Mike Auty
e2450a0458
Add in more debugging information.
2017-07-19 17:52:19 +01:00
Mike Auty
edcfda0688
Change the stacking order, to ensure Lime gets loaded before linux.
2017-07-17 22:51:42 +01:00
Mike Auty
d2eef99e37
Don't try making URIs into URIs.
2017-07-17 21:52:01 +01:00
Mike Auty
9f3470a8e9
Speed up linux caching by allowing lack of validation. This should NOT be enabled without knowing exactly what you're doing.
2017-07-17 21:47:31 +01:00
Mike Auty
d49e956546
Improve file URL handling.
2017-07-17 18:33:45 +01:00
Mike Auty
f2bfd39c57
Add in more debugging information.
2017-07-17 17:17:46 +01:00
Mike Auty
23ccb4d4c8
Fix the real root cause, files not containing a banner.
2017-07-17 17:11:05 +01:00
Mike Auty
9b9792f3e2
Ensure we save the results of checking for non-existant files.
2017-07-17 17:06:52 +01:00
Mike Auty
5ca4f8e788
Use a central bit of code to do the load and unload of cached linux banners.
2017-07-17 16:38:25 +01:00
Mike Auty
f6a55876d0
Add in check to avoid unsightly exceptions.
2017-07-17 16:19:36 +01:00
Mike Auty
8b95480e88
Write the cached linuxbanners after each one so that cancellations don't require re-runs.
2017-07-16 22:59:01 +01:00
Mike Auty
b68932a7bc
Improve the linux DTB finding code.
2017-07-16 18:05:19 +01:00
Mike Auty
d0b1177c31
Add in the linux signature scanner.
2017-07-16 18:05:08 +01:00
Mike Auty
b099822ce2
Refactor requirement finding recursion since we use it a lot.
2017-07-16 18:04:22 +01:00
Mike Auty
a5e8d98a9c
Refactor the location of the linux banner cache.
2017-07-13 01:31:19 +01:00
Mike Auty
2453b7f180
Add a little information to the log to see when the cache is being built.
2017-07-10 01:24:52 +01:00
Mike Auty
d1cdf805df
Update the comments slightly.
2017-07-10 01:20:01 +01:00
Mike Auty
0811bdaa1a
Add in initial version of linux banner cache mechanism.
2017-07-10 01:17:09 +01:00
Mike Auty
d0ebeab253
Merge branch 'master' of github.com:volatilityfoundation/volatility3
2017-06-05 23:01:34 +01:00
Mike Auty
5dedf00f64
Update the linux automagic based on the VMCOREINFO structure.
2017-06-05 23:01:22 +01:00
Mike Auty
9a2bfe7c92
Remove unused variable.
2017-06-03 17:44:59 +01:00
Mike Auty
fc325f8324
Ensure the pdb scanning heuristic works with 32-bit systems as well as 64-bit ones.
2017-06-01 23:52:30 +01:00
Mike Auty
904a5b18a3
Try to bomb out of the NlpDtbFinder if the space already has a dtb.
2017-06-01 01:00:49 +01:00
Mike Auty
bcfc40acfe
Fix egregious typo. 5:S
2017-06-01 00:56:40 +01:00
Mike Auty
17a3f1630c
Add back in the masking, since it is important if maxmium_address is ever not 1 less than a power of 2.
2017-05-10 17:37:38 +01:00
Mike Auty
a05a470347
Fix up some complete and utter daftness, tactfully pointed out by npetroni.
2017-05-10 17:30:45 +01:00
Mike Auty
4065cfa090
Add in first draft of Linux identification stacker.
2017-05-06 14:09:49 +01:00
Mike Auty
16b1aca56b
Make the WintelHelper documentation accurate again.
2017-05-06 10:56:21 +01:00
Mike Auty
fe04c423ab
Remove left-over debugging features that slowed down the NLP dtb finder.
2017-05-02 14:51:50 +01:00
Mike Auty
d579f7f583
Add in a condensed version of Nick Petroni's DTB finder/stacker code.
2017-05-01 16:11:00 +01:00
Mike Auty
6e9791deb0
Add some more safety checks (to get pycharm off my back) and ensure we don't go round in circles.
2017-05-01 15:59:24 +01:00
Mike Auty
7e1965715d
Ensure the pdbscanner can operate when not handed an appropriate intel layer.
2017-05-01 14:38:47 +01:00
Mike Auty
44d8af70e0
Ensure we don't run the DTB finder twice.
2017-05-01 14:34:52 +01:00
Mike Auty
e182e44815
Remove all hardcoded PAGE_SIZE variables, and expose more Intel variables.
2017-04-30 22:09:26 +01:00
Mike Auty
ff41d4e5b0
Improve config.json handling, making single_location optional but bypasses the stacker automagic.
2017-04-21 00:53:08 +01:00
Mike Auty
b1c561b655
Ensure standard name for JSON files is used throughout the code (ISF).
2017-03-24 00:32:29 +00:00
Mike Auty
5d3ff13a6e
Ensure LayerStacker's default doesn't get accepted blindly.
2017-01-08 18:08:13 +00:00
Mike Auty
149e57afee
Change the requirement validation system to return all unsatisfied requirements, to provide more feedback.
2017-01-08 17:26:09 +00:00
Mike Auty
cafc09a6d3
Add dynmically generated command line parameters for the CLI.
...
Note this now requires the file to be specified with single-location,
it also requires a specific ordering of parameters.
2017-01-08 02:31:31 +00:00
Mike Auty
282af4db99
Make automagic config_path a requirement rather than optional.
2017-01-08 02:23:14 +00:00
Mike Auty
1af85d628f
Remove the pointless class/instance variable.
2017-01-01 02:14:53 +00:00
Mike Auty
f0ce27f0a7
Improve the documentation for automagic.
2016-12-30 01:10:05 +00:00
Mike Auty
5fe078e487
Adapt Automagic to have requirements, and convert the Stacker's single_location parameter to make use of it.
2016-12-29 15:21:39 +00:00
Mike Auty
88e9786967
Improve the requirements documentation.
2016-12-28 22:33:17 +00:00
Mike Auty
aee4349e3c
More documentation updates (and minor code cleanups).
2016-12-28 03:20:44 +00:00
Mike Auty
9399480f1a
Add a chunk of documentation alphabetically.
2016-12-26 23:50:51 +00:00
Mike Auty
9666e34603
Remove the filenames from the intermediate format prefix search, to improve the documentation.
2016-12-26 23:50:16 +00:00
Mike Auty
bab71d4358
Refactor the progress_callback so it can be used in automagics.
...
Refactored the location of the progress_callback so that the UI can
specify it and ensure it is used by the automagics process as well as
the plugins themselves.
The progress_callback function has also had an optional description parameter
added, so that it can differentiated in case two scans happen
simultaneously.
2016-12-26 23:45:47 +00:00
Mike Auty
4cd9b98211
Merge branch 'master' of github.com:volatilityfoundation/volatility3
2016-12-26 22:53:29 +00:00
Mike Auty
b54cb86c89
Allow automagics to use natives without a set of global natives.
...
This allows NativeSymbolTables to be appended to symbol_spaces and
uses this to let automagic modules (which have no existing symbol table
to rely on) to load natives for reading format data.
2016-12-26 22:49:51 +00:00
Mike Auty