 ikelosandGitHub
|
543a39485b
|
Merge pull request #1149 from volatilityfoundation/getcellroutine
Add a new getcellroutine plugin that reports hooked GetCellRoutine ha…
|
2024-06-09 23:21:35 +01:00 |
|
|
ikelosandGitHub
|
faadfab481
|
Merge pull request #1151 from volatilityfoundation/feature/linux-replace-intunsignedlong
Linux: Replace uses of specific types with the more generic pointer
|
2024-06-09 23:20:04 +01:00 |
|
|
ikelosandGitHub
|
7c2eca4932
|
Merge pull request #1150 from volatilityfoundation/feature/vmscan
Generic: Add vmscan plugin
|
2024-06-09 23:17:57 +01:00 |
|
|
Gustavo Moreira
|
23b9ed8c0c
|
Extend the changes in fefc6c4a to the run_all() class method
|
2024-06-09 22:02:41 +10:00 |
|
|
Gustavo Moreira
|
9d5636b03a
|
Move the data size setter to the __init__()
|
2024-06-09 21:43:11 +10:00 |
|
|
Gustavo Moreira
|
3793510f59
|
Add VersionRequirement for LinuxUtilities
|
2024-06-09 21:36:20 +10:00 |
|
|
Gustavo Moreira
|
0962f26382
|
class_subclasses is a function, soit's better import the volatility.framework to avoid people accidentally thinking it's defined here and then importing it from here.
|
2024-06-09 21:33:59 +10:00 |
|
|
Gustavo Moreira
|
fefc6c4a4b
|
Pass just the kernel module name instead of the whole config
|
2024-06-09 21:27:27 +10:00 |
|
|
Gustavo Moreira
|
0defe0f07e
|
Rename symbol_table to kernel_module_name
|
2024-06-09 21:08:22 +10:00 |
|
|
Branch Vincent
|
693eebc34b
|
migrate to pyproject.toml
|
2024-06-01 16:16:44 -07:00 |
|
|
Branch Vincent
|
76c8067b21
|
add full and dev extras
|
2024-06-01 16:16:38 -07:00 |
|
|
Mike Auty
|
771ed10b44
|
Core: Bump to 2.7.1
|
2024-05-29 20:44:04 +01:00 |
|
|
Mike Auty
|
35122df27d
|
Infra: Upgrade deprecated githubs actions 2
|
2024-05-29 20:42:25 +01:00 |
|
|
Mike Auty
|
57b3a99a1e
|
Infra: Upgrade deprecated githubs actions
|
2024-05-29 20:40:44 +01:00 |
|
|
Mike Auty
|
08493e9c3a
|
Automagic: Do some slight gymnastics to get the true value of the pointer
|
2024-05-21 23:13:31 +01:00 |
|
|
Mike Auty
|
c6d207d170
|
Generic: Fix code scanning issue with vmscan
|
2024-05-21 09:06:01 +01:00 |
|
|
Mike Auty
|
c5a45f91fc
|
Linux: Replace uses of specific types with the more generic pointer
|
2024-05-20 21:09:00 +01:00 |
|
|
Mike Auty
|
3eab0671b4
|
Generic: Add vmscan plugin
|
2024-05-20 20:47:12 +01:00 |
|
|
atcuno
|
901b0fd6ba
|
Fix year in header
|
2024-05-19 15:11:06 -05:00 |
|
|
atcuno
|
bc8666b64a
|
Fixes for black
|
2024-05-19 14:24:53 -05:00 |
|
|
atcuno
|
4ed7d40ecb
|
Fixes for black
|
2024-05-19 14:23:21 -05:00 |
|
|
atcuno
|
47eb42204e
|
Fixes for black
|
2024-05-19 14:21:03 -05:00 |
|
|
atcuno
|
c2b2321622
|
Add a new getcellroutine plugin that reports hooked GetCellRoutine handlers of memory mapped Windows registry hives
|
2024-05-19 14:09:14 -05:00 |
|
|
ikelosandGitHub
|
dc7a3878fa
|
Merge pull request #1147 from eve-mem/windows_handles_debug_logging
Windows: add extra debugging messages to handles plugin
|
2024-05-16 23:09:24 +01:00 |
|
|
Eve
|
5d5fa96e36
|
Windows: add extra debugging messages to handles plugin, ref #1146
|
2024-05-16 09:19:59 +01:00 |
|
|
ikelosandGitHub
|
1b3ba6ab2e
|
Merge pull request #1145 from volatilityfoundation/handles_bad_read_check
Correctly check for a failed read
|
2024-05-09 22:37:15 +01:00 |
|
|
atcuno
|
2b165a56be
|
Fix pre-existing formatting issue from black checks
|
2024-05-09 14:53:24 -05:00 |
|
|
atcuno
|
4c937a922d
|
Correctly check for a failed read
|
2024-05-09 14:47:56 -05:00 |
|
|
ikelosandGitHub
|
1c4fd269d0
|
Merge pull request #1144 from volatilityfoundation/timerliner_missing_macb_times_fix
Add a default 0 value to macb columns to avoid mactime not reporting …
|
2024-05-09 16:35:40 +01:00 |
|
|
atcuno
|
3933061551
|
Add a default 0 value to macb columns to avoid mactime not reporting timeline entries
|
2024-05-09 09:17:32 -05:00 |
|
|
ikelosandGitHub
|
a66aa02050
|
Merge pull request #1143 from volatilityfoundation/dumpfiles_dump_only_once_per_file_object
Prevent duplicate processing of the same file object
|
2024-05-08 21:26:45 +01:00 |
|
|
atcuno
|
3f3f1a9c0d
|
Prevent duplicate processing of the same file object
|
2024-05-08 11:23:01 -05:00 |
|
|
Gustavo Moreira
|
85052b6238
|
LayerWriter: Fix missing optional flag for the --output argument
|
2024-05-07 08:12:31 +10:00 |
|
|
Gustavo Moreira
|
d7aae3a982
|
Store the real/final output filename so that we can notify it correctly to the user
|
2024-05-06 13:11:52 +10:00 |
|
|
Gustavo Moreira
|
a6c77c4884
|
LayerWriter: Fix - Last chunk size is wrongly calculated
|
2024-05-06 13:09:45 +10:00 |
|
|
Gustavo Moreira
|
f116c08a7e
|
NonLinearlySegmentedLayer: Fix maximum addresses in segmented layers
|
2024-05-06 13:07:23 +10:00 |
|
|
Gustavo Moreira
|
e5a5b89577
|
Intel layer: Fix. This if statement will never be executed unless "minimum_address > maximum_address" which doesn't make sense to me.
|
2024-05-06 13:06:02 +10:00 |
|
|
Gustavo Moreira
|
6d22347ce6
|
LayerWriter plugin: Fix --output argument. It's referenced in the code but never mentioned as a requirement
|
2024-05-06 11:27:15 +10:00 |
|
|
Gustavo Moreira
|
1246b20b65
|
LayerWriter plugin: Code improvements
|
2024-05-06 11:25:45 +10:00 |
|
|
Gustavo Moreira
|
32a5f131fd
|
LayerWriter plugin: Fix log wrong (non-existent) variable
|
2024-05-06 11:17:51 +10:00 |
|
|
Gustavo Moreira
|
c7f29936dc
|
CommandLine: Fix issue when --output filename doesn't contain an extension.
If the argument is i.e. "--output aaa" ... it returned ".aaa" (hidden filename in linux) then "-1.aaa", "-2.aaa", etc.
|
2024-05-06 11:15:45 +10:00 |
|
|
ikelosandGitHub
|
1c5c57e155
|
Merge pull request #1140 from digitalisx/develop
Fix: typo for `CITATION.cff`
|
2024-04-30 20:34:45 +01:00 |
|
|
Donghyun KimandGitHub
|
314725f0c5
|
Fix: typo for CITATION.cff
|
2024-05-01 04:30:36 +09:00 |
|
|
Mike Auty
|
35c5837218
|
Core: Default to completely clearing the cache when requested
|
2024-04-30 12:34:46 +01:00 |
|
|
Mike Auty
|
8f0d1b37cc
|
Core: Improve error handling for proxy authentication issue
|
2024-04-28 20:53:22 +01:00 |
|
|
Mike Auty
|
974e6a4107
|
Core: When clearing the cache, actually clear cached files
|
2024-04-21 18:28:13 +01:00 |
|
|
Mike Auty
|
c1f239b8d2
|
Linux: Improve debugging of pslist dump feature
|
2024-04-07 19:34:17 +01:00 |
|
|
ikelosandGitHub
|
a19dfb57a6
|
Merge pull request #1122 from volatilityfoundation/feature/inclusive-requirements-txt
Core: Develop nested requirement files
|
2024-04-04 19:18:22 +01:00 |
|
|
Mike Auty
|
47891c3477
|
Core: Develop nested requirement files
|
2024-04-03 21:17:42 +01:00 |
|
|
ikelosandGitHub
|
55dd39f2ba
|
Merge pull request #1113 from Abyss-W4tcher/reorder_logging_extra_levels
CLI: Reorder logging extra levels
|
2024-03-17 01:25:33 +00:00 |
|