Mike Auty
6265fc4e2d
Catch errors if the stacker didn't manage to stack correctly.
2017-08-31 01:04:01 +01:00
Mike Auty
9346e220ed
Add more detailed information for non-threaded scanners.
2017-08-31 01:02:42 +01:00
Mike Auty
e09ad9b884
Make the automagic progress a little easier to understand.
2017-08-31 00:23:41 +01:00
Mike Auty
9b835b1baf
Remove excess windows volshell local variables.
2017-08-29 23:55:34 +01:00
Mike Auty
f40665f1b7
Split volshell into windows and base/os-agnostic versions.
2017-08-29 23:54:11 +01:00
Mike Auty
cdf64ae08e
Add in initial implementation, currently with windows specific bits.
2017-08-29 01:06:46 +01:00
Mike Auty
aa87c87a22
Remove the additional import that was entirely my fault being there in the first place.
2017-08-16 21:40:58 +01:00
ikelos and GitHub
8698328654
Merge pull request #10 from npetroni/linux-proc-maps
...
Linux proc maps (as reviewed in PR #9 ) 5:)
2017-08-16 21:39:15 +01:00
Mike Auty
59b9645b04
Import linux so we don't need to subimport it everywhere we need to use it.
2017-08-16 21:34:37 +01:00
Nick L. Petroni, Jr
c4e6b07ee0
refactored constants.linux usage
2017-08-16 16:30:12 -04:00
Nick L. Petroni, Jr
5bb2aef9fc
Created linux.proc.Maps plugin.
...
Added object extensions for the key structures. Also added
constants.linux, which will contain Linux-specific constants
that can't be extracted via dwarf.
2017-08-16 16:14:33 -04:00
Mike Auty
efc2d75a86
Ensure that other constant modules are imported.
2017-08-16 14:28:43 +01:00
Mike Auty
91fdc2166e
Don't forget to fix up the path move.
2017-08-15 01:10:38 +01:00
Mike Auty
6b24dd1d03
Convert constants to a module in preparation for pull request #9 .
2017-08-15 01:07:01 +01:00
Mike Auty
eeeda60bfb
A couple more small documentation updates.
2017-08-11 19:30:39 +01:00
Mike Auty
2954d7433f
Improve documentation and ordering.
2017-08-11 19:29:37 +01:00
Mike Auty
e434909e50
Make SymbolTable.symbols consistent with enumerations and types.
2017-08-11 19:25:13 +01:00
Mike Auty
f7f1c1d5e0
Raise the right kind of exception in Intermediate Format SymbolTables.
2017-08-11 08:49:49 +01:00
Mike Auty
c6724a538a
Initial support for compressed files.
2017-08-11 01:12:50 +01:00
Mike Auty
efdd961313
Prevent exceptions if there are no linux symboltables.
2017-08-11 00:05:50 +01:00
Mike Auty
a008686c20
Reduce the logging level of the Pdbscan automagic.
2017-08-10 23:58:34 +01:00
Mike Auty
c336a39695
Fix up the Char type (struct.unpack returns a bytes, not a string).
2017-08-10 20:44:21 +01:00
Mike Auty
570a2d35be
Make the DllList import a little more sensible/consistent.
2017-08-10 10:07:57 +01:00
Mike Auty
c19ad1cb22
Placeholder change to ensure even if we don't change it to a from statement, it isn't bizarre.
2017-08-10 10:03:39 +01:00
Mike Auty
ab5f4fa3ab
Refactor the List and Choice Requirements
...
These are required by the Automagic interface, and so to prevent
importing from outside the interfaces namespace, these two classes
were moved into interfaces.
2017-08-09 22:44:06 +01:00
Mike Auty
d32fc223e2
Fix up additional imports inconsistent with the coding style.
...
Note: also remove interfaces_configuration where ever possible
(this is not possible in the interfaces directory itself
because it would cause an import loop).
2017-08-09 22:32:44 +01:00
Mike Auty
8be6869a84
Tidy up imports and adhere to the coding style of never directly importing objects.
2017-08-09 22:22:43 +01:00
Mike Auty
bfb83f0c33
Fix up silly typo (and replace another hardcoded bang).
2017-08-09 21:34:26 +01:00
Mike Auty
9c3ad5588a
Improve the error handling the LinuxSymbolCache.
2017-08-09 18:06:35 +01:00
Mike Auty
ce89564f71
Merge branch 'master' of github.com:volatilityfoundation/volatility3
2017-08-08 17:45:52 +01:00
Mike Auty
f0d7dbdf68
Add in translate method for TranslationLayers.
2017-08-08 17:45:36 +01:00
Mike Auty
fc0fa96ed8
Replace hardcoded exclamation marks for constants.BANG
2017-08-08 09:50:22 +01:00
Mike Auty
2caeeb275e
First stab at refactoring the add_process_layer code out of the Windows _EPROCESS structure.
2017-08-07 21:42:10 +01:00
Mike Auty
ab8d76eeef
Revert the generator changes, the visiting function should be used instead.
2017-08-02 10:40:16 +01:00
Mike Auty
d8c53b63bf
Don't forget to iterate over the populate generator.
2017-08-02 10:05:12 +01:00
Mike Auty
ff3d5e8f3b
Maintain a row count for populated tree grids.
2017-08-01 15:39:38 +01:00
Mike Auty
029fa8e940
Ensure ColumnSortKey is callable, and make sure the top level direction is considered.
2017-08-01 15:39:01 +01:00
Mike Auty
80508c8711
Allow for ascending or descending sort order.
2017-08-01 02:41:55 +01:00
Mike Auty
5e9b2306d4
Ensure symbol tables are created with unique names.
2017-07-31 16:34:02 +01:00
Mike Auty
d119f372dc
Ensure the populate generator is actually a generator.
2017-07-31 13:52:54 +01:00
Mike Auty
b8f7433dba
Ensure that non-multiprocessing does not use multiprocessing.
2017-07-30 22:40:33 +01:00
Mike Auty
9c8add5d5c
Ensure the dtb is not uninitialized.
2017-07-30 21:10:12 +01:00
Mike Auty
b7c8c8a058
Improve the docstrings for automagic.
2017-07-29 12:53:35 +01:00
Mike Auty
775ece3cb2
Convert the 'ntkrnlmp' requirement into an 'nt' requirement.
2017-07-24 15:43:34 +01:00
Mike Auty
8ad9fbfd24
Ensure imported plugins have their correct requirements fulfilled (even if they change).
2017-07-24 15:41:47 +01:00
Mike Auty
4b0515aa65
Fix up the logging so there are five standard levels, and list the cache location.
2017-07-24 01:39:29 +01:00
Mike Auty
d34b344507
Ensure linux doesn't bog down windows searching.
2017-07-20 19:54:10 +01:00
Mike Auty
c0a8ddd9a3
Improve the progress messages.
2017-07-20 19:35:12 +01:00
Mike Auty
0b6e50daba
Convert pdbscanner to a generator.
2017-07-20 17:47:21 +01:00
Mike Auty
b8fe2a96be
Avoid a variable-reuse issue.
2017-07-20 11:58:16 +01:00
Mike Auty