WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-08-22 14:32:21 +02:00
Code Issues Packages Projects Releases Wiki Activity
2,288 Commits 80 Branches 17 Tags
34ff856a7900a82e971cb4061a9c60b5ee863a75
Commit Graph
91 Commits
Author SHA1 Message Date
Mike Auty 13e36ec58a Core: Rerun yapf across the codebase. 2020-07-28 16:57:48 +01:00
Mike Auty 61563350b3 Linux/Mac: Refactor *nix Utilities classes 2020-07-28 11:15:16 +01:00
Mike Auty 667329e2fd Mac: Fix pslist pid_filter function 2020-07-23 02:02:01 +01:00
Mike Auty 9295f41586 Plugins: Convert existing plugins over to use a list for PIDs 2020-07-23 02:02:01 +01:00
Mike Auty a173f12fce Plugins: Normalize InvalidAddress exception handling 2020-07-18 16:38:49 +01:00
Mike Auty 43ae291815 Plugins: Add back in the checks because the filter might trip them 2020-07-18 16:38:49 +01:00
Mike Auty 73ad2bcd4e Plugins: Since procs have been instantiated, checks aren't needed 2020-07-18 16:38:49 +01:00
Mike Auty d15b23aa19 Plugins: Fix pslist_method inconsistencies 2020-07-18 16:38:49 +01:00
Mike Auty 7673dd8d2d Mac: Consolidate methods of listing processes 
This also updates all other plugins that rely on process listing
and theoretically allows them to choose their preferred method of
process listing.  At the moment, the default (first in the method list)
is chosen.  An optional pslist_method StringRequirement can be added to
each plugin, but using the list in the requirements could break if the
pslist plugin is too old (ie, using the list would happen before the
PluginRequirement gets checked).

If this is a feature we want, it should be easy to add to all but
netstat, which does not parameterize the list of processes.
 2020-07-18 16:38:49 +01:00
Andrew Caseandikelos 0ccb1f82e6 Change copyright year and plugin doc strings 2020-07-18 16:38:49 +01:00
Andrew Caseandikelos 4799e8551e Add process listing through examination of the process group hash table 2020-07-18 16:38:49 +01:00
Mike Auty 888b432667 Mac: Fix an error decoding bad UTF-8 values 
Closes #228.
 2020-06-28 01:07:16 +01:00
Mike Auty 0ffe318cb0 Project: Update copyright headers for files added in 2020. 2020-06-10 21:13:37 +01:00
Mike Auty d3ba947a56 Mac: Fix case names of certain plugins 
Closes #201.
 2020-06-10 21:02:16 +01:00
Mike Auty 863b9915c9 Automagic: Refactor mac aslr_finding 2020-06-10 19:39:20 +01:00
Mike Auty 2748ce32d8 Initial attempts at cloning a symbol table 2020-06-10 19:39:20 +01:00
Mike Auty 0c43beb42d Core: Apply yapf across all files again. 2020-05-05 22:14:33 +01:00
Andrew Caseandikelos 719cd0d476 Move module gathering into generator 2020-04-08 18:17:34 +01:00
Andrew Caseandikelos b42dfd614a Add API for mapping kernel addresses to kernel symbols or a specific kext 2020-04-08 18:17:34 +01:00
Mike Auty b8bc0f0ed6 mac.netstat: Fix up typing and interface imports 2020-03-12 19:53:51 +00:00
Andrew Caseandikelos 7d6d74bc91 Update order of arguments 2020-03-12 19:47:15 +00:00
Andrew Caseandikelos 722700d2dc Add docstrings 2020-03-12 19:47:15 +00:00
Andrew Caseandikelos 7b21e83b07 Mac - convert socket gathering to class method and clean up associated code 2020-03-12 19:47:15 +00:00
Andrew Caseandikelos 5a99d35a9e update timer code 2020-02-12 19:56:37 +00:00
Andrew Caseandikelos 29cc435b5e update sysctl v2 2020-02-12 19:17:19 +00:00
Mike Auty 3f5b96f3c7 Yapf: Clean-up the whole codebase. 2020-01-14 15:44:07 +00:00
Mike Auty fda64dde95 Mac tasks: Swap the shortcircuiting order 2020-01-13 14:13:37 +00:00
Andrew Caseandikelos d7f5a13c46 Mac - properly check for broken proc pointers 2020-01-03 19:42:18 +00:00
Mike Auty face38436e layers: Fix up uses of is_valid. 2019-11-12 09:09:51 +00:00
Mike Auty 73aa73f30e Ensure we test None using is rather than ==. 2019-11-03 22:46:20 +00:00
atcuno 545376d725 Mac - update trustedbsd 2019-10-17 15:30:13 -04:00
Mike Auty 10a379b0ee Make 'import as' consistent and ensure proper plugin dependencies. 2019-10-02 01:25:03 +01:00
Mike Auty 9ac622afa0 Fix up import style to be consistent. 2019-10-01 23:46:02 +01:00
Andrew Caseandikelos a4a918ea58 Suggested changes from ikelos 2019-09-27 20:50:21 +01:00
Andrew Caseandikelos bf29e23e1c add updated mac ifconfig support 2019-09-27 20:50:21 +01:00
Mike Auty c00b820f74 Fix up recent Mac PagedInvalidAddress additions. 2019-09-27 11:21:49 +01:00
Mike Auty 153b3b7d39 Make sure we catch the most general exception for what we mean. 2019-09-27 11:19:53 +01:00
Andrew Case 2a98227306 Mac - have pstree inherit from tasks 2019-09-26 23:11:26 -05:00
Andrew Case b1d07396a0 Mac - have psaux inherit from tasks 2019-09-26 23:08:33 -05:00
Andrew Case 49c4ae2aa4 Mac - have bash inherit from tasks 2019-09-26 23:05:49 -05:00
Andrew Case a6e7c7a919 Mac - have malfind inherit from tasks 2019-09-26 23:01:37 -05:00
Andrew Case 7339c12eaa Mac - have proc maps inherit from tasks 2019-09-26 22:52:45 -05:00
Andrew Case 3af593c16a Mac - switch netstat to inherit from tasks 2019-09-26 22:07:41 -05:00
Andrew Case 2d7bc99d6a Mac - make pslist smear resistant 2019-09-26 21:57:48 -05:00
Andrew Case b4ad15c226 Mac - update lsof to inherit from tasks and be more smear resistant 2019-09-26 21:56:38 -05:00
Mike Auty e0b9d72c84 Update the license URL and LICENSE.txt 2019-09-25 21:44:05 +01:00
Mike Auty 72567e1c50 Yapf-0.28.0 rerun across the whole codebase. 2019-09-21 21:08:23 +01:00
Mike Auty 7efe19224e Make several small typing information fixes. 2019-09-17 18:01:11 +01:00
Mike Auty e922cef316 Improve docstrings for all plugins, and reformat all docstrings. 2019-09-07 22:59:54 +01:00
Mike Auty 35dbdfc69d Add in PluginRequirement for proc_maps plugin. 2019-08-27 23:35:19 +01:00