 superponibleandikelos
|
2e4a8c7247
|
add user level hives for certificates
|
2019-09-17 16:59:50 +01:00 |
|
|
superponibleandikelos
|
2053d957bc
|
update docstring copied from printkey
|
2019-09-17 16:59:50 +01:00 |
|
|
superponibleandikelos
|
36f5e47d5b
|
fix up docstrings to match yield values
|
2019-09-17 16:59:50 +01:00 |
|
|
Mike Auty
|
c6cdbc7342
|
Move the hive_iterator to HiveList, since it's more intuitively where it should live.
|
2019-09-17 16:59:50 +01:00 |
|
|
Mike Auty
|
b292188319
|
Update userassist to use the new printkey API.
|
2019-09-17 16:59:50 +01:00 |
|
|
Mike Auty
|
46c047b7b3
|
Update API slightly to return objects not strings.
|
2019-09-17 16:59:50 +01:00 |
|
|
Mike Auty
|
f2220e16b9
|
Add in initial attempt at certificate plugin.
|
2019-09-17 16:59:50 +01:00 |
|
|
Mike Auty
|
b413e4a13d
|
Refactor printkey to be more usable from other plugins.
|
2019-09-17 16:59:50 +01:00 |
|
|
Mike Auty
|
38f773fc91
|
Slightly tidy up volshell messages.
|
2019-09-17 01:04:10 +01:00 |
|
|
Mike Auty
|
fb4f8e1d74
|
Ensure we use the right memberfor mac pids.
|
2019-09-16 12:08:20 +01:00 |
|
|
Mike Auty
|
76a1bb972c
|
Restore the mac queue_event class override.
For some reason, this went missing in commit
a3caf39097, which looks to have been an
error.
|
2019-09-16 12:04:50 +01:00 |
|
|
Mike Auty
|
fc2ee7e401
|
Improve plugin category detection for systems such as volshell.
|
2019-09-16 11:36:43 +01:00 |
|
|
Mike Auty
|
16194ef114
|
Add in linux and mac volshell support.
|
2019-09-16 11:35:46 +01:00 |
|
|
Mike Auty
|
74438f053c
|
Update volshell plugin methods
|
2019-09-16 01:16:46 +01:00 |
|
|
Mike Auty
|
9d253f6e7e
|
Develop volshell with display_* functions.
|
2019-09-16 01:00:03 +01:00 |
|
|
Mike Auty
|
cc393c956a
|
Ensure Volshell doesn't try to output after exiting.
|
2019-09-16 00:59:35 +01:00 |
|
|
Mike Auty
|
5b5a7b3966
|
Fix up typing for PluginRequirement.
|
2019-09-16 00:59:04 +01:00 |
|
|
Mike Auty
|
3142ffdd69
|
Add in sphinx-rtd-theme to doc requirements.
|
2019-09-12 17:09:32 +01:00 |
|
|
Mike Auty
|
10cf65fb60
|
Add in better documentation for callbacks.
|
2019-09-10 00:43:44 +01:00 |
|
|
Michael Lighandikelos
|
4e3db7a3de
|
add PluginRequirements for ssdt and svcscan. add missing _version to svcscan
|
2019-09-08 16:08:48 +01:00 |
|
|
Michael Lighandikelos
|
1d7f2a9582
|
use ntkrnlmp.object() instead of context.object(). remove config_path argument to list* functions
|
2019-09-08 16:08:48 +01:00 |
|
|
Michael Lighandikelos
|
50548bac73
|
reformat with yapf
|
2019-09-08 16:08:48 +01:00 |
|
|
Michael Lighandikelos
|
e71b72b3a7
|
add the windows callbacks plugin
|
2019-09-08 16:08:48 +01:00 |
|
|
Mike Auty
|
421af88c29
|
Classmethod make_subconfig so other classmethods can use it.
|
2019-09-08 14:50:48 +01:00 |
|
|
Mike Auty
|
10ea65a236
|
Remove unnecessary imports.
|
2019-09-08 14:19:58 +01:00 |
|
|
Mike Auty
|
ffc7682d61
|
Ensure that layers are automatically imported when needed.
|
2019-09-08 14:13:28 +01:00 |
|
|
Mike Auty
|
03bc3d927d
|
Improve the name of a handles exposed function.
|
2019-09-08 13:22:42 +01:00 |
|
|
Mike Auty
|
3318e9c4a5
|
Fix a typo introduced in 5362e2094e.
|
2019-09-08 01:58:46 +01:00 |
|
|
Mike Auty
|
189b8c4d69
|
Update the windows info plugin with classmethods.
|
2019-09-07 23:00:41 +01:00 |
|
|
Mike Auty
|
e922cef316
|
Improve docstrings for all plugins, and reformat all docstrings.
|
2019-09-07 22:59:54 +01:00 |
|
|
Mike Auty
|
dc0a809729
|
Printkey: Don't offer two options for the same value.
|
2019-09-07 22:05:09 +01:00 |
|
|
Mike Auty
|
959e1617fd
|
Shift one-time checks out of loops.
|
2019-09-07 12:40:32 +01:00 |
|
|
Mike Auty
|
fa58722848
|
Slight documentation fixes.
|
2019-09-04 23:53:18 +01:00 |
|
|
Mike Auty
|
c88044db5b
|
Update more API documentation.
|
2019-09-04 00:34:55 +01:00 |
|
|
Mike Auty
|
a362dc109a
|
Update API documentation.
|
2019-09-03 21:28:19 +01:00 |
|
|
Mike Auty
|
b158c58310
|
Ensure non-found keys mimic found key output a little closer.
|
2019-09-01 22:44:42 +01:00 |
|
|
Mike Auty
|
952a1b9d69
|
Move printkey recursion around to get proper tree depth.
|
2019-09-01 16:17:26 +01:00 |
|
|
Mike Auty
|
f040ceed96
|
Ensure keys and values are at the same level.
|
2019-09-01 16:10:58 +01:00 |
|
|
Mike Auty
|
3d7b2a520b
|
Ensure the tree output for printkey doesn't jump into deep layers.
|
2019-09-01 16:05:51 +01:00 |
|
|
Mike Auty
|
c2feba6651
|
Remove debugging calls from layerwriter plugin.
|
2019-09-01 15:50:29 +01:00 |
|
|
Mike Auty
|
5d75d617b3
|
Add in better support for sorting BaseAbsentValues.
|
2019-08-31 22:01:01 +01:00 |
|
|
Mike Auty
|
39c4d061a1
|
Convert registry.printkey hive_walker to a class method.
|
2019-08-31 14:32:35 +01:00 |
|
|
Mike Auty
|
0cb5ca995c
|
Correctly fix the intermediate file format versions.
|
2019-08-31 14:24:22 +01:00 |
|
|
Mike Auty
|
c47ead41b1
|
Move to the SemVer versioning scheme.
|
2019-08-31 13:03:51 +01:00 |
|
|
Mike Auty
|
a3caf39097
|
Use a mapping to determine kind to class.
|
2019-08-31 12:57:53 +01:00 |
|
|
Mike Auty
|
87d0970e72
|
Remove column indicies.
They didn't look useful, and given the values were ordered by their
position in the list, it seemed appropriate to do the same with column
names.
|
2019-08-30 11:30:58 +01:00 |
|
|
Mike Auty
|
30bf820a98
|
Ensure ordering of columns in pretty printer.
|
2019-08-29 22:54:34 +01:00 |
|
|
Mike Auty
|
ae1f6f898c
|
Another small license fix for the README.txt
|
2019-08-27 23:40:00 +01:00 |
|
|
Mike Auty
|
35dbdfc69d
|
Add in PluginRequirement for proc_maps plugin.
|
2019-08-27 23:35:19 +01:00 |
|
|
Mike Auty
|
a9853eca50
|
Fix the copyright headers (and yapf) in the mac plugins.
|
2019-08-27 23:34:06 +01:00 |
|