Daniel Davidov
2e1b77f4b3
Move LowStubLayout constants to windows.constants
...
* Moved constants out of the class and moved to constants.windows
* Applied ruff and black
2025-01-25 16:22:49 +02:00
Daniel Davidov
17d52c27bf
Update method_low_stub_offset & run ruff & black
...
* Eliminate unnecessary scanning for 32 bit processors where the structure PROCESSOR_START_BLOCK doesn't exist
* Put offsets as values of constants in a class - LowStubLayout.
* Add documentation in the class and in the function method_low_stub_offset
* Run "ruff check --fix" and "black ."
* Checked the method works on 3 physical machines
2025-01-24 21:09:28 +02:00
Daniel Davidov
c10572905f
Add low stub offset kernel detection
...
reference: Memprocfs and https://www.youtube.com/watch?v=_ShCSth6dWM
2025-01-22 10:45:52 +02:00
ikelos and GitHub
d2314ed1ef
Merge pull request #1537 from volatilityfoundation/issues/improve-jsonschema-speed
...
Issues/improve jsonschema speed
2025-01-20 08:26:32 +00:00
ikelos and GitHub
51726cd14f
Merge pull request #1553 from gcmoreira/parity_release_harden_page_cache
...
Linux - Parity release harden Page Cache
2025-01-20 08:17:16 +00:00
ikelos and GitHub
0f09ecd126
Merge pull request #1563 from volatilityfoundation/revert-1561-pre_linux_pagecache_recoverfs_support
...
Revert "Pre linux.pagecache.recoverfs support"
2025-01-20 08:16:24 +00:00
Gustavo Moreira
ec7a101eb9
linux: page_cache.InodePages plugin: Remove unnecesary casting
2025-01-20 11:05:51 +11:00
Gustavo Moreira
bf76aad1e2
linux: page_cache.Files plugin: Ensure the inode's i_link pointer is readable
2025-01-20 11:05:46 +11:00
ikelos and GitHub
e158ea73b2
Merge pull request #1562 from volatilityfoundation/revert-1513-env_var_missing_exception_handler
...
Revert "Add missing exception handling in env var recovery. Prevent backtraces"
2025-01-20 00:00:21 +00:00
ikelos and GitHub
e18bffdde9
Revert "Pre linux.pagecache.recoverfs support"
2025-01-19 23:51:28 +00:00
ikelos and GitHub
74b98e62c7
Revert "Add missing exception handling in env var recovery. Prevent backtraces"
2025-01-19 23:42:41 +00:00
ikelos and GitHub
00a69c9e49
Merge pull request #1561 from Abyss-W4tcher/pre_linux_pagecache_recoverfs_support
...
Pre linux.pagecache.recoverfs support
2025-01-19 16:57:21 +00:00
Abyss Watcher
d42ffc01e2
typo
2025-01-19 17:33:47 +01:00
Abyss Watcher
a02243bb3c
2.1.0 -> 3.0.0 InodePages bump
2025-01-19 17:27:27 +01:00
Abyss Watcher
59703045c7
switch calling convention to context and layer name
2025-01-19 17:26:42 +01:00
ikelos and GitHub
89c6d7a80e
Merge pull request #1338 from Abyss-W4tcher/add_scatterlists
...
Introduce scatter-gather scatterlists
2025-01-19 16:25:59 +00:00
Abyss Watcher
eddba98ef7
type hint format_symlink
2025-01-19 17:09:59 +01:00
Abyss Watcher
ecae545f58
typo
2025-01-19 17:05:52 +01:00
Abyss Watcher
452d6e705b
1.0.1 -> 1.1.0 Files bump
2025-01-19 16:26:25 +01:00
Abyss Watcher
da068676d1
typo
2025-01-19 15:16:09 +01:00
Abyss Watcher
818ddb746b
2.0.0 -> 2.1.0 InodePages bump
2025-01-19 15:15:55 +01:00
Abyss Watcher
e8b44efc17
add and leverage write_inode_content_to_stream
2025-01-19 15:13:26 +01:00
Abyss Watcher
8594106005
1.0.1 -> 1.2.0 Files bump
2025-01-19 15:12:10 +01:00
Abyss Watcher
6f2ff4f7c6
add InodeSize column to Files
2025-01-19 15:11:03 +01:00
Abyss Watcher
48a8f3929b
add and leverage follow_symlinks parameter
2025-01-19 15:10:32 +01:00
Abyss Watcher
1d0159325f
switch to InodeUser.format_symlink
2025-01-19 15:09:20 +01:00
Abyss Watcher
d325e1ca17
add inode_size and format_symlink to Inode* dataclasses
2025-01-19 15:08:27 +01:00
Abyss Watcher
08830fee05
use architectures.LINUX_ARCHS
2025-01-19 15:06:42 +01:00
Abyss Watcher
726fbe6cce
2.17.1 -> 2.18.0 bump
2025-01-19 13:01:14 +01:00
Abyss-W4tcher and GitHub
38fe41b4f0
Merge branch 'volatilityfoundation:develop' into add_scatterlists
2025-01-19 12:56:45 +01:00
ikelos and GitHub
4452aa6e23
Merge pull request #1560 from Abyss-W4tcher/isf_objects_list_to_hashmap
...
Intermed: leverage iterable hashmaps instead of lists
2025-01-18 15:10:36 +00:00
Abyss Watcher
c2ef3c2fe5
add fixme about merge operator
2025-01-18 15:59:51 +01:00
Abyss Watcher
0ee016e655
2.17.0 -> 2.17.1 bump
2025-01-18 15:50:28 +01:00
Abyss Watcher
c5628c5d79
revert the mistakenly removed types type hinting
2025-01-18 15:48:44 +01:00
Abyss Watcher
4b3d93b0f0
2.17.0 -> 2.18.0 bump
2025-01-18 15:00:03 +01:00
Abyss Watcher
ba09db6952
improve comments
2025-01-18 14:54:04 +01:00
Abyss Watcher
3a2933155b
improve comments
2025-01-18 14:51:52 +01:00
Abyss Watcher
aa99410dd2
prefer KeysView iterable to lists
2025-01-18 14:51:31 +01:00
Abyss Watcher
1e9551b053
types base class and comments improvements
2025-01-18 14:50:28 +01:00
Abyss Watcher
fb93d2333b
improve comments
2025-01-18 14:50:14 +01:00
Abyss Watcher
d46cb3328d
appropriate symbols type hinting
2025-01-18 14:48:46 +01:00
Abyss Watcher
0849c163a1
appropriate symbols type hinting
2025-01-18 14:48:37 +01:00
ikelos and GitHub
f478044e49
Merge pull request #1330 from Abyss-W4tcher/modxview_plugin
...
New linux plugin: modxview
2025-01-18 13:26:52 +00:00
Abyss Watcher
8095924e8a
typo
2025-01-18 13:46:13 +01:00
Abyss Watcher
0b82f73137
functools caching and doc.
2025-01-18 13:45:30 +01:00
Abyss Watcher
bb6556dbc0
correct arguments for pre_4_10_rc1
2025-01-18 13:37:52 +01:00
Abyss Watcher
3b679cbafb
explicit None check
2025-01-18 13:26:43 +01:00
Abyss Watcher
cc9486cf03
pre-process module triaging to improve readability
2025-01-18 02:19:11 +01:00
Abyss-W4tcher and GitHub
ca98aa25ed
Merge branch 'develop' into modxview_plugin
2025-01-18 02:16:52 +01:00
ikelos and GitHub
0cd1520c92
Merge pull request #1551 from gcmoreira/linux_fix_pslist_task_credentials
...
linux: pslist: fix task credentials rendering
2025-01-17 16:32:21 +00:00
Daniel Davidov