Mike Auty
658f75f340
Fix a typo that would break the config file.
2015-01-26 01:48:26 +00:00
Mike Auty
0d2720974e
Take another shot at the config system. Needs to move several components into an interface file.
2015-01-26 01:47:28 +00:00
Mike Auty
4b80866c9b
Remove the comment about doing the physical automagic in the layer itself. Automagic should be a function that composes the components itself.
2015-01-26 01:46:57 +00:00
Mike Auty
d27c3adced
Remove helper functions that don't format properly.
2015-01-20 00:00:27 +00:00
Mike Auty
e880dee5ab
Provide a default NativeTable, now that natives can be updated.
2015-01-19 23:58:16 +00:00
Mike Auty
3a28d7ae41
Refactor the context work, to use composable objects rather than inheritable classes.
2015-01-19 23:57:49 +00:00
Mike Auty
38a85cfc0b
Fix up optimization to use byte strings.
2015-01-19 23:54:32 +00:00
Mike Auty
fadd565d05
Add in default values for options.
2015-01-19 11:02:31 +00:00
Mike Auty
a382916593
Add in reading optimization.
2015-01-19 11:02:01 +00:00
Mike Auty
bd4121448a
Add in minor optimization.
2015-01-19 00:51:17 +00:00
Mike Auty
f04122f640
Add in initial implementation of ContextFactories as classes. This is probably not the right way to do things, so I'll be trying out making them as objects with a function chain for applying modifications in a little while.
2015-01-16 11:29:12 +00:00
Mike Auty
246974de36
First draft of a ContextBuilding system.
2015-01-09 01:55:32 +00:00
Mike Auty
cd07ff17b2
Pull out the interfaces from the TreeGrid/TreeNode structures.
2015-01-08 00:06:52 +00:00
Mike Auty
9d5027ddd6
Add in TreeGrid/Renderer framework from volatility3. Consider pulling interfaces for TreeGrid and TreeNode out into interfaces.
2015-01-07 13:59:14 +00:00
Mike Auty
3ef18b105f
Remove pointless assertion code.
2015-01-06 01:45:32 +00:00
Mike Auty
119accb10c
Add a length parameter to is_valid to check whether whole blocks are valid or not.
2015-01-05 18:40:33 +00:00
Mike Auty
c163101e17
Correctly pass constructor arguments through the template's vol dictionary.
2015-01-05 18:39:59 +00:00
Mike Auty
cadb761f67
Fix documentation typo.
2015-01-05 16:01:14 +00:00
Mike Auty
49fa45cda1
Clean-up the namespace even more by putting the template proxy code into its own subclass.
2015-01-05 15:57:35 +00:00
Mike Auty
465bf03ad1
Fix casting.
2015-01-05 15:05:26 +00:00
Mike Auty
87967853f7
Convert volinfo namespace to vol namespace.
2015-01-05 15:04:40 +00:00
Mike Auty
7c53ae31bb
Fix up all the necessary components in the _LIST_ENTRY code.
2015-01-05 00:00:16 +00:00
Mike Auty
125510b21f
Fix quite a critical structure naming issue.
2015-01-04 23:59:05 +00:00
Mike Auty
f64b232f5a
Add in the iter function now that we finally have the member_name stored.
2015-01-04 23:10:48 +00:00
Mike Auty
6770aa1adb
Tidy up templates and template interfaces.
2015-01-04 23:09:30 +00:00
Mike Auty
44a375e720
Match the abstract property of the interface.
2015-01-04 21:21:34 +00:00
Mike Auty
0af0a5b21f
Avoid built-in shadowing.
2015-01-04 21:16:54 +00:00
Mike Auty
73bd451759
Minor pylinting across the whole project.
2015-01-04 21:14:17 +00:00
Mike Auty
ea3ba27a04
Refactor template_* functions.
2015-01-04 20:52:34 +00:00
Mike Auty
62e46c194d
Eliminate the *args, **kwargs from the intel translation layer code.
2015-01-04 04:59:14 +00:00
Mike Auty
21109c8eca
Revert "Remove the need for **magic from the intel translation layer."
...
This reverts commit c8dee9f827
2015-01-04 04:57:30 +00:00
Mike Auty
c8dee9f827
Remove the need for **magic from the intel translation layer.
2015-01-04 04:56:02 +00:00
Mike Auty
0046ffc0d7
Fix critical typo in intel translation layer.
2015-01-04 04:55:39 +00:00
Mike Auty
95238f7f01
Eradicate **magic where possible and rename where appropriate.
2015-01-04 04:55:17 +00:00
Mike Auty
e9e7f396ed
Refactor ReadOnlyInformation to the more appropriate ReadOnlyMapping.
2015-01-04 04:54:02 +00:00
Mike Auty
8560aa8a55
Tidy up the Object calling interface.
2015-01-04 04:38:34 +00:00
Mike Auty
446536d789
Remove the concept of template_info and revert to structure_name alone.
2015-01-04 04:27:52 +00:00
Mike Auty
15b2f6f717
Initial introduction of ObjectInformation class.
2015-01-04 03:41:37 +00:00
Mike Auty
88afd32158
Create an initial divide between object_information and template_information.
2015-01-02 01:52:00 +00:00
Mike Auty
09ee972e7e
Add in initial version of _LIST_ENTRY.
2015-01-02 00:12:28 +00:00
Mike Auty
85f639fd83
Remove attempt at type checking through annotations.
2015-01-02 00:10:22 +00:00
Mike Auty
d12bcf0666
Minor formatting change.
2014-12-31 21:04:55 +00:00
Mike Auty
932662e453
Fix up refactoring of the get_structure method.
2014-12-31 21:04:39 +00:00
Mike Auty
9c919a3d91
Fill in a few more of the missing abstract methods.
2014-12-31 21:03:52 +00:00
Mike Auty
811858aba8
Fix metaclass usage in python 3, and fill in some missing requirements.
2014-12-31 04:25:11 +00:00
Mike Auty
5655548d3f
Allow owning_process to be called without parameters.
2014-12-31 03:46:34 +00:00
Mike Auty
4a4deebda5
Fix up refactoring error in pointer dereference caching.
2014-12-31 03:45:56 +00:00
Mike Auty
bdb0c1488a
Update test_rig code to play around with code fragments.
2014-12-31 03:20:32 +00:00
Mike Auty
bc3ea39e97
Refactor the structure code to accomodate constant finding.
2014-12-31 03:12:28 +00:00
Mike Auty
47a1390bb9
Allow explicit dereferencing at a layer within memory.
...
This is in contrast to volatility-2.x where object were automatically
instantiated with a native_vm (or native_layer in 3.x parlance) and then
any dereferences occurred in the correct layer.
The space savings are now minimal since each object carries around only
a layer name, and not a reference to the entire space. However, given
situations such as kernel structures containing pointers into
process spaces, where the native_vm is useless, this decision is
designed to make working on a particular layer explicit and therefore
more obvious. It may mean exposing that up through levels of functions,
but hopefully it will make all the code more obvious and less
automagical.
2014-12-31 03:03:31 +00:00
Mike Auty