against abuse in place
can may live outside this range.

This provides two function (canonicalize and decanonicalize) which will
either set the appropriate sign extension or remove it.  The
decanonicalize function will return an adress outside of the address
range if the original value was not canonical.
 2023-01-05 10:55:30 +00:00
ikelosandGitHub a6fb0f2ebc Merge pull request #888 from volatilityfoundation/stable 
Stable
 2022-12-14 20:40:36 +00:00
ikelosandGitHub d67ad9f8da Merge branch 'develop' into stable 2022-12-14 20:18:45 +00:00
ikelosandGitHub 2b46e97e52 Merge pull request #887 from volatilityfoundation/release/v2.4.0 
Prepare for the 2.4.0 release, the major version has jumped a few numbers for compatibility, but this is the next release including the following:

    New plugins
        linux.mountinfo
        linux.psaux
        windows.devicetree
        windows.joblinks
        windows.ldrmodules
        windows.mbrscan
        windows.mftscan
        windows.sessions
    Introduced the concept of modules and module requirements
    Unified symbol handling and ISF file caching between OS versions
    Better QEVM support (fixed the QEMU PCI hole)
    Exposed an API for automatic PDB symbol table use
    Improved contributed documentation
    Various bug fixes and changes across the codebase
v2.4.0 		2022-12-14 19:39:11 +00:00
Mike Auty 92ece08c5f Core: Fix up file close issue 2022-12-14 18:51:09 +00:00
ikelosandGitHub 057d314aa0 Merge pull request #879 from digitalisx/fix/runs-on-version 
Fix: workflow `runs-on` version to `ubuntu-20.04`.
 2022-12-08 16:20:07 +00:00
Donghyun Kim 632fe0b671 Fix: ubuntu version to 20.04 2022-12-09 01:00:16 +09:00
Donghyun Kim 5f4e2716db Fix: ubuntu-latest version 2022-12-08 16:26:54 +09:00
Donghyun KimandGitHub 06d70eb9b2 Merge branch 'volatilityfoundation:develop' into develop 2022-12-08 13:44:23 +09:00
Mike Auty e67bac4080 Testing: Fix unclosed file open 2022-12-07 21:25:22 +00:00
Mike Auty 4cf0a185e3 Core: Bump minimum python 3 version for pypi build 2022-12-07 21:12:49 +00:00
Mike Auty 12109c6f72 Core: Fix up lint issue from pull request 2022-12-07 21:11:22 +00:00
Mike Auty 441be4535c Core: Fix up black workflow action 2022-12-07 21:09:32 +00:00
ikelosandGitHub 02d6dbead7 Merge pull request #839 from digitalisx/fix/ssl-error-for-python37 
Fix: unverified retrieval SSL Error for Python `3.7`.
 2022-12-07 21:05:17 +00:00
ikelosandGitHub a5799cc24c Merge branch 'develop' into fix/ssl-error-for-python37 2022-12-07 21:05:10 +00:00
ikelosandGitHub c73a1485b5 Merge pull request #838 from volatilityfoundation/feature/python-37 
Core: Bump to python 3.7 with warnings for old global config variables
 2022-12-07 21:04:17 +00:00
Mike Auty 66d63676ed Core: Fix issue in constants code based on CodeQL result 2022-12-07 20:54:52 +00:00
ikelosandGitHub b4e9e9203a Merge branch 'develop' into feature/python-37 2022-12-07 20:50:40 +00:00
Mike Auty bd402772c7 Core: Apply black to the entire codebase and add workflow 2022-12-07 20:48:14 +00:00
ikelosandGitHub 06ced0d59a Merge pull request #855 from volatilityfoundation/drivermodule 
Add drivermodule plugin and wrap common access to a Drver's names in …
 2022-12-07 20:18:16 +00:00
Donghyun KimandGitHub a8b06b4ed9 Merge branch 'volatilityfoundation:develop' into fix/ssl-error-for-python37 2022-12-08 01:37:22 +09:00
ikelosandGitHub b63424cec3 Merge pull request #727 from digitalisx/feature/vadwalk 
Feature: implement `VADWalk` plugin.
 2022-12-07 16:21:36 +00:00
ikelosandGitHub 7f666da4a1 Merge branch 'develop' into feature/python-37 2022-12-06 23:50:49 +00:00
Donghyun KimandGitHub 566eacfd0f Merge branch 'volatilityfoundation:develop' into feature/vadwalk 2022-11-30 13:12:08 +09:00
Mike Auty e694713b20 Github: Backport action changes to 2.4.0 release 2022-11-30 01:05:25 +00:00
ikelosandGitHub 0ffd2067cd Merge pull request #873 from digitalisx/fix/workflow 
Fix: ubuntu `runs-on` version for workflow error.
 2022-11-30 01:03:21 +00:00
Donghyun KimandGitHub 27ac31d515 Merge pull request #5 from digitalisx/fix/workflow 
Fix/workflow
 2022-11-30 04:16:36 +09:00
Donghyun KimandGitHub 3fda434520 Merge branch 'volatilityfoundation:develop' into fix/workflow 2022-11-30 04:10:59 +09:00
Donghyun Kim 130baa7f34 Remove: env for build 2022-11-30 04:10:40 +09:00
Donghyun Kim 7aaf157e07 Remove: env 2022-11-30 04:09:28 +09:00
Donghyun Kim 372003b0e4 Fix: more detail ubuntu version 2022-11-30 04:07:18 +09:00