 Mike Auty
|
2d2b3c27dc
|
Fix up the symbols import in volshell.
|
2018-09-02 00:58:27 +01:00 |
|
|
Mike Auty
|
1299fa4a36
|
Fix up volshell failing on missing modules (eg, yara) and tart up the setup file.
|
2018-09-02 00:52:17 +01:00 |
|
|
Mike Auty
|
5668f271df
|
Fix issue when handling zip files on windows.
|
2018-09-02 00:13:33 +01:00 |
|
|
Mike Auty
|
3713e9484c
|
Add in a setup.py and fix up the documentation so setuptools can build it.
|
2018-09-01 22:28:03 +01:00 |
|
|
Mike Auty
|
312e74cd08
|
Improve typing information for verinfo.
|
2018-09-01 22:14:34 +01:00 |
|
|
Mike Auty
|
0550186ed2
|
Fix a couple bugs in moddump.
|
2018-09-01 22:04:51 +01:00 |
|
|
Mike Auty
|
dff7e6d6df
|
Add in support for specific symbol directories.
|
2018-09-01 21:57:49 +01:00 |
|
|
Mike Auty
|
9d05482e50
|
Make sure we appropriately use classmethods now they're in place.
|
2018-08-30 16:40:39 +01:00 |
|
|
Mike Auty
|
ce63ee2e83
|
Conver the verinfo plugin to using the classmethod moddump.
|
2018-08-30 12:03:17 +01:00 |
|
|
Mike Auty
|
edac0bee6f
|
Update moddump to use classmethods.
|
2018-08-30 12:03:17 +01:00 |
|
|
Mike Auty
|
5791cfaab7
|
Stop overriding the builtin filter method, and ensure suitable parameter names.
|
2018-08-30 11:41:19 +01:00 |
|
|
superponibleandikelos
|
26a4eb66d9
|
move import to the top
|
2018-08-30 10:57:18 +01:00 |
|
|
superponibleandikelos
|
f5e075ab72
|
change comment to docstring
|
2018-08-30 10:57:18 +01:00 |
|
|
superponibleandikelos
|
eb9a426760
|
switch enum.Enum to enum.IntEnum
|
2018-08-30 10:57:18 +01:00 |
|
|
Dave Lassalleandikelos
|
c676f17fc8
|
refs #39 - update _CM_KEY_BODY.get_full_key_name()
|
2018-08-30 10:57:18 +01:00 |
|
|
Mike Auty
|
f4dd40ba0b
|
Ensure we're catching the appropriate expcetions rather than all of them.
|
2018-08-30 09:41:39 +01:00 |
|
|
superponible
|
19dcb80de6
|
catch os detection exception, change loop break to continue
|
2018-08-29 20:59:42 -05:00 |
|
|
Mike Auty
|
cc99d08c88
|
Move userassist keys over to a JSON data file.
|
2018-08-30 00:52:02 +01:00 |
|
|
Mike Auty
|
93607b2586
|
Fix up exception catching with no exception specified.
|
2018-08-30 00:36:32 +01:00 |
|
|
Mike Auty
|
fe9a1617c9
|
Include printkey in the hivelist conversion.
|
2018-08-29 23:31:39 +01:00 |
|
|
Mike Auty
|
0aa6ba0fe0
|
Convert hivelist to classmethod style.
|
2018-08-29 23:29:51 +01:00 |
|
|
Mike Auty
|
059be517fc
|
Fix up minor typing issues.
|
2018-08-29 23:29:00 +01:00 |
|
|
Mike Auty
|
303c63da68
|
Revert userassist to creating a new layer for each userassist data.
|
2018-08-29 23:14:28 +01:00 |
|
|
Mike Auty
|
62451ecef6
|
Reformat code and use has_member instead of RelativeChildOffset.
|
2018-08-29 23:01:02 +01:00 |
|
|
Mike Auty
|
3a6b4ad35c
|
Add in the has_member method for objects and templates.
|
2018-08-29 22:54:56 +01:00 |
|
|
superponible
|
40b83c505a
|
refactor userassist, stop creating registry tables for each entry
|
2018-08-29 16:10:53 -05:00 |
|
|
superponibleandikelos
|
4d0bdb7d72
|
removed additional object creation for determining OS version
|
2018-08-29 21:51:52 +01:00 |
|
|
superponibleandikelos
|
140ed54331
|
use context.module for userassist
|
2018-08-29 21:51:52 +01:00 |
|
|
superponibleandikelos
|
719f1d30e8
|
clean up exception handling
|
2018-08-29 21:51:52 +01:00 |
|
|
superponibleandikelos
|
9723eb847e
|
handle win7 vs winxp assignments together
|
2018-08-29 21:51:52 +01:00 |
|
|
superponibleandikelos
|
57166fa549
|
change method for detecting win7
|
2018-08-29 21:51:52 +01:00 |
|
|
superponibleandikelos
|
93e05f4def
|
longer loop variable names
|
2018-08-29 21:51:52 +01:00 |
|
|
superponibleandikelos
|
dcb4ae08e3
|
change check for valid node path
|
2018-08-29 21:51:52 +01:00 |
|
|
Dave Lassalleandikelos
|
c7e0ff9fa0
|
docstring and comment about get() vs _missing_()
|
2018-08-29 21:51:52 +01:00 |
|
|
Dave Lassalleandikelos
|
0d12a6dbf3
|
alternative to RegValueTypes enum in lieu of _missing_()
|
2018-08-29 21:51:52 +01:00 |
|
|
Dave Lassalleandikelos
|
4b500b66e9
|
fix variable name mismatch
|
2018-08-29 21:51:52 +01:00 |
|
|
Dave Lassalleandikelos
|
d6a1e9acfc
|
add an optional filter to hivelist to return only matching names
|
2018-08-29 21:51:52 +01:00 |
|
|
Dave Lassalleandikelos
|
32bcdf2ebc
|
add userassist types to registry.json
|
2018-08-29 21:51:52 +01:00 |
|
|
Dave Lassalleandikelos
|
823cbddef5
|
fix an off by one error in printing hex
|
2018-08-29 21:51:52 +01:00 |
|
|
Dave Lassalleandikelos
|
ebd528610d
|
initial userassist plugin
|
2018-08-29 21:51:52 +01:00 |
|
|
Michael Lighandikelos
|
6862573734
|
only ask for the requirements that we need
|
2018-08-29 15:10:46 +01:00 |
|
|
Michael Lighandikelos
|
617510f6d6
|
change how we iterate through the symbol_generator results
|
2018-08-29 15:10:46 +01:00 |
|
|
Michael Lighandikelos
|
ea63c7e80e
|
define a find_address() method for consistent behavior for 32 and 64-bit systems
|
2018-08-29 15:10:46 +01:00 |
|
|
Michael Lighandikelos
|
45ea3437f1
|
explicitly list the nt_symbols requirement
|
2018-08-29 15:10:46 +01:00 |
|
|
Michael Lighandikelos
|
13e5145e46
|
use from ... import ... statements
|
2018-08-29 15:10:46 +01:00 |
|
|
Michael Lighandikelos
|
34bb059cfe
|
add the ssdt plugin for windows
|
2018-08-29 15:10:46 +01:00 |
|
|
Mike Auty
|
b84a7abd37
|
Ensure we only offer the configuration options we use.
|
2018-08-28 22:39:40 +01:00 |
|
|
Mike Auty
|
244af47a2a
|
Swap inheritted config options for explicit config options.
|
2018-08-28 22:32:52 +01:00 |
|
|
Mike Auty
|
ee38c9c4fe
|
Add in caching for the lengthy symbol sorting.
|
2018-08-23 17:29:16 +01:00 |
|
|
Mike Auty
|
b74eb68c04
|
Pull the check on layer names out so that DataLayerInterface types get it as well.
|
2018-08-22 09:33:47 +01:00 |
|