Commit Graph
2706 Commits
Author SHA1 Message Date
ikelosandGitHub 3fe8e2d4d9 Merge pull request #469 from volatilityfoundation/feature/improved-object-writing
Objects: Improve writing of objects
2021-03-04 23:45:14 +00:00
ikelosandGitHub 9ef972192d Merge pull request #468 from volatilityfoundation/feature/improved-typing
Core: Improve typing across codebase
2021-03-04 23:36:42 +00:00
Mike Auty a75ccd72b1 Layers: Restore a loss from a rebase/merge 2021-03-04 23:34:04 +00:00
Mike Auty f51b534792 Merge branch 'feature/better-nonexistant-file-handling' into develop 2021-03-04 23:26:07 +00:00
Mike Auty 2fe7e22bf8 CLI: Tidy up single_location handling 2021-03-04 23:25:53 +00:00
ikelosandGitHub 7613cd7a00 Merge pull request #467 from volatilityfoundation/feature/partial-cache-to-tmpfile-move
Layers: Allow manual cache control and disable for PDB
2021-03-04 23:15:56 +00:00
Mike Auty 0c8c52ba32 Layers: Allow manual cache control and disable for PDB 2021-03-04 23:13:44 +00:00
Mike Auty 0b4f49736c Volshell: Fix missing import 2021-03-04 18:48:58 +00:00
ikelosandGitHub 51c3818d71 Merge pull request #461 from volatilityfoundation/feature/regex-trie
Layers: Improve regex scanning for linux/mac
2021-03-02 15:54:37 +00:00
Mike Auty 2a41b1eee9 Linux: Make bang_addrs has something to search for 2021-03-02 15:50:21 +00:00
Mike Auty 1d35406ffe CLI: Improve file parameter handling 2021-03-02 15:45:21 +00:00
Mike Auty 9deb0c9d8a CLI: Fix early logging target 2021-03-02 11:15:16 +00:00
Mike Auty 681b68f252 Objects: Improve writing of objects 2021-02-28 02:44:41 +00:00
Mike Auty 77e406e408 Layers: Fix issue if leechcore not available 2021-02-25 18:07:28 +00:00
Mike Auty 70a94bf205 Automagic: Make sure Linux gets in the metadata too 2021-02-25 18:02:16 +00:00
ikelosandGitHub b180cc163a Merge pull request #459 from AsafEitani/match-pid-result-fields
changing PID field names
2021-02-25 01:29:54 +00:00
ikelosandGitHub 561058624c Merge pull request #460 from volatilityfoundation/feature/leechcore-support
Layers: Add in LeechCore physical file support
2021-02-24 17:43:12 +00:00
Mike Auty e27fc115dc Layers: Improve regex scanning for linux/mac 2021-02-24 17:39:43 +00:00
Mike Auty e18e9700f2 Core: Improve typing across codebase 2021-02-24 01:13:49 +00:00
Mike Auty 8131a9e817 Layers: Add in LeechCore physical file support 2021-02-23 14:46:43 +00:00
AsafEitani cf3ad1a6eb changing PID field names
Changing the pid name field of the result to match the PID of all other plugins
2021-02-23 12:28:17 +02:00
ikelosandGitHub 5144995a76 Merge pull request #458 from AsafEitani/cachedump-concat-bugfix
Fix bytes to str concat - resulting in error
2021-02-23 10:25:47 +00:00
AsafEitani b8c8e0f852 Update cachedump.py
fix bytes to str concat
2021-02-23 12:19:12 +02:00
Mike Auty 8b6c6b604d Layers: Allow handler to avoid caching 2021-02-19 01:17:34 +00:00
Mike Auty f562c3e864 Plugins: Layerwriter should not require an architecture 2021-02-17 02:01:36 +00:00
Mike Auty 00a4d5ea4f Layers: Fix circular import issue 2021-02-16 18:03:21 +00:00
ikelosandGitHub 9466c154e0 Merge pull request #455 from volatilityfoundation/issues/metadata-inheritance
Layers: Metadata inheritance wasn't per-instance
2021-02-16 17:59:55 +00:00
Mike Auty 2de3cfcce2 Layers: Metadata inheritance wasn't per-instance 2021-02-16 16:51:29 +00:00
ikelosandGitHub e0fb13284f Merge pull request #436 from volatilityfoundation/issues/more-efficient-scanning
Issues/more efficient scanning
2021-02-15 18:08:26 +00:00
ikelosandGitHub 51c8ad6263 Merge pull request #454 from volatilityfoundation/issues/out-of-bound-mapping
Layers: Don't map intel out-of-bounds addresses
2021-02-07 20:55:22 +00:00
Mike Auty 130ae7e446 Interfaces: Fix LGTM warning without changing behaviour 2021-02-07 20:50:16 +00:00
Mike Auty bf9329fa93 Plugins: netstat yapf and remove unused codeblock 2021-02-07 20:34:33 +00:00
Mike Auty c6181d0dcf Layers: Group the linearity settings together 2021-02-05 01:15:52 +00:00
Mike Auty f5ddb88806 Layers: Scan by available and then chunk
This changes the order of scanning to make it (potentially) more
efficient.

A layer can efficiently map (and ignore large segments that don't exist)
and then have the available space chunked, rather than creating all the
chunks and repeatedly asking the layer whether each can be mapped or
not.
2021-02-05 01:15:52 +00:00
Mike Auty 7a2ce9e999 Layers: Make linear scanning more efficient
Previously we'd chop the entire space up into scan_chunk sized blocks
and then chop those up into mapped chunks.  The mapping process can much
more efficiently provide which blocks exist, so now we ask the layer to
map itself in its entirety, and then any chunks of data we get, we cut
into scan_chunk blocks.
2021-02-05 01:15:52 +00:00
ikelosandGitHub c51a9aced4 Merge pull request #448 from volatilityfoundation/issues/issue447-memmap-file-offset
Windows: Memmap include file offset
2021-02-05 01:08:04 +00:00
ikelosandGitHub 30fe201c4b Merge pull request #443 from volatilityfoundation/feature/cache-path-override
Feature/cache path override
2021-02-05 01:06:42 +00:00
Mike Auty afd394dab2 Layers: Don't map intel out-of-bounds addresses 2021-02-04 16:46:55 +00:00
Mike Auty d66357c64c Documentation: Fix an unnecessary unicode apostrophe 2021-02-04 16:07:54 +00:00
ikelosandGitHub 934b3492d7 Merge pull request #453 from leohearts/develop
Replace \xe2\x80\x94 with normal "-" in README.md
2021-02-04 16:06:32 +00:00
leohearts f52bd8d74f Replace \xe2\x80\x94 with normal "-" in README.md 2021-02-04 23:54:00 +08:00
Mike Auty 25a74a8450 Documentation: Clarify progress_callback and open_method 2021-02-02 00:20:53 +00:00
Mike Auty 1e580de86a Codebase: Minor LGTM issue fixes 2021-02-02 00:08:00 +00:00
ikelosandGitHub 1be52186b7 Merge pull request #450 from volatilityfoundation/release/1.0.1
Release/1.0.1
2021-02-01 18:06:22 +00:00
Mike Auty 0f487e725c Packaging: Further fixes to setup.py 2021-02-01 18:00:21 +00:00
Mike Auty bad253d5e4 Documentation: Use the README.md for the long description 2021-02-01 17:55:14 +00:00
Mike Auty 5cc453b7c3 Bump the version number for a hotfix 2021-02-01 17:54:28 +00:00
ikelosandGitHub 0e372b3ba2 Merge pull request #445 from volatilityfoundation/release/v1.0.0
Release/v1.0.0
v1.0.0
2021-02-01 15:30:16 +00:00
Mike Auty 6947e8ead5 Windows: Memmap include file offset 2021-02-01 11:23:13 +00:00
ikelosandGitHub d7c2b08bbe Merge pull request #446 from volatilityfoundation/release/v1.0.0
Release/v1.0.0
2021-02-01 01:35:04 +00:00