Andrew Case
|
49c4ae2aa4
|
Mac - have bash inherit from tasks
|
2019-09-26 23:05:49 -05:00 |
|
Andrew Case
|
a6e7c7a919
|
Mac - have malfind inherit from tasks
|
2019-09-26 23:01:37 -05:00 |
|
Andrew Case
|
7339c12eaa
|
Mac - have proc maps inherit from tasks
|
2019-09-26 22:52:45 -05:00 |
|
Andrew Case
|
3af593c16a
|
Mac - switch netstat to inherit from tasks
|
2019-09-26 22:07:41 -05:00 |
|
Andrew Case
|
2d7bc99d6a
|
Mac - make pslist smear resistant
|
2019-09-26 21:57:48 -05:00 |
|
Andrew Case
|
b4ad15c226
|
Mac - update lsof to inherit from tasks and be more smear resistant
|
2019-09-26 21:56:38 -05:00 |
|
Mike Auty
|
679a0eabc2
|
Tidy Exceptions and ensure LayerExceptions are passed a layer name.
|
2019-09-26 15:44:36 +01:00 |
|
Mike Auty
|
e0b9d72c84
|
Update the license URL and LICENSE.txt
|
2019-09-25 21:44:05 +01:00 |
|
Mike Auty
|
72567e1c50
|
Yapf-0.28.0 rerun across the whole codebase.
|
2019-09-21 21:08:23 +01:00 |
|
Mike Auty
|
d2b892cf94
|
Fix up docstring errors in documentation build
|
2019-09-19 23:00:37 +01:00 |
|
Mike Auty
|
1f9605abf7
|
Revert "Fix warnings when generated documentation."
This actually broke autodoc generation and wasn't accurate. The
documentation warnings may have to stay for now.
This reverts commit 37e13321f9.
|
2019-09-17 18:32:44 +01:00 |
|
Mike Auty
|
7efe19224e
|
Make several small typing information fixes.
|
2019-09-17 18:01:11 +01:00 |
|
Mike Auty
|
33451967b2
|
Typing fixes for virtmap and remove extranious exception.
|
2019-09-17 17:58:47 +01:00 |
|
 superponibleandikelos
|
ae8822dddf
|
check if hive offset is valid before yielding
|
2019-09-17 16:59:50 +01:00 |
|
 superponibleandikelos
|
2fa9e6b84d
|
fix typo in comment
|
2019-09-17 16:59:50 +01:00 |
|
 superponibleandikelos
|
508a9148ed
|
catch InvalidAddressException when creating RegistryHive
|
2019-09-17 16:59:50 +01:00 |
|
 superponibleandikelos
|
36f5e47d5b
|
fix up docstrings to match yield values
|
2019-09-17 16:59:50 +01:00 |
|
Mike Auty
|
c6cdbc7342
|
Move the hive_iterator to HiveList, since it's more intuitively where it should live.
|
2019-09-17 16:59:50 +01:00 |
|
Mike Auty
|
b292188319
|
Update userassist to use the new printkey API.
|
2019-09-17 16:59:50 +01:00 |
|
Mike Auty
|
46c047b7b3
|
Update API slightly to return objects not strings.
|
2019-09-17 16:59:50 +01:00 |
|
Mike Auty
|
b413e4a13d
|
Refactor printkey to be more usable from other plugins.
|
2019-09-17 16:59:50 +01:00 |
|
Mike Auty
|
10cf65fb60
|
Add in better documentation for callbacks.
|
2019-09-10 00:43:44 +01:00 |
|
 Michael Lighandikelos
|
4e3db7a3de
|
add PluginRequirements for ssdt and svcscan. add missing _version to svcscan
|
2019-09-08 16:08:48 +01:00 |
|
 Michael Lighandikelos
|
1d7f2a9582
|
use ntkrnlmp.object() instead of context.object(). remove config_path argument to list* functions
|
2019-09-08 16:08:48 +01:00 |
|
 Michael Lighandikelos
|
50548bac73
|
reformat with yapf
|
2019-09-08 16:08:48 +01:00 |
|
 Michael Lighandikelos
|
e71b72b3a7
|
add the windows callbacks plugin
|
2019-09-08 16:08:48 +01:00 |
|
Mike Auty
|
421af88c29
|
Classmethod make_subconfig so other classmethods can use it.
|
2019-09-08 14:50:48 +01:00 |
|
Mike Auty
|
03bc3d927d
|
Improve the name of a handles exposed function.
|
2019-09-08 13:22:42 +01:00 |
|
Mike Auty
|
3318e9c4a5
|
Fix a typo introduced in 5362e2094e.
|
2019-09-08 01:58:46 +01:00 |
|
Mike Auty
|
189b8c4d69
|
Update the windows info plugin with classmethods.
|
2019-09-07 23:00:41 +01:00 |
|
Mike Auty
|
e922cef316
|
Improve docstrings for all plugins, and reformat all docstrings.
|
2019-09-07 22:59:54 +01:00 |
|
Mike Auty
|
dc0a809729
|
Printkey: Don't offer two options for the same value.
|
2019-09-07 22:05:09 +01:00 |
|
Mike Auty
|
959e1617fd
|
Shift one-time checks out of loops.
|
2019-09-07 12:40:32 +01:00 |
|
Mike Auty
|
b158c58310
|
Ensure non-found keys mimic found key output a little closer.
|
2019-09-01 22:44:42 +01:00 |
|
Mike Auty
|
952a1b9d69
|
Move printkey recursion around to get proper tree depth.
|
2019-09-01 16:17:26 +01:00 |
|
Mike Auty
|
f040ceed96
|
Ensure keys and values are at the same level.
|
2019-09-01 16:10:58 +01:00 |
|
Mike Auty
|
3d7b2a520b
|
Ensure the tree output for printkey doesn't jump into deep layers.
|
2019-09-01 16:05:51 +01:00 |
|
Mike Auty
|
c2feba6651
|
Remove debugging calls from layerwriter plugin.
|
2019-09-01 15:50:29 +01:00 |
|
Mike Auty
|
39c4d061a1
|
Convert registry.printkey hive_walker to a class method.
|
2019-08-31 14:32:35 +01:00 |
|
Mike Auty
|
a3caf39097
|
Use a mapping to determine kind to class.
|
2019-08-31 12:57:53 +01:00 |
|
Mike Auty
|
35dbdfc69d
|
Add in PluginRequirement for proc_maps plugin.
|
2019-08-27 23:35:19 +01:00 |
|
Mike Auty
|
a9853eca50
|
Fix the copyright headers (and yapf) in the mac plugins.
|
2019-08-27 23:34:06 +01:00 |
|
 Andrew Caseandikelos
|
6b4c13089d
|
add mac_proc_maps
|
2019-08-27 23:31:01 +01:00 |
|
 Andrew Caseandikelos
|
07ece011a3
|
Add mac_tasks
|
2019-08-27 23:28:51 +01:00 |
|
Mike Auty
|
9cde94bceb
|
Change the license blurb on all files.
|
2019-08-27 23:11:00 +01:00 |
|
Mike Auty
|
42b2fb120a
|
Swap TranslationLayerInterface decendents over to LinearMappedLayers
|
2019-08-27 21:09:13 +01:00 |
|
Mike Auty
|
71bb54379b
|
Refactor the plugin versioning to be simpler to define.
|
2019-08-27 21:08:29 +01:00 |
|
Mike Auty
|
47c349e240
|
Add plugin requirements for all plugins.
|
2019-08-27 21:08:29 +01:00 |
|
Mike Auty
|
58dffe8795
|
Fix typos from the rebase, and add documentation.
|
2019-08-27 21:08:29 +01:00 |
|
Mike Auty
|
a58f064ea8
|
Rework how the plugin_version is checked.
|
2019-08-27 21:08:29 +01:00 |
|