Commit Graph
5288 Commits
Author SHA1 Message Date
Abyss Watcher de4a335998 call extra verbose level ordering 2024-03-16 22:19:45 +01:00
Abyss Watcher 7ff5f57e5d use logging explicit constants 2024-03-16 22:19:28 +01:00
Abyss Watcher 745491c846 put extra log level ordering in a function 2024-03-16 22:19:02 +01:00
Abyss Watcher 33d653e7a6 use logging explicit constants 2024-03-16 18:44:19 +01:00
Abyss Watcher 436d355ef3 incrementally order extra log levels 2024-03-16 18:44:09 +01:00
Mike Auty f6495d3d98 Documentation: Improve logging level docstrings 2024-03-16 08:42:53 +00:00
ikelosandGitHub 6f3091c644 Merge pull request #1015 from Abyss-W4tcher/fix_mac_pslist
Fix mac pslist
2024-03-13 19:26:41 +00:00
Mike Auty 8dbc64f4a8 Layers: Fix up typo in recent crashdump patch - take 2 2024-03-12 00:14:30 +00:00
Mike Auty 084ea38f84 Layers: Fix up typo in recent crashdump patch 2024-03-12 00:13:02 +00:00
Mike Auty 9edf33b721 Layers: Improve logging on crashdump layer 2024-03-11 21:20:29 +00:00
ikelosandGitHub 148e46db75 Merge pull request #1108 from Abyss-W4tcher/mac_dmesg
macOS dmesg plugin support
2024-03-04 20:42:52 +00:00
ikelosandGitHub 5b2d95a91f Merge pull request #1107 from Abyss-W4tcher/mac_process_memory_dump
Mac process memory dump
2024-03-04 20:41:35 +00:00
ikelosandGitHub 9189fb6589 Merge pull request #1109 from Abyss-W4tcher/cli_list_of_ints_as_hex
CLI : pass integers as 0x hexadecimal format in ListRequirement
2024-03-04 20:38:36 +00:00
Abyss Watcher 1f9a983f49 correct use of SymbolError 2024-03-04 20:38:01 +01:00
Abyss Watcher f4b12c6406 allow ints in the 0x format in ListRequirement 2024-03-04 20:26:18 +01:00
Abyss Watcher 9914f339df simplify addrs_in_vma check 2024-03-04 20:19:15 +01:00
Abyss Watcher 69a6c7d5b7 revert int as hex format commit 2024-03-04 20:16:55 +01:00
Abyss Watcher 98705e110d more specific msg_bufx comment 2024-03-04 20:12:12 +01:00
Abyss Watcher 1bf18dbd8a implicit pointer dereference 2024-03-04 20:11:50 +01:00
Abyss Watcher 403804431a prefer SymbolError to TypeError 2024-03-04 20:11:17 +01:00
Mike Auty 373bf9dfaa Windows: Fix driverirp black issue 2024-03-04 18:33:03 +00:00
ikelosandGitHub fbcaeccf7d Merge pull request #857 from volatilityfoundation/driverirp_hidden_module_support
Report IRP entries that point inside a hidden module. This is a commo…
2024-03-04 14:58:45 +00:00
ikelosandGitHub d4b92db446 Merge pull request #960 from RuBublik/poolscanner-thread-support
Add threads pool tag scanning
2024-03-04 14:58:04 +00:00
ikelosandGitHub 110d9bef4a Merge pull request #1101 from gcmoreira/linux_library_list_plugin
Linux: Add linux.library_list.LibraryList plugin
2024-03-04 12:33:13 +00:00
Gustavo Moreira cb6f8c5072 Rename methods to be private 2024-03-04 20:47:49 +11:00
ikelosandGitHub 0fac32465f Merge branch 'develop' into poolscanner-thread-support 2024-03-03 23:48:24 +00:00
ikelosandGitHub cd81dfc8a5 Merge pull request #1106 from volatilityfoundation/feature/python3.12
Documentation: Fix up syntax errors involving * character
2024-03-03 23:21:48 +00:00
Abyss Watcher 2f0bb6b297 do not strip each line 2024-03-02 18:39:48 +01:00
Abyss Watcher 8d79e3211b prefer TypeError to vollog.error 2024-03-02 17:30:51 +01:00
Abyss Watcher caf108b604 macOS dmesg plugin support 2024-03-02 17:17:48 +01:00
Abyss Watcher 2e835099b5 fix wrong list_head comparison + better naming 2024-03-01 20:19:31 +01:00
Abyss Watcher 965ddcb674 make queue_head_t optional, as it might not exist in all ISF 2024-03-01 19:30:46 +01:00
Abyss Watcher 3040bc5fc2 add --dump mechanism, similarly to linux.proc 2024-03-01 14:20:13 +01:00
Abyss Watcher d56ccbfd0b allow specifying integers as 0x in ListRequirement 2024-03-01 14:18:30 +01:00
hsarkey 850b377dcf Updated windows.dlllist plugin to have --name and --base flags for filtering on dll name and base address. 2024-02-29 16:13:27 -05:00
Abyss Watcher a8e1082827 restore pslist, add queue_head_t type class 2024-02-29 14:36:46 +01:00
Gustavo Moreira b681438ddc Remove unnecessary 'pass' statement. 2024-02-29 16:21:34 +11:00
Gustavo Moreira 3c9af096e1 Add missing PAGE_SHIFT replacement 2024-02-29 16:17:47 +11:00
Gustavo Moreira 9b0915dc85 Add logging for unknown ELF types 2024-02-29 15:36:46 +11:00
Gustavo Moreira e6bc0c4100 Update author and modification time 2024-02-29 15:34:48 +11:00
Gustavo Moreira d5a0543a2d Use the ELF class constant instead of hardcoding a value. Fixed some f-strings 2024-02-29 15:34:20 +11:00
Gustavo Moreira 338106dfe8 Move the memory page parameters to the Intel layer 2024-02-29 14:46:35 +11:00
Mike Auty 0899ba8d7f Documentation: Fix up syntax errors involving * character 2024-02-28 23:09:46 +00:00
ikelosandGitHub 887747e3ce Merge pull request #1098 from volatilityfoundation/feature/output-filter
Implement CLI support for filtering out rows during output
2024-02-22 11:00:14 +00:00
ikelosandGitHub 90de493f78 Merge pull request #1100 from adiego8/windows-psscan-offset
Windows: Add filtering by offset to psscan
2024-02-22 10:59:47 +00:00
ikelosandGitHub 0cfc466924 Merge pull request #1093 from eve-mem/linux_issue_1089_module_memory
Linux: fix issue 1089 module memory
2024-02-22 10:56:36 +00:00
ikelosandGitHub 499f70d339 Merge pull request #1103 from eve-mem/linux_psscan_memory_layer_name_optimisation
Linux: psscan tiny update so that  memory_layer_name is reused
2024-02-22 10:26:23 +00:00
Eve a82b93523d Linux: psscan tiny update so that memory_layer_name is reused 2024-02-22 09:47:23 +00:00
Eve 77675d584d Update patch version 2024-02-21 14:26:48 +00:00
Eve 3b5fde9420 Linux: update module extension logic for choosing the correct values for different kernel versions 2024-02-21 12:58:24 +00:00