Andrew Case
506a61d884
Address feedback
2025-01-24 22:09:24 +00:00
Andrew Case
e9088be0d8
Prevent infinite looping and out of memory errors #1482
2025-01-24 22:02:27 +00:00
Daniel Davidov
17d52c27bf
Update method_low_stub_offset & run ruff & black
...
* Eliminate unnecessary scanning for 32 bit processors where the structure PROCESSOR_START_BLOCK doesn't exist
* Put offsets as values of constants in a class - LowStubLayout.
* Add documentation in the class and in the function method_low_stub_offset
* Run "ruff check --fix" and "black ."
* Checked the method works on 3 physical machines
2025-01-24 21:09:28 +02:00
Mike Auty
128e1be154
Core: Fix f-string quotes
2025-01-23 20:57:44 +00:00
Mike Auty
61f60ac464
Core: Move the python check somewhere it can't accidentally be removed
2025-01-23 20:52:08 +00:00
Mike Auty
a68be50798
Revert "Typing fix"
...
This reverts commit c82d432b10
2025-01-23 20:30:21 +00:00
Dave Lassalle
81ba89eef6
#1473 - update exception message
2025-01-23 12:20:14 -06:00
Dave Lassalle
6c4cafa64f
#1473 - black fixes
2025-01-23 11:59:37 -06:00
Dave Lassalle
b8d9c7b883
#1473 - add missing exception handling for get_key
2025-01-23 11:57:43 -06:00
Abyss Watcher
fd77c04153
move to linux_utilities_modules APIs
2025-01-23 10:46:42 +01:00
Abyss Watcher
7575aa5d63
deprecate lookup_module_address and mask_mods_list
2025-01-23 10:44:20 +01:00
Abyss Watcher
43ab0b0c31
add deprecation decorator
2025-01-23 10:43:14 +01:00
Abyss Watcher
34a7dfc72f
split linux modules utilities
2025-01-23 10:42:52 +01:00
ikelos and GitHub
db0a8a0078
Merge pull request #1381 from the-rectifier/develop
...
Volshell: Add Dedicated Method to retrieve EPROCESS/Task object
2025-01-23 00:06:56 +00:00
Daniel Davidov
c10572905f
Add low stub offset kernel detection
...
reference: Memprocfs and https://www.youtube.com/watch?v=_ShCSth6dWM
2025-01-22 10:45:52 +02:00
Odysseas Stavrou
b59f051353
Volshell: Updates to the get_process() methods
2025-01-22 02:39:35 +02:00
Odysseas Stavrou
dfe3d255c0
Volshell: Update Process retrieval methods with virtual/physical offsets
2025-01-20 22:25:01 +02:00
ikelos and GitHub
d2314ed1ef
Merge pull request #1537 from volatilityfoundation/issues/improve-jsonschema-speed
...
Issues/improve jsonschema speed
2025-01-20 08:26:32 +00:00
ikelos and GitHub
51726cd14f
Merge pull request #1553 from gcmoreira/parity_release_harden_page_cache
...
Linux - Parity release harden Page Cache
2025-01-20 08:17:16 +00:00
ikelos and GitHub
0f09ecd126
Merge pull request #1563 from volatilityfoundation/revert-1561-pre_linux_pagecache_recoverfs_support
...
Revert "Pre linux.pagecache.recoverfs support"
2025-01-20 08:16:24 +00:00
Gustavo Moreira
ec7a101eb9
linux: page_cache.InodePages plugin: Remove unnecesary casting
2025-01-20 11:05:51 +11:00
Gustavo Moreira
bf76aad1e2
linux: page_cache.Files plugin: Ensure the inode's i_link pointer is readable
2025-01-20 11:05:46 +11:00
ikelos and GitHub
e158ea73b2
Merge pull request #1562 from volatilityfoundation/revert-1513-env_var_missing_exception_handler
...
Revert "Add missing exception handling in env var recovery. Prevent backtraces"
2025-01-20 00:00:21 +00:00
ikelos and GitHub
e18bffdde9
Revert "Pre linux.pagecache.recoverfs support"
2025-01-19 23:51:28 +00:00
ikelos and GitHub
74b98e62c7
Revert "Add missing exception handling in env var recovery. Prevent backtraces"
2025-01-19 23:42:41 +00:00
ikelos and GitHub
00a69c9e49
Merge pull request #1561 from Abyss-W4tcher/pre_linux_pagecache_recoverfs_support
...
Pre linux.pagecache.recoverfs support
2025-01-19 16:57:21 +00:00
Abyss Watcher
d42ffc01e2
typo
2025-01-19 17:33:47 +01:00
Abyss Watcher
a02243bb3c
2.1.0 -> 3.0.0 InodePages bump
2025-01-19 17:27:27 +01:00
Abyss Watcher
59703045c7
switch calling convention to context and layer name
2025-01-19 17:26:42 +01:00
ikelos and GitHub
89c6d7a80e
Merge pull request #1338 from Abyss-W4tcher/add_scatterlists
...
Introduce scatter-gather scatterlists
2025-01-19 16:25:59 +00:00
Abyss Watcher
eddba98ef7
type hint format_symlink
2025-01-19 17:09:59 +01:00
Abyss Watcher
ecae545f58
typo
2025-01-19 17:05:52 +01:00
Abyss Watcher
452d6e705b
1.0.1 -> 1.1.0 Files bump
2025-01-19 16:26:25 +01:00
Abyss Watcher
da068676d1
typo
2025-01-19 15:16:09 +01:00
Abyss Watcher
818ddb746b
2.0.0 -> 2.1.0 InodePages bump
2025-01-19 15:15:55 +01:00
Abyss Watcher
e8b44efc17
add and leverage write_inode_content_to_stream
2025-01-19 15:13:26 +01:00
Abyss Watcher
8594106005
1.0.1 -> 1.2.0 Files bump
2025-01-19 15:12:10 +01:00
Abyss Watcher
6f2ff4f7c6
add InodeSize column to Files
2025-01-19 15:11:03 +01:00
Abyss Watcher
48a8f3929b
add and leverage follow_symlinks parameter
2025-01-19 15:10:32 +01:00
Abyss Watcher
1d0159325f
switch to InodeUser.format_symlink
2025-01-19 15:09:20 +01:00
Abyss Watcher
d325e1ca17
add inode_size and format_symlink to Inode* dataclasses
2025-01-19 15:08:27 +01:00
Abyss Watcher
08830fee05
use architectures.LINUX_ARCHS
2025-01-19 15:06:42 +01:00
Abyss Watcher
726fbe6cce
2.17.1 -> 2.18.0 bump
2025-01-19 13:01:14 +01:00
Abyss-W4tcher and GitHub
38fe41b4f0
Merge branch 'volatilityfoundation:develop' into add_scatterlists
2025-01-19 12:56:45 +01:00
ikelos and GitHub
4452aa6e23
Merge pull request #1560 from Abyss-W4tcher/isf_objects_list_to_hashmap
...
Intermed: leverage iterable hashmaps instead of lists
2025-01-18 15:10:36 +00:00
Abyss Watcher
c2ef3c2fe5
add fixme about merge operator
2025-01-18 15:59:51 +01:00
Abyss Watcher
0ee016e655
2.17.0 -> 2.17.1 bump
2025-01-18 15:50:28 +01:00
Abyss Watcher
c5628c5d79
revert the mistakenly removed types type hinting
2025-01-18 15:48:44 +01:00
Abyss Watcher
4b3d93b0f0
2.17.0 -> 2.18.0 bump
2025-01-18 15:00:03 +01:00
Abyss Watcher
ba09db6952
improve comments
2025-01-18 14:54:04 +01:00
Andrew Case