Mike Auty
f898dca296
Refactor SymbolRequirement to SymbolTableRequirement for clarity.
2019-02-06 21:26:32 +00:00
Mike Auty
040da46deb
Fix up the descriptions for non-simple requirements.
2019-01-03 00:39:53 +00:00
Andrew Case and ikelos
92adf4ffd0
switch mac_pslist to absolute_symbol_addresses interface
2018-12-27 22:43:19 +00:00
Andrew Case and ikelos
b77d638ead
switch mac_lsmod to absolute_symbol_addresses interface
2018-12-27 22:43:19 +00:00
Andrew Case and ikelos
1845fe9ec5
update syscall to use new API correctly
2018-12-27 22:43:19 +00:00
Andrew Case and ikelos
f8fab3a71d
switch mac_trustedbsd to absolute_symbol_addresses interface
2018-12-27 22:43:19 +00:00
Andrew Case and ikelos
9eeac53d8d
add mac_check_syscall
2018-12-27 22:43:19 +00:00
Mike Auty
fdc6efc4ad
Add in the LICENSE and the README.
2018-12-19 23:55:03 +00:00
Mike Auty
e3ab3b1c8f
Make certain methods protected, otherwise they should be classmethods.
2018-12-19 22:48:16 +00:00
Mike Auty
189c8786f1
Rename filt to filter_func (because we value clarity over brevity) and another small fix.
2018-12-19 22:46:33 +00:00
Mike Auty
39634893d6
Reformat with yapf and change filter to filt.
2018-12-19 19:43:56 +00:00
Andrew Case and ikelos
989e8643e9
add mac_bash
2018-12-19 19:43:56 +00:00
Andrew Case and ikelos
06cd454913
add mac_trustedbsd
2018-12-19 19:43:56 +00:00
Andrew Case and ikelos
ab877b3907
move plugins into proper directory
2018-12-19 19:43:56 +00:00
Mike Auty
2a3b7348be
Add in minor changes and remove the duplicate plugins for mac.
2018-12-19 01:01:53 +00:00
Mike Auty
19572b6e1e
Reformat all python files using yapf with custom volatility style.
2018-12-16 16:50:17 +00:00
Mike Auty
35ad2325a8
Move all core plugins over to framework/plugins.
...
This should have no impact functionality-wise.
The statistics plugin was left out a) as an example and b) because it
was committed by mistake in the first place and was never meant to be a
real plugin.
2018-12-16 13:40:15 +00:00
Mike Auty