Mike Auty
2c077c08c2
Windows: Catch more PDB URL errors
2021-01-24 16:44:39 +00:00
ikelos and GitHub
ae872591f7
Merge pull request #429 from cstation/patch-1
...
Fix VMware layer tag reading
2021-01-21 10:12:32 +00:00
cstation and GitHub
9ef341907f
Improve VMware Tag reading
...
Fix magic headers and properly read irregular-sized tags
2021-01-21 10:08:20 +01:00
Mike Auty
a90f16cb23
Merge branch 'release/v2.0.0' into develop
2021-01-20 21:56:13 +00:00
Mike Auty
5235f43416
Plugins: Fix list_files with suitable required version.
2021-01-20 21:55:32 +00:00
ikelos and GitHub
c0749f3e68
Merge pull request #418 from volatilityfoundation/feature/shorter-exceptions
...
CLI: Dampen exceptions at low log levels
2021-01-20 09:52:02 +00:00
ikelos and GitHub
a92866bca0
Merge pull request #364 from volatilityfoundation/mac_lsmod_smear_proof
...
implement a smear proof mac lsmod
2021-01-19 22:57:30 +00:00
cstation and GitHub
e44094fb73
Fix VMware layer tag reading
...
The VMware layer did not handle tags having a different data-size. This fixes the majority of cases, since the needed tags for determining the memory regions will often be located in the regular-sized tags.
2021-01-19 21:55:01 +01:00
Andrew Case
f13f5e438d
Address comments
2021-01-19 14:27:24 -06:00
ikelos and GitHub
af28bf8da6
Merge pull request #428 from japhlange/netscan-win10-10586-x86-fixes
...
Adds netscan symbols for Win10 10586 x86
2021-01-14 23:16:33 +00:00
Jan
df89f1ceb9
adds symbols for win10 10586 x86
2021-01-14 19:49:49 +01:00
Mike Auty
b62fd9d7ad
Merge branch 'release/v2.0.0' into develop
2021-01-14 09:14:55 +00:00
ikelos and GitHub
1477887831
Merge pull request #426 from volatilityfoundation/issue_409_vacb_validity
...
refs #409 VACB does not expose is_valid() - do the validity check inline
2021-01-14 09:12:51 +00:00
iMHLv2
b61185c6b0
refs #409 VACB does not expose is_valid() - do the validity check inline
2021-01-13 21:23:12 -06:00
Mike Auty
2ebc1da155
Merge branch 'release/v2.0.0' into develop
2021-01-13 00:55:48 +00:00
Mike Auty
89a3d441ff
Layerwriter: Ensure we autochoose by default
2021-01-13 00:54:50 +00:00
iMHLv2 and Mike Auty
2a180c135e
refs #368 fix handles on 32-bit windows 8 and 10 - finding SAR is not necessary on these versions
2021-01-13 00:29:01 +00:00
ikelos and GitHub
1bfaf960ef
Merge pull request #421 from volatilityfoundation/issue_368_windows_handles_x86_win8
...
refs #368 fix handles on 32-bit windows 8 and 10 - finding SAR is not necessary on these platforms
2021-01-13 00:27:12 +00:00
ikelos and GitHub
f3b593696a
Merge pull request #419 from japhlange/netlist
...
netstat: fixes two off-by-one errors in port bitmap parsing
2021-01-10 16:30:02 +00:00
Jan
e92920f6e6
another off-by-one error when parsing bitmaps
2021-01-10 17:23:00 +01:00
Jan
63ba549bca
fixes off-by-one error in port bitmap parsing
2021-01-10 17:08:14 +01:00
Mike Auty
53169b15ab
Intel: Fix PAE typo
2021-01-08 17:40:52 +00:00
Mike Auty
a68a99f636
Merge branch 'release/v2.0.0' into develop
2021-01-08 01:14:57 +00:00
Mike Auty
de2f464a71
Documentation: Fix up the surjective line
...
This makes #389 obsolete.
2021-01-08 01:14:34 +00:00
Mike Auty
065dcb6cdb
CLI: Dampen exceptions at low log levels
2021-01-07 10:21:55 +00:00
Mike Auty
e108d8a5c4
Layers: Fix typo in pae patch
2021-01-07 10:14:35 +00:00
ikelos and GitHub
782e59694a
Merge pull request #397 from japhlange/netlist
...
Netstat for x64 Windows
2021-01-07 10:09:37 +00:00
Jan
f0f5f1978d
renamed to more consistent plugin name
2021-01-07 11:00:58 +01:00
Mike Auty
bb5a63246e
Merge branch 'release/v2.0.0' into develop
2021-01-06 21:21:37 +00:00
ikelos and GitHub
1ea9a493a8
Merge pull request #415 from volatilityfoundation/windows_info_add_Is64Bits_and_IsPAE
...
add Is64Bit and IsPAE properties to the windows.info plugin
2021-01-06 21:10:26 +00:00
ikelos and GitHub
95c19f1676
Merge pull request #416 from volatilityfoundation/issues/intel-pae-metadata
...
Layers: Ensure intel PAE reports pae in the metadata
2021-01-06 21:09:33 +00:00
Mike Auty
8de5991812
Timerliner: Improve timeliner caching
...
This duplicates config values if the requirement are identical, which
speeds up the automagic considerably. Note that this means even the
requirement descriptions must match, but for safey that probably makes
sense.
2021-01-06 21:08:26 +00:00
Mike Auty
84aa3b5e70
Automagic: Improve vmware layer stacker diagnostics
2021-01-06 21:08:26 +00:00
ikelos and GitHub
cbe7166257
Merge pull request #411 from volatilityfoundation/issues/issue408
...
Issues/issue408
2021-01-06 21:07:26 +00:00
Mike Auty
01b2a38d84
Volshell: Allow a script to be run at startup
2021-01-06 21:06:09 +00:00
Mike Auty
b10b0254b7
Volshell: Add support for running scriptlets
2021-01-06 21:06:09 +00:00
ikelos and GitHub
cc3818391c
Merge pull request #405 from volatilityfoundation/issues/mac_vpager_native_layer
...
Linux: Use native_layer when constructing from a pointer offset
2021-01-06 21:05:00 +00:00
ikelos and GitHub
b3339437fb
Merge pull request #404 from volatilityfoundation/issues/bad_dtb_finder_code
...
Automagic: Windows DTB finder was too limited
2021-01-06 21:04:07 +00:00
ikelos and GitHub
a6f176ac28
Merge pull request #402 from volatilityfoundation/feature/better-object-description
...
Objects: Make repr(object) more useful
2021-01-06 21:01:18 +00:00
Mike Auty
7db3e81850
Merge branch 'release/v2.0.0' into develop
2021-01-06 20:59:08 +00:00
Mike Auty
e1032623fe
Layers: Ensure intel PAE reports pae in the metadata
2021-01-06 19:28:24 +00:00
iMHLv2
d7d176d040
add Is64Bit and IsPAE properties to the windows.info plugin
2021-01-06 11:36:56 -06:00
iMHLv2
53397117ef
remove unnecessary and unused imports from the windows extensions init file
2021-01-06 10:30:01 -06:00
iMHLv2
2c3b6668d5
refs #368 fix handles on 32-bit windows 8 and 10 - finding SAR is not necessary on these versions
2021-01-06 10:10:51 -06:00
Mike Auty
f75e77997d
Layerwriter: Remove erroneous debugging statements
2021-01-03 10:38:49 +00:00
Mike Auty
d1b10781d4
CLI: Parse windows file as files not URIs
...
Fixes #408
2020-12-30 18:06:41 +00:00
Jan
71e48cc672
complex objects are not passed as arguments directly anymore, but rather by offset
2020-12-28 21:51:28 +01:00
Jan
f731ceba3a
optimizations as raised by #397
2020-12-28 21:22:50 +01:00
Mike Auty
1c2a9921ff
Windows: Partial fix for #368 error messages
2020-12-27 15:21:18 +00:00
Mike Auty
feefc93adc
CLI: Fix inaccurate documentation
2020-12-27 15:21:18 +00:00
Mike Auty