KevTheHermit
4aaba89d02
Unity timeliner output for mftscan
2022-01-15 21:47:37 +00:00
KevTheHermit
c5987a45d2
Relative Offset MFT Header
2022-01-15 20:54:22 +00:00
KevTheHermit
a8f5b03816
Apply yapf to mftscan plugin
2022-01-15 15:57:23 +00:00
KevTheHermit
1c6cd0fb52
Move mftscan enums to ISF file.
2022-01-15 15:53:35 +00:00
KevTheHermit
793d08faf4
Add TimeLiner interface to MFTScan plugin
2022-01-09 22:27:32 +00:00
KevTheHermit
9d86599e7f
MFT Plugin use ISF instead of Struct
2022-01-09 22:04:13 +00:00
KevTheHermit
295fb453f5
Add MFT Filename N/A type
2022-01-09 00:55:34 +00:00
KevTheHermit
20a5868ff3
Change return types for MFT Records DTGs
2022-01-09 00:23:31 +00:00
KevTheHermit
899ec09ce3
Doc Strings
2022-01-06 23:09:50 +00:00
KevTheHermit
2c949dfa50
Create MFTScanner plugin
2022-01-06 22:53:24 +00:00
ikelos and GitHub
168b0d0b05
Merge pull request #611 from volatilityfoundation/issues/issue604
...
Renderers: Make appending rows massively more efficient
2021-12-31 22:47:50 +00:00
Mike Auty
65048e3d49
Merge branch 'release/v2.0.0' into develop
2021-12-31 00:59:47 +00:00
Mike Auty
dd13b427e0
Volshell: Update the linux pslist requirement
2021-12-31 00:57:18 +00:00
Mike Auty
ac7127d05a
Volshell: Sync errors with the CLI concerning unsatisfied requirements
...
Fixes #607
2021-12-31 00:55:23 +00:00
Mike Auty
571ab8f659
Volshell: Update the linux pslist requirement
2021-12-31 00:51:21 +00:00
Mike Auty
c13b49262d
Renderers: Make appending rows massively more efficient
...
Previously we were generating the list of children (for most likely the
root node) for every single append statement, during which we were
recalculating the length of the list, twice. In plugins that output a
lot of rows this would add an enourmous overhead (that likely grew as
the length of the output grew). Without this overhead, the time taken
for the TreeGrid._append method went from 1230.0s to 2.4s.
2021-12-30 01:47:51 +00:00
Mike Auty
c8dd8d08bd
Volshell: Synchronize with the standard CLI cache clearing
2021-12-29 22:26:28 +00:00
ikelos and GitHub
8134b8e2d0
Merge pull request #605 from cstation/qemu_additional_sections
...
QEMU: Add 'dirty-bitmap' and 'pbs-state', handle page_size more consistently
2021-12-29 21:30:15 +00:00
cstation
a96f5de6a0
QEMU: Add 'dirty-bitmap' and 'pbs-state', handle page_size more consistently
2021-12-29 22:19:38 +01:00
Mike Auty
3bc90b8200
Plugins: Add more information to layerwriter --list
2021-12-20 20:38:12 +00:00
ikelos and GitHub
fc12956706
Merge pull request #603 from volatilityfoundation/feature/none-renderer
...
CLI: Add in None renderer to avoid text output
2021-12-19 22:21:56 +00:00
Mike Auty
997b857246
CLI: Add in None renderer to avoid text output
2021-12-19 22:16:53 +00:00
ikelos and GitHub
3c11099e66
Merge pull request #596 from gcmoreira/assorted-fixes
...
Assorted fixes
2021-12-12 22:54:18 +00:00
Gustavo Moreira
c5c1f355ef
Changing not not for a more explicit if statement
2021-12-13 09:51:25 +11:00
Gustavo Moreira
d2ad867d1e
my mistake, it should be negated twice to get True when is valid
2021-12-10 13:20:43 +11:00
Gustavo Moreira
e1942976bf
wrong comparison with None
2021-12-10 13:10:47 +11:00
Gustavo Moreira
8e7aff4ad8
not in please
2021-12-10 13:09:41 +11:00
Gustavo Moreira
36ac92c11c
undefined layers module
2021-12-10 13:06:38 +11:00
Gustavo Moreira
17e0b04cb3
undefined glob module
2021-12-10 13:06:15 +11:00
Mike Auty
581251cb05
Linux: Fix long standing typo (thanks to @gcmoreira)
2021-12-08 23:34:53 +00:00
Mike Auty
832bdc2ab1
Linux: Fix long standing typo (thanks to @gcmoreira)
2021-12-08 23:34:23 +00:00
ikelos and GitHub
32ec4afed3
Merge pull request #586 from volatilityfoundation/issues/qemu-speed-up
...
Layers: Speed up qemu by not bisecting
2021-12-08 23:08:32 +00:00
ikelos and GitHub
8f083ed1dd
Merge pull request #476 from japhlange/issues/issue474_netscan_win8sp1x64
...
adds netstat symbols to Win8x64 ISF files
2021-12-06 20:10:25 +00:00
Jan
125658ee0d
re-adds accidentally deleted file
2021-12-06 21:09:39 +01:00
Jan
be4d014f1a
improves decision making when to inspect driver pe header based on version_dict
2021-12-06 17:18:39 +01:00
Jan
6cd2d940f3
adds proper version requirement for verinfo
2021-12-06 17:18:38 +01:00
Jan
3aac7b228e
adds a few clarifying comments and handles errors better
2021-12-06 17:16:23 +01:00
Jan
ee65793fd8
adds new ISF for tcpip.sys 6.3.9600.19935 + distinguisher
2021-12-06 17:16:20 +01:00
Jan
90ad7b1609
reverts pointless createtime offset change
2021-12-06 17:14:40 +01:00
Jan
fffb375909
adds netstat symbols to Win8x64 ISF files
2021-12-06 17:14:40 +01:00
Mike Auty
96820e2804
Plugins: Bump skeleton_key_check to 2.0.0
2021-12-03 16:02:06 +00:00
ikelos and GitHub
da1216a747
Merge pull request #594 from a5hlynx/develop
...
update version to 2.0.0
2021-12-03 15:58:15 +00:00
a5hlynx
680349016e
update version to 2.0.0
2021-12-04 00:29:00 +09:00
Mike Auty
f821ac6072
Layers: Comment out unused code in AVML
2021-11-17 20:42:11 +00:00
Mike Auty
8d48faa0d9
Layers: Close file on layer destruction to prevent ResourceWarning
2021-11-17 13:52:25 +00:00
Mike Auty
3cb2bf9fac
Core: Fix up python 3.10 support
...
Fixes #589
2021-11-17 13:41:09 +00:00
Mike Auty
a1cbea27a8
Layers: Speed up qemu by not bisecting
2021-11-08 22:56:06 +00:00
ikelos and GitHub
23453f5d8c
Merge pull request #580 from volatilityfoundation/issues/large-page-fix
...
Layers: Fix bug where PAT flag is treated as address
2021-11-03 19:20:38 +00:00
ikelos and GitHub
bcdec8a480
Merge pull request #584 from CaptWake/issue-449
...
issue-449 - add --physical flag
2021-10-27 23:21:50 +01:00
ikelos and GitHub
0c603a20ba
Merge pull request #579 from volatilityfoundation/feature/vad-maxsize
...
Windows: Set a 100Gb VAD max size for vadinfo
2021-10-27 23:19:57 +01:00
KevTheHermit