 SolitudePy
|
1d2b78976a
|
Plugins: categorize linux.hidden_modules as a malware plugin
|
2025-06-07 19:54:44 +03:00 |
|
|
SolitudePy
|
962665b412
|
Plugins: categorize linux.check_afinfo as a malware plugin + test fix
|
2025-06-07 19:44:50 +03:00 |
|
|
SolitudePy
|
70514396b3
|
linux.malware.check_syscall - fix test
|
2025-06-07 19:35:26 +03:00 |
|
|
SolitudePy
|
5b538d1686
|
Plugins: categorize linux.check_syscall as a malware plugin
|
2025-06-07 19:35:19 +03:00 |
|
|
SolitudePy
|
4b279f9633
|
linux.malware.check_modules - fix test
|
2025-06-07 19:30:04 +03:00 |
|
|
SolitudePy
|
832c997e20
|
Plugins: categorize linux.check_modules as a malware plugin
|
2025-06-07 19:29:55 +03:00 |
|
|
SolitudePy
|
4bc1bb818d
|
linux.malware.check_idt - fix doc & test deps
|
2025-06-07 19:23:13 +03:00 |
|
|
SolitudePy
|
c36fdd69f6
|
Plugins: categorize linux.check_idt as a malware plugin
|
2025-06-07 19:22:58 +03:00 |
|
|
SolitudePy
|
85a5eb5d41
|
linux.malware.check_creds - fix deps in: test, doc
|
2025-06-07 18:42:42 +03:00 |
|
|
SolitudePy
|
8acf97c475
|
Plugins: categorize linux.check_creds as a malwarep lugin
|
2025-06-07 18:42:13 +03:00 |
|
|
SolitudePy
|
ef07b07659
|
Plugins: categorize windows.drivermodule as a malware plugin
|
2025-06-07 18:25:53 +03:00 |
|
|
SolitudePy
|
f97bc920bb
|
Plugins: changed class name due to incorrect resolution
|
2025-06-07 18:09:26 +03:00 |
|
|
SolitudePy
|
66473ac644
|
categorize windows.unhooked_system_calls as a malware plugin
|
2025-06-07 18:00:36 +03:00 |
|
|
SolitudePy
|
45934ae0fd
|
removed import for ruff
|
2025-06-07 17:40:02 +03:00 |
|
|
SolitudePy
|
6537086e62
|
black
|
2025-06-07 17:33:09 +03:00 |
|
|
SolitudePy
|
d4644208a9
|
Plugins: fix svcdiff deprecation wrapper
|
2025-06-07 17:32:54 +03:00 |
|
|
ikelosandGitHub
|
2fbb872c9a
|
Merge pull request #1834 from SolitudePy/skel_key_malware
Malware categorization: windows.skeleton_key_check
|
2025-06-07 15:12:37 +01:00 |
|
|
ikelosandGitHub
|
84c33916df
|
Merge pull request #1835 from SolitudePy/suspicious_threads_malware
Malware categorization: windows.suspicious_threads
|
2025-06-07 15:10:02 +01:00 |
|
|
ikelosandGitHub
|
9c84152eea
|
Merge pull request #1832 from SolitudePy/processghosting_malware
Malware categorization: windows.processghosting
|
2025-06-07 15:07:36 +01:00 |
|
|
ikelosandGitHub
|
2bd9a0e710
|
Merge pull request #1831 from SolitudePy/hollowprocesses_malware
Malware categorization: windows.hollowprocesses
|
2025-06-07 15:05:59 +01:00 |
|
|
ikelosandGitHub
|
3f9794b3dc
|
Merge pull request #1830 from SolitudePy/malfind_malware
Malware categorization: windows.malfind
|
2025-06-07 15:04:23 +01:00 |
|
|
SolitudePy
|
93defa112c
|
Plugins: categorize windows.svcdiff as a malware plugin
|
2025-06-07 16:32:19 +03:00 |
|
|
SolitudePy
|
48a97166ea
|
categorize windows.skeleton_key_check as malware plugin
|
2025-06-07 16:30:49 +03:00 |
|
|
Mike Auty
|
520e2cfcdd
|
Core: Fix up warning message
|
2025-06-07 14:21:22 +01:00 |
|
|
Mike Auty
|
c85026ee91
|
Core: Ensure people running renamed plugins know that the plugins are deprecated
|
2025-06-07 14:20:37 +01:00 |
|
|
SolitudePy
|
a95ebfe3fd
|
categorize windows.suspicious_threads as malware plugin
|
2025-06-07 16:06:32 +03:00 |
|
|
SolitudePy
|
e5738c1263
|
categorize windows.psxview as malware plugin
|
2025-06-07 14:03:36 +03:00 |
|
|
SolitudePy
|
21da9002d7
|
categorize windows.processghosting as a malware plugin
|
2025-06-07 13:31:26 +03:00 |
|
|
SolitudePy
|
1498926dec
|
categorize windows.hollowprocesses as malware
|
2025-06-07 13:22:29 +03:00 |
|
|
SolitudePy
|
fd1e5510bb
|
categorize malfind as malware plugin
|
2025-06-07 12:27:27 +03:00 |
|
|
Mike Auty
|
fb76bf6b6c
|
Linux: Minor linting fixes to fbdev plugin
|
2025-06-07 10:22:53 +01:00 |
|
|
Mike Auty
|
0d7f985ef6
|
Plugins: Add in __init__ files to create submodules for OS plugins
|
2025-06-07 10:16:22 +01:00 |
|
|
SolitudePy
|
eba4e4b50c
|
generator overhead
|
2025-06-07 11:50:07 +03:00 |
|
|
Mike Auty
|
8924776698
|
Plugins: Remove deprecated PluginRequirement in favour of VersionRequirement
|
2025-06-07 09:41:19 +01:00 |
|
|
SolitudePy
|
f01310c238
|
use search instead of match
|
2025-06-07 11:39:56 +03:00 |
|
|
SolitudePy
|
306b7ff42b
|
use maxsize argument
|
2025-06-06 23:55:12 +03:00 |
|
|
ikelosandGitHub
|
1571e65ad8
|
Merge pull request #1821 from eve-mem/deprecation_warning_for_PluginRequirement
Add a deprecation warning for PluginRequirement
|
2025-05-29 19:48:50 +01:00 |
|
|
ikelosandGitHub
|
9fd734762b
|
Merge pull request #1823 from j-t-1/malfind
Tweak comments
|
2025-05-29 19:48:37 +01:00 |
|
|
eve
|
3ce515bc01
|
Add return for matches_required in VersionRequirement
|
2025-05-29 16:53:35 +01:00 |
|
|
ikelosandGitHub
|
8e9e2d6f08
|
Merge pull request #1822 from eve-mem/linux_perf_events_VersionRequirement
Linux: update PerfEvents plugin to use VersionRequirement for pslist
|
2025-05-29 09:47:05 +01:00 |
|
|
ikelosandGitHub
|
1206b69abd
|
Update volatility3/framework/plugins/windows/malfind.py
|
2025-05-29 09:45:26 +01:00 |
|
|
eve
|
a4bc02e41f
|
Move version checking logic into versionutils module
|
2025-05-29 07:26:53 +01:00 |
|
|
j-t-1andGitHub
|
bb4cee7071
|
Tweak comments
Also remove zeroes starting a slice.
|
2025-05-29 06:47:03 +01:00 |
|
|
eve
|
0be4d809c1
|
Linux: update PerfEvents plugin to use VersionRequirement for pslist
|
2025-05-28 21:16:04 +01:00 |
|
|
eve
|
83cfc84f36
|
Add a deprecation warning for PluginRequirement
|
2025-05-28 20:05:03 +01:00 |
|
|
Mike Auty
|
40a3d23e2d
|
Infra: Update checkout actions
|
2025-05-26 10:19:28 +01:00 |
|
|
ikelosandGitHub
|
c9e25a3f86
|
Merge pull request #1815 from ddogfoodd/fix-typos
fix: typos
|
2025-05-26 10:00:50 +01:00 |
|
|
Jost Alemann
|
4f11586ef1
|
fix: typos
|
2025-05-23 10:52:33 +02:00 |
|
|
Abyss Watcher
|
75293ec931
|
bump: 2.26.2 -> 2.27.0
|
2025-05-21 18:49:31 +02:00 |
|
|
Abyss Watcher
|
0d272c919a
|
enhance VMA smearing protection
|
2025-05-21 18:48:51 +02:00 |
|