Mike Auty
5655548d3f
Allow owning_process to be called without parameters.
2014-12-31 03:46:34 +00:00
Mike Auty
4a4deebda5
Fix up refactoring error in pointer dereference caching.
2014-12-31 03:45:56 +00:00
Mike Auty
bdb0c1488a
Update test_rig code to play around with code fragments.
2014-12-31 03:20:32 +00:00
Mike Auty
bc3ea39e97
Refactor the structure code to accomodate constant finding.
2014-12-31 03:12:28 +00:00
Mike Auty
47a1390bb9
Allow explicit dereferencing at a layer within memory.
...
This is in contrast to volatility-2.x where object were automatically
instantiated with a native_vm (or native_layer in 3.x parlance) and then
any dereferences occurred in the correct layer.
The space savings are now minimal since each object carries around only
a layer name, and not a reference to the entire space. However, given
situations such as kernel structures containing pointers into
process spaces, where the native_vm is useless, this decision is
designed to make working on a particular layer explicit and therefore
more obvious. It may mean exposing that up through levels of functions,
but hopefully it will make all the code more obvious and less
automagical.
2014-12-31 03:03:31 +00:00
Mike Auty
ed5d047dc9
Clean-up member/attribute selection.
2014-12-30 22:49:02 +00:00
Mike Auty
3c54065cdc
Add array type validity checking.
2014-12-30 04:19:34 +00:00
Mike Auty
04720d5ab9
Fix two important typo errors in Arrays.
2014-12-30 04:08:59 +00:00
Mike Auty
5d5522d04c
Catch a few errors during plugin importing.
2014-12-30 03:51:49 +00:00
Mike Auty
77417b2785
Add in relative_child_offset and refactor to reuse the checking code.
2014-12-30 03:51:02 +00:00
Mike Auty
595ec89db1
Fix up some fairly critical core typos.
2014-12-30 03:50:22 +00:00
Mike Auty
c1d054df10
Rename functions in validity to avoid future member name collisions.
2014-12-30 03:49:31 +00:00
Mike Auty
38b0791233
General code refactor.
2014-12-30 03:43:36 +00:00
Mike Auty
3395ade2fa
Rethink the plugin intialization process.
2014-07-08 23:21:08 +01:00
Mike Auty
bcc1df08bc
Correct mis-ordered decorators.
2014-07-08 22:02:53 +01:00
Mike Auty
58e2365788
Add in initial requirements for plugins to state their inputs.
2014-07-08 11:17:39 +01:00
Mike Auty
d6b131980b
Add in skeleton plugin to check the API.
2014-07-07 23:33:08 +01:00
Mike Auty
c29028dd30
Initial attempt at plugin importing.
2014-07-05 22:33:40 +01:00
Mike Auty
39c0b38f09
Add additional docstrings and refactor/rearrange the entire codebase.
2014-06-11 01:35:50 +01:00
Mike Auty
a97bd19988
Reformat and optimize code, including trailing whitespace and end of file newline.
2014-06-10 15:40:50 +01:00
Mike Auty
2222dd546a
Change my mind on deep copying returned lists, we might want to change the values of an arbitrary row later on.
2014-04-14 02:24:48 +01:00
Mike Auty
2e5656ade4
Add in FormatSpecification object, and bulk up the TextRenderer.
2014-04-14 02:22:05 +01:00
Mike Auty
3da8bdf28a
Convert to using ABCMeta to get abstract class failures immediately rather than on method use.
2014-04-14 02:21:13 +01:00
Mike Auty
8e7ad364c7
Alter type/class checking structure so that it can be optimized out (either throws an exception or does nothing).
2014-04-08 00:59:08 +01:00
Mike Auty
e949079440
Merge TreeGrid class interfaces into their implementation, external developers should not be creating their own of these.
2014-04-08 00:24:27 +01:00
Mike Auty
d1a8adf8b1
Minor typos and docstring improvements, plus some todos.
2014-04-08 00:19:19 +01:00
Mike Auty
5f282d673e
Add in constants and a tree skeleton for eventual plugins.
2014-04-08 00:14:29 +01:00
Mike Auty
48e839947b
Tweak the documentation in certain files, and remove the overly changable workspace.xml.
2014-04-05 19:39:48 +01:00
Mike Auty
50e8f6a627
Add in PyCharm IDE project details, and improve the sphinx apidoc autogeneration of documentation.
2014-04-02 02:44:55 +01:00
Mike Auty
fa789fb174
Add in basic plugin/config and renderer support.
2014-03-31 00:36:11 +01:00
Mike Auty
89e7e6e7ff
Tidy up several areas using PyCharm corrections.
2014-03-30 00:46:31 +00:00
Mike Auty
1a555140eb
Add in iniital interface/abstract class for TreeGrid and TreeRow.
2014-03-28 08:48:02 +00:00
Mike Auty
3709143c40
Clean-up a few files according to PyCharm's warning system.
2014-03-28 08:47:00 +00:00
Mike Auty
5b23325447
Change symbol_names to structure_names.
2014-03-22 13:46:22 +00:00
Mike Auty
26f8d0f7cc
Add in write support, and change symbols to be both structures and constants.
2013-12-28 05:30:54 +00:00
Mike Auty
cea4969b49
Add in first attempt at intel mapping code.
2013-05-20 00:10:02 +01:00
Mike Auty
562ed6d506
Remove paging files (since they're OS specific) and add in a windows page validity test.
2013-05-19 13:41:28 +01:00
Mike Auty
dff1c167b2
Fix up Intel support with test cases for 32, PAE and 32e modes.
2013-05-19 13:24:19 +01:00
Mike Auty
05d2789b5b
Add in initial version of intel space.
2013-05-18 15:29:59 +01:00
Mike Auty
26caf31974
Revisit the decision to try out super, and decide to stick with specific inheritance to avoid **kwargs everywhere.
2013-05-08 19:17:21 +01:00
Mike Auty
3790ca03e1
Add in some TODOs, and swap to the File layer for testing.
2013-05-07 23:44:40 +01:00
Mike Auty
eb35ffb325
Fix a typo in the size constraints on physical layers.
2013-05-07 23:43:09 +01:00
Mike Auty
72d971bf3f
More speed-ups by not constantly rebuilding the native_dictionary list.
2013-05-07 23:38:03 +01:00
Mike Auty
e0433ab4e9
Vastly improved the speed by caching resolutions.
2013-05-07 23:31:27 +01:00
Mike Auty
9c2e486356
Refactor code locations, tidy up object initializers and add in File Layer.
2013-05-06 17:45:15 +01:00
Mike Auty
86c57972b7
Fix up pointer issues (including typo).
2013-05-05 23:11:26 +01:00
Mike Auty
e351958413
Move context, tidy up object model and add memory to test_rig.
2013-05-05 22:06:38 +01:00
Mike Auty
dc65c356fc
Restructure the packages, change importing style to from ... import.
2013-05-04 15:44:59 +01:00
Mike Auty
e654391e86
Fix up the top-level symbol resolution mechanism.
2013-04-21 23:03:36 +01:00
Mike Auty
9b91bfa88c
Rework templates so that they're created referentially, and that attributes are generated by the underlying class and arguments.
2013-04-21 18:22:38 +01:00
Mike Auty