 Gustavo Moreira
|
3a734fdeb1
|
Linux: Object extensions: Remove redundant log message header; the logger handles this formatting. If needed, we can adjust the logger's format instead
|
2024-11-12 16:23:33 +11:00 |
|
|
Gustavo Moreira
|
a2e99b2633
|
Linux: Object extensions: Fix type annotations for improved clarity and accuracy.
|
2024-11-12 16:13:50 +11:00 |
|
|
Gustavo Moreira
|
3216700d8b
|
Linux: module object extension: Fix recursion call issue
|
2024-11-12 16:05:59 +11:00 |
|
|
Gustavo Moreira
|
106b3b3dd0
|
Linux: PageCache: Fix inode offset when logging an error
|
2024-11-12 16:01:04 +11:00 |
|
|
ikelosandGitHub
|
1e871af064
|
Merge pull request #1339 from volatilityfoundation/issues/issue1336
Core: Limit capstone to compatible versions
|
2024-11-08 11:23:41 +00:00 |
|
|
ikelosandGitHub
|
36c0b33bef
|
Merge pull request #1341 from joren485/fix-typo-suspicious-threads
Fix typo in SuspiciousThreads
|
2024-11-08 10:15:45 +00:00 |
|
|
ikelosandGitHub
|
eb5534dee4
|
Merge pull request #1340 from joren485/print-plugin-description
Print plugin description on plugin --help
|
2024-11-08 10:12:48 +00:00 |
|
|
Joren Vrancken
|
b37ba26dd6
|
Fix typo in SuspiciousThreads
|
2024-11-08 10:19:05 +01:00 |
|
|
Joren Vrancken
|
74cf394ad0
|
Print plugin description on plugin --help
|
2024-11-08 10:06:59 +01:00 |
|
|
ikelosandGitHub
|
70188b0190
|
Merge pull request #1317 from gcmoreira/linux_boottime_support
Linux - Boottime support
|
2024-11-08 07:52:30 +00:00 |
|
|
ikelosandGitHub
|
932ea7f44a
|
Merge pull request #1337 from joren485/update-amcache-description
Improve windows.amcache plugin description
|
2024-11-07 23:38:15 +00:00 |
|
|
Mike Auty
|
6494260d91
|
Core: Limit capstone to compatible versions
|
2024-11-07 23:34:30 +00:00 |
|
|
Joren Vrancken
|
20317e0d13
|
Improve windows.amcache plugin description
|
2024-11-07 18:05:36 +01:00 |
|
|
ikelosandGitHub
|
efa4959517
|
Merge pull request #1300 from Abyss-W4tcher/dirty_ioc_windows_malfind
[plugin] Add dirty state IoC detection to malfind
|
2024-11-07 13:44:56 +00:00 |
|
|
Abyss Watcher
|
a5253ac276
|
re-trigger black
|
2024-11-07 13:40:18 +01:00 |
|
|
ikelosandGitHub
|
130d1188e8
|
Merge pull request #1307 from dgmcdona/dgmcdona/windows-scheduled-tasks
Windows: Adds scheduled tasks plugin
|
2024-11-06 22:58:25 +00:00 |
|
|
Gustavo MoreiraandGitHub
|
f05a1691b6
|
Merge branch 'develop' into linux_boottime_support
|
2024-11-05 06:05:50 -03:00 |
|
|
Gustavo Moreira
|
c0fa2cfcd6
|
Linux: Boottime API: User linux_constanst import
|
2024-11-05 20:02:55 +11:00 |
|
|
Gustavo Moreira
|
2efb4e7d28
|
Merge branch 'develop' into linux_boottime_support
|
2024-11-05 19:56:15 +11:00 |
|
|
ikelosandGitHub
|
a00a59cd23
|
Merge pull request #1329 from gcmoreira/linux_fix_merge_hidden_modules
linux: hidden_modules: Fix mess with merge #1283
|
2024-10-30 22:17:59 +00:00 |
|
|
Gustavo Moreira
|
e183f81de6
|
linux: hidden_modules: Fix mess with merge #1283
|
2024-10-31 08:28:07 +11:00 |
|
|
ikelosandGitHub
|
0ee0f4488e
|
Merge pull request #1283 from gcmoreira/linux_hidden_modules
Add linux hidden_modules plugin
|
2024-10-30 20:46:36 +00:00 |
|
|
Gustavo Moreira
|
4f86b3f1c0
|
Merge branch 'develop' into linux_hidden_modules
|
2024-10-31 07:26:11 +11:00 |
|
|
ikelosandGitHub
|
73f8ddbf47
|
Merge pull request #1328 from gcmoreira/linux_module_mod_mem_type_cache
Linux refactory module extension object mod_mem_type cache
|
2024-10-30 15:32:55 +00:00 |
|
|
ikelosandGitHub
|
efe1e1e579
|
Merge pull request #1326 from gcmoreira/linux_pagecache_fix_typing
Linux: PageCache API: Fix typing
|
2024-10-30 15:31:24 +00:00 |
|
|
ikelosandGitHub
|
6414c66804
|
Merge pull request #1327 from gcmoreira/linux_vfsmount_fix_type_comparison
Linux: vfsmount type: Fix type comparison
|
2024-10-30 15:30:43 +00:00 |
|
|
Gustavo Moreira
|
b098596687
|
Linux: module extension object: Add type annotation to the mod_mem_type property
|
2024-10-30 19:50:13 +11:00 |
|
|
Gustavo Moreira
|
aecf8d4327
|
Linux: module extension object: Refactor to replace custom property cache with functools.cached_property that's available from Python 3.8
|
2024-10-30 18:53:20 +11:00 |
|
|
Gustavo Moreira
|
84a2233d04
|
Linux: vfsmount type: Fix type comparison
|
2024-10-30 16:25:28 +11:00 |
|
|
Gustavo Moreira
|
cf94b078cd
|
Linux: PageCache API: Fix typing
|
2024-10-30 16:11:03 +11:00 |
|
|
Gustavo Moreira
|
a05397e8b6
|
Linux: Boottime API: Minor. Fix docstring typo
|
2024-10-30 15:57:00 +11:00 |
|
|
Gustavo Moreira
|
e197fbaf5f
|
Linux: Boottime API: Refactor __sub__ to operate through __add__() and negate() for improved clarity and reuse
|
2024-10-30 15:39:40 +11:00 |
|
|
Gustavo Moreira
|
7abe92cf2f
|
Linux: Boottime API: Minor. Move negate() up
|
2024-10-30 15:36:46 +11:00 |
|
|
Gustavo Moreira
|
42d918c05d
|
Linux: Boottime API: Refactor Timespec Methods.
Move TimespecVol3 methods to an abstract class Timespec64Abstract, which is now inherited by Timespec64 and Timespec64Concrete.
|
2024-10-30 15:21:13 +11:00 |
|
|
Gustavo Moreira
|
722ccd527e
|
Linux: Extensions: Clean up the Linux constants imports in the object extension file
|
2024-10-30 12:56:09 +11:00 |
|
|
Gustavo Moreira
|
4b76b699ad
|
Linux: hidden_modules: Add docstrings and comments to enhance the documentation of the module verification process. Move the hardcoded values to the linux constants file.
|
2024-10-30 09:56:05 +11:00 |
|
|
Gustavo Moreira
|
f537c4a7e0
|
Merge branch 'develop' into linux_hidden_modules
|
2024-10-30 09:24:51 +11:00 |
|
|
Gustavo Moreira
|
8960bdab08
|
Linux: hidden_modules: Add a symbol table check for a recent dwarf2json version
|
2024-10-29 17:33:06 +11:00 |
|
|
Gustavo Moreira
|
1c6a548017
|
Linux: hidden_modules: Simplify symbols type checks
|
2024-10-29 17:30:47 +11:00 |
|
|
Gustavo Moreira
|
dfd8a1f195
|
Linux: hidden_modules: Include kernel version and commit details
|
2024-10-29 17:22:48 +11:00 |
|
|
Gustavo Moreira
|
cbe071ff3e
|
Linux: hidden_modules: Import the whole architectures module
|
2024-10-29 17:19:30 +11:00 |
|
|
Gustavo Moreira
|
526007f948
|
Linux: hidden_modules: Use child_template
|
2024-10-29 16:41:47 +11:00 |
|
|
Gustavo Moreira
|
bee2a398eb
|
Linux: Minor: Add comment/header on each set of constants
|
2024-10-29 15:13:26 +11:00 |
|
|
Gustavo Moreira
|
bb6dc9a595
|
Merge branch 'develop' into linux_boottime_support
|
2024-10-29 14:41:51 +11:00 |
|
|
Gustavo Moreira
|
57ffd5b939
|
Linux: Boottime API: Refactor TimespecVol3::negate() to return a new object instead of modifying the original. It also normalizes its values, aligning with the behavior of the other addition and subtraction operators
|
2024-10-29 14:24:16 +11:00 |
|
|
Gustavo Moreira
|
c4274c942c
|
Linux: Fix exception message in TimespecVol3::__sub__()
|
2024-10-29 13:49:58 +11:00 |
|
|
Gustavo Moreira
|
4895af47bd
|
Linux: Boottime timeliner: Rollback timeliner event type changes and use the created time for the boot time plugin
|
2024-10-29 13:46:19 +11:00 |
|
|
David McDonald
|
efdbc27b95
|
Windows: Scheduled tasks - removes special time type
Removes the TaskSchedulerTime dataclass and discards the
is_localized value parsed with the timestamp.
|
2024-10-25 14:15:06 -05:00 |
|
|
David McDonald
|
0413cc5e26
|
Windows: Scheduled tasks - code review fixes
|
2024-10-25 12:56:18 -05:00 |
|
|
ikelosandGitHub
|
a1961401d5
|
Merge pull request #1320 from dgmcdona/dgmcdona/linux_pagecache_missing_iter_implementation
Linux: Extensions - removes abc.Iterable definition
|
2024-10-25 00:35:24 +01:00 |
|