Gustavo Moreira
5a8a0def35
Fix docstring typos
2024-01-30 12:53:09 -03:00
gcmoreira and GitHub
cd867bf5d2
Merge branch 'volatilityfoundation:develop' into linux_ifconfig_plugin
2024-01-27 20:32:33 -03:00
Gustavo Moreira
620b9b4183
Fix: Explicit returns mixed with implicit (fall through) returns
2024-01-27 17:52:26 -03:00
Gustavo Moreira
97007e8b86
Minor fixes
2024-01-27 17:48:09 -03:00
Gustavo Moreira
6e0ffc9d62
Plugin renamed. Added net iface status and other improvements from @eve #1029
...
* IP address conversion via renderers.coversion.*
* Use MAC address internal size instead of hardcoded.
* Read NET_DEVICE_FLAGS from enumeration
2024-01-27 17:39:34 -03:00
Mike Auty
4b86b9ea89
Plugins: Remove unnecessary variable from windows.mftscan
2024-01-17 20:40:27 +00:00
Mike Auty
01ffcd9634
Core: Fixing None equality test in MapleTree implementation
2024-01-17 20:37:26 +00:00
Mike Auty
614d4d6f2b
Layers: Fix cloudstorage unnecessary import
2024-01-17 20:35:54 +00:00
Gustavo Moreira
6b3bbad537
Fix exception. Although it will be auto-instantiated it's better to explicitily use the exception instance
2024-01-09 16:13:33 -03:00
Gustavo Moreira
82668af609
Linux - Added linux.ifconfig.Ifconfig plugin
2024-01-09 16:12:56 -03:00
ikelos and GitHub
66a4fc92bb
Merge pull request #1075 from gcmoreira/linux_kmsg_older_kernels_support
...
Linux: Add support for kernels earlier than version 3.11 in `linux.kmsg.Kmsg` plugin
2024-01-02 19:08:03 +00:00
Gustavo Moreira
66b408d6e8
Fix minor docstring typos
2024-01-02 11:37:10 -03:00
Gustavo Moreira
8e58815c11
Bump plugin's patch version
2024-01-02 11:25:35 -03:00
Gustavo Moreira
02a389a61b
Improve docstrings
2024-01-02 11:17:18 -03:00
Gustavo Moreira
e4c44698f8
Reduce imports
2024-01-02 11:14:43 -03:00
Gustavo Moreira
0d934d4991
Fix error and comment
2023-12-26 16:13:47 -03:00
Gustavo Moreira
3848fc69a6
Add support for kernels earlier than version 3.11.
...
* Add support for older ring buffer kernel implementation:
- 3.5 < kernels
- 3.5 <= kernels < 3.11
* Enabled support for wrapped-around ring buffers in all four kernel implementations.
* Bugfix: wrapped around buffer issue with 3.11 <= kernel < 5.10.
2023-12-25 21:32:14 -03:00
ikelos and GitHub
fdf93f502f
Merge pull request #1062 from vobst/handle-duplicate-enum-value
...
tolerate duplicate enum values, keep first name that was seen
2023-12-20 19:42:50 +00:00
ikelos and GitHub
a4b927f478
Merge pull request #1068 from vobst/remove-kernel_cap_struct-requirement
...
remove kernel_cap_struct requirement
2023-12-20 11:26:18 +00:00
Valentin Obst
aa624b0339
remove kernel_cap_struct requirement
2023-12-19 10:25:26 +01:00
Valentin Obst
bd96357e33
tolerate duplicate enum values, keep first name that was seen
2023-12-19 09:32:25 +01:00
ikelos and GitHub
18e5d7a7f2
Merge pull request #1061 from eve-mem/linux_kmsg_issue_1055
...
Linux: Update kmsg issue 1055
2023-12-18 18:59:30 +00:00
ikelos and GitHub
4ac261c7bf
Merge pull request #1057 from eve-mem/linux_fix_pstree
...
Linux: Update pslist to fix pstree
2023-12-14 11:10:49 +00:00
Eve and GitHub
e2f7e7ec54
Merge branch 'volatilityfoundation:develop' into linux_fix_pstree
2023-12-14 09:52:28 +00:00
Eve
9b85342673
Linux: bump version for linux kmsg
2023-12-14 09:24:51 +00:00
Eve
fda3cedaba
Linux: update kmsg to create objects via context rather than module
2023-12-14 09:18:01 +00:00
ikelos and GitHub
713b5f96dd
Merge pull request #997 from gcmoreira/issue_985
...
Issue 985
2023-12-12 23:35:54 +00:00
ikelos and GitHub
298570aba4
Merge branch 'develop' into issue_985
2023-12-12 23:06:45 +00:00
Eve
3d9b0208cb
Linux: change pstree to a basic plugin rather than inheriting from pslist
2023-12-12 06:56:14 +00:00
Eve
19499d5113
Linux: update pslist with classmethod for get_task_fields
2023-12-11 06:39:09 +00:00
Eve
c08dda88de
Linux: Update pslist plugin so that it can be used from pstree, and update pstree to support dumping of processes
2023-12-08 22:56:17 +00:00
Eve and GitHub
b9c60a5545
Merge branch 'volatilityfoundation:develop' into linux_kmsg_issue_1055
2023-12-07 09:07:15 +00:00
Eve
831e6cf341
Linux: update kmsg KmsgFiveTen class to handle symbol shift and create objects with absolute addresses
2023-12-07 09:06:13 +00:00
ikelos and GitHub
a08b7809b5
Merge pull request #1050 from eve-mem/windows_vadyarascan_issue_1047
...
Windows: update vadyarascan to use generic yarascan requirements
2023-12-05 18:46:07 +00:00
ikelos and GitHub
8262737912
Merge pull request #1010 from eve-mem/linux_elf_padded_magic_read
...
Linux: Add error handling to elf extension magic bytes check
2023-12-03 15:22:33 +00:00
ikelos and GitHub
799c7edf66
Merge pull request #1044 from forensicxlab/feature/ADS
...
Feature: Alternate Data Streams.
2023-12-03 15:20:53 +00:00
k1nd0ne
acb088dbcd
Better code reading
2023-12-03 13:05:45 +01:00
k1nd0ne
ed2db939d6
Better exception handling. Fetching data using objects
2023-12-03 12:24:11 +01:00
ikelos and GitHub
42a89cf027
Merge pull request #1037 from forensicxlab/feature/bucket-s3
...
Feature: Remote analysis on cloud object-storage.
2023-12-01 14:07:52 +00:00
ikelos and GitHub
21af01ddd2
Merge pull request #1034 from eve-mem/linux_maple_tree_seen_parameter_fix
...
Linux: update maple tree extension to fix issue #1032
2023-12-01 13:57:45 +00:00
Eve
276e695237
Linux: update maple tree extension comment around the seen set.
2023-12-01 13:46:00 +00:00
Eve
7fe086f64f
Linux: update maple tree extension to fix issue #1032 correcting the mutable type used as a default parameter.
2023-12-01 13:37:09 +00:00
k1nd0ne
1f5a18d679
patch running black
2023-11-30 11:54:55 +01:00
k1nd0ne
ed98d453f6
Changing requirements + formating
2023-11-30 11:50:04 +01:00
ikelos and GitHub
292bef9fcc
Merge pull request #1051 from eve-mem/linux_iomem_absolute_address_bugfix
...
Linux: fix bug with iomem plugin due to absolute address misuse
2023-11-29 21:04:44 +00:00
Eve
099403d07c
Linux: fix bug with iomem plugin where an absolute address is used to make an object but the absolute flag is not set
2023-11-29 20:47:14 +00:00
Mike Auty
b20643d5e0
Linux: Tidy up the elf symbol table name
2023-11-29 12:03:43 +00:00
ikelos and GitHub
0769df4b3c
Merge pull request #1039 from Abyss-W4tcher/linux_extensions_patches
...
Linux extensions patches
2023-11-29 12:02:46 +00:00
Abyss Watcher
39144ff45f
type hint get_symbols_names_and_addresses
2023-11-29 12:51:08 +01:00
Eve
c610497fa0
Windows: update vadyarascan to use generic yarascan requirements
2023-11-29 09:28:34 +00:00
Gustavo Moreira