Mike Auty
fdc6efc4ad
Add in the LICENSE and the README.
2018-12-19 23:55:03 +00:00
Mike Auty
4bf995059b
Improve documentation for __init__ files.
2018-12-16 14:06:47 +00:00
Mike Auty
35ad2325a8
Move all core plugins over to framework/plugins.
...
This should have no impact functionality-wise.
The statistics plugin was left out a) as an example and b) because it
was committed by mistake in the first place and was never meant to be a
real plugin.
2018-12-16 13:40:15 +00:00
Mike Auty
9824538bd9
Numerous pycharm warnings resolved
...
This includes:
* Better ways of checking empty lists
* Not shadowing builtin functions like filter
* Preventing invalid slash warnings by marking strings as regexps
* Removing unnecessary brackets
* Lowercase variable names
* Adding/updating parameters in docstrings
* Removing unused code (lines not chunks)
* Change in not a member tests
* Changing some methods to static
* Shorting range membership checks
* Missing parameters
* Make some exception handlers more specific
* Don't define a lambda to a variable
* A few more instance checks to help type checkers
2018-12-16 13:21:06 +00:00
Mike Auty
29d41470a4
Mass reformat of typing imports
...
Relented on the strict import of direct objects/classes for the typing
module only. Typing module components can be directly imported because
it makes the code really painful to read and write otherwise.
This is still in-line with the python style guide adopted from Google at
http://google.github.io/styleguide/pyguide.html section 2.2.
2018-12-16 13:04:22 +00:00
Mike Auty
dfe2f86fe2
Lots and lots of typing additions found by an initial monkeytype run.
2018-12-13 23:46:37 +00:00
Mike Auty
1a5c9d3af8
Roll symbols.utility into symbols file until we get enough functions we need to split them out again.
2018-12-12 23:38:01 +00:00
Mike Auty
f57bfa5738
Prepare core plugins for moving into the framework namespace.
2018-12-09 13:32:32 +00:00
Mike Auty
323ea0f348
Add in the timeliner interface to the linux bash plugin.
2018-12-08 18:26:45 +00:00
Mike Auty
b5d532555c
Convert the adhoc scanner into a layer scanner using sections.
2018-12-08 18:21:39 +00:00
Mike Auty
649a39a13d
Change time_as_integer from a property to get_time_as_integer method.
2018-12-08 18:00:44 +00:00
Mike Auty
918653e398
Convert aslr_mask_symbol_table to more parameterized form.
2018-12-08 17:55:13 +00:00
Mike Auty
378820bf23
More 'inheritance' fixes.
2018-12-08 17:45:28 +00:00
Mike Auty
780c5d2646
Avoid 'inheritance' issues with requirements.
2018-12-08 17:43:28 +00:00
Mike Auty
f1780bc547
Use constants.BANG (plus pycharm autoreformat).
2018-12-08 17:34:48 +00:00
Andrew Case and ikelos
dc91a16a2f
update check syscall
2018-12-08 17:34:48 +00:00
Andrew Case and ikelos
ade6aa1e74
update check_afinfo for write member
2018-12-08 17:34:48 +00:00
Andrew Case and ikelos
9d9b68eaa3
have check_afinfo not inherit from lsmod
2018-12-08 17:34:48 +00:00
Andrew Case and ikelos
8705fb3047
update time_object to get_time_object
2018-12-08 17:34:48 +00:00
Andrew Case and ikelos
0e7b6b6702
Updated hist_entry type and references, add bash plugin
2018-12-08 17:34:48 +00:00
Andrew Case and ikelos
36131d01bb
Add check_afinfo plugin
2018-12-08 17:34:48 +00:00
Andrew Case and ikelos
72798d3187
Add linux system call checking plugin
2018-12-08 17:34:48 +00:00
Mike Auty
db7320e426
Bulk lint and a couple of typos fixed.
2018-11-08 00:19:17 +00:00
Andrew Case and ikelos
542a062779
Update how the modules list address is found
2018-11-08 00:19:17 +00:00
Andrew Case and ikelos
7aa729f4b7
add typing import to pslist
2018-11-08 00:19:17 +00:00
Andrew Case and ikelos
af496d4741
update lsof to print name properly
2018-11-08 00:19:17 +00:00
Andrew Case and ikelos
98e472e211
major updates and new plugins
2018-11-08 00:19:17 +00:00
Andrew Case and ikelos
63e9cd4604
initial set of Linux plugins and extensions for ikelos review
2018-11-08 00:19:17 +00:00
Mike Auty
244af47a2a
Swap inheritted config options for explicit config options.
2018-08-28 22:32:52 +01:00
Mike Auty
d68d62e47d
Fix methodclass conversion for linux pslist.
2018-06-20 22:19:24 +01:00
Mike Auty
ac8401991c
Convert all remaining plugins to use the new classmethod pslist.
2018-06-16 13:38:48 +01:00
Mike Auty
f8b592c236
Make the config path for plugins dynamic.
2018-05-15 00:11:31 +01:00
Mike Auty
38eff91371
Remove vestigal update_configuration methods.
2018-05-06 01:24:40 +01:00
Mike Auty
60e1aebaf8
Improve the plugin help descriptions.
2017-11-25 16:19:47 +00:00
Mike Auty
a60fcba32f
Make sure we don't assume that the primary layer's config lives under our own.
2017-11-13 01:18:54 +00:00
Mike Auty
6c6d0473a1
Fixed table names will no longer work since tables are prefix-named.
2017-09-03 23:17:40 +01:00
Mike Auty
710043f508
Fix up the ASLR finding to compensate for older task_struct structures.
2017-09-03 23:16:22 +01:00
Nick L. Petroni, Jr
5bb2aef9fc
Created linux.proc.Maps plugin.
...
Added object extensions for the key structures. Also added
constants.linux, which will contain Linux-specific constants
that can't be extracted via dwarf.
2017-08-16 16:14:33 -04:00
Mike Auty
c19ad1cb22
Placeholder change to ensure even if we don't change it to a from statement, it isn't bizarre.
2017-08-10 10:03:39 +01:00
Mike Auty
8be6869a84
Tidy up imports and adhere to the coding style of never directly importing objects.
2017-08-09 22:22:43 +01:00
Nick L. Petroni, Jr
8fcbf988b5
initial linux.pslist.PsList plugin
2017-05-14 22:24:05 -04:00
Mike Auty
a97bd19988
Reformat and optimize code, including trailing whitespace and end of file newline.
2014-06-10 15:40:50 +01:00
Mike Auty
5f282d673e
Add in constants and a tree skeleton for eventual plugins.
2014-04-08 00:14:29 +01:00
Mike Auty