Commit Graph
5288 Commits
Author SHA1 Message Date
Abyss Watcher bf68fa8ce2 use KSYM_NAME_LEN for symbol name length 2023-11-14 17:09:36 +01:00
Abyss Watcher 2de97af061 use refcnt for inheritance 2023-11-14 16:54:10 +01:00
Abyss Watcher 83de6274ef fix symbols and function calls 2023-11-14 16:53:08 +01:00
Eve 5ab0e4f83f Linux: remove _valid_magic from linux elf extension, check for _type_prefix and _hdr attrs instead 2023-11-14 07:22:00 +00:00
Eve f7d5e722a2 Linux: add member presence checks to linux.checks_afinfo _check_afinfo function to stop crashes when none of the required members are present 2023-11-13 07:05:30 +00:00
Eve 9fe7d479f6 Linux: update bash plugin to only get memory sections once 2023-11-10 20:58:07 +00:00
Eve ebe19bf179 Linux: update maple tree extension to fix issue #1032 2023-11-10 20:30:38 +00:00
ikelosandGitHub 82c5af76df Merge pull request #1024 from volatilityfoundation/feature/citation
Documentation: Add in a CITATION.cff file
2023-11-08 20:20:09 +00:00
Leron GrayandGitHub 40dcff16e9 Merge branch 'volatilityfoundation:develop' into fix/pdbutility-signature 2023-11-06 11:37:01 -06:00
ikelosandGitHub fda1db4695 Merge pull request #1023 from volatilityfoundation/feature/santitize-filenames
Core: Add (optional) sanitization to the FileHandler class
2023-11-06 08:24:19 +00:00
Leron Gray c2b008969c update pefile requirements 2023-11-05 16:25:43 -06:00
Leron Gray b9c4a1d8a7 fix guid and pdb_name for #1026 2023-10-31 13:52:26 -05:00
Mike Auty 3bb1285dbf Layers: Make removal of a layer more efficient, as noted in #809 2023-10-29 13:53:55 +00:00
ikelosandGitHub e5d3134508 Merge pull request #1025 from Abyss-W4tcher/remote_isf
Core: Remote ISF - correct sql query and strip identifier
2023-10-23 19:03:46 +01:00
Abyss Watcher c20baf9d1f black formatting 2023-10-23 17:49:03 +02:00
Abyss Watcher 3a65626671 black formatting 2023-10-23 17:47:57 +02:00
Abyss Watcher 2d3b3158dc correct sql query and strip identifier 2023-10-21 23:34:17 +02:00
ikelosandGitHub 11ddafde44 Merge pull request #999 from 616c696365/fix-issue-895
Windows: Update pslist.py, add friendly option
2023-10-19 10:29:42 +01:00
ikelosandGitHub 104623ede2 Merge pull request #1018 from volatilityfoundation/1017-printkey-breaks-when-encountering-invalid-root-node
issue #1017 - check for valid root node type
2023-10-19 10:18:55 +01:00
ikelosandGitHub 806801ea69 Merge pull request #1020 from volatilityfoundation/1019-printkey-timestamps-are-misleadingincorrect
issue #1019 - for subkeys, return the modified time of the subkey its…
2023-10-19 10:18:22 +01:00
Dave Lassalle a497216beb issue #1019 - black updates 2023-10-18 14:09:42 -05:00
Dave Lassalle fcaba2d95a issue #1017 - black updates 2023-10-18 14:08:50 -05:00
616c696365 7323bd3a59 windows.pslist process name added to dumped file by default 2023-10-18 19:16:10 +01:00
Mike Autyand616c696365 5d43071f57 Core: Add (optional) sanitization to the FileHandler class 2023-10-18 19:16:10 +01:00
616c696365andGitHub f2f412d555 Merge branch 'volatilityfoundation:develop' into fix-issue-895 2023-10-18 18:44:24 +01:00
EveandGitHub 604218816d Merge branch 'volatilityfoundation:develop' into linux_elf_padded_magic_read 2023-10-18 08:59:01 +01:00
Mike Auty 14fa5ad771 Documentation: Add in a CITATION.cff file
Initial addition of a CITATION file, no version information was included
because keeping it up to date with the version in the repo automatically
would be tricky and not doing so would lead it to becoming out of sync.

Fixes #1013.
2023-10-17 16:27:29 +01:00
Mike Auty 63ace60995 Core: Add (optional) sanitization to the FileHandler class 2023-10-17 15:54:10 +01:00
ikelosandGitHub 57924c5da1 Merge pull request #1001 from xabrouck/oldkernel
Making cred optional as it didn't exist in old 2.6 kernels
2023-10-17 15:34:10 +01:00
ikelosandGitHub 15ad1db01b Merge pull request #1016 from eve-mem/vmem_warnings
vmware: Add warning when no metadata file is found for a vmem file.
2023-10-17 15:02:11 +01:00
Eve e45380f4f5 Update vmware layer metadata file warning to be less doom and gloom. 2023-10-13 09:29:46 +01:00
Dave Lassalle 95c468c4f8 issue #1019 - for subkeys, return the modified time of the subkey itself, not its parent key 2023-10-12 10:16:56 -05:00
Dave Lassalle 9cc73b6a03 issue #1017 - check for valid root node type 2023-10-12 09:57:24 -05:00
Eve 310b6508db vmware: Add warning when no metadata file is found for a vmem file. 2023-10-11 09:09:15 +01:00
EveandGitHub faa8b2eaa9 Merge branch 'volatilityfoundation:develop' into vmayarascan 2023-10-09 17:16:56 +01:00
Mike Auty 93b2972832 Renderers: Allow nodes to be turned into dictionaries 2023-10-08 22:19:17 +01:00
Abyss Watcher 6e5d41c38b manually instantiate queue_entry for tasks symbol 2023-10-08 03:37:17 +02:00
Abyss Watcher 57d995a81d manually instantiate queue_entry for tasks symbol 2023-10-08 03:15:23 +02:00
RuBublik 62466c7953 fixed merge conflicts with 'volatilityfoundation:develop' branch - bumped VERSION_PATCH 2023-10-03 21:37:41 +03:00
EveandGitHub 40d993b1a0 Merge branch 'volatilityfoundation:develop' into layer_debug_info 2023-10-03 07:43:13 +01:00
Eve 41a02fbf5b Linux: use try/except in linux elf extension to catch paged and invalid addresses rather than crashing 2023-10-03 07:13:28 +01:00
Eve a46c9d9d8e Linux: add padded read when getting magic for elf extension to help with smear and missing pages 2023-09-29 10:16:20 +01:00
ikelosandGitHub 87cdf87100 Merge pull request #1004 from ShutdownRepo/test-workflow
Adding test install workflow for GitHub Actions pipelines
2023-09-28 17:17:48 +01:00
ikelosandGitHub cb6d6e3a8e Merge pull request #1008 from volatilityfoundation/release/v2.5.0
Release/v2.5.0
v2.5.0
2023-09-27 20:45:48 +01:00
Mike Auty 56cb5ea93b Revert "Linux: Rename linux.envars to linux.envvars"
This reverts commit d9a365d96f.
2023-09-27 20:37:51 +01:00
Mike Auty 43bef641dc Revert "Linux: Fix slight issue in envvars renaming"
This reverts commit 60292c2da1.
2023-09-27 20:37:38 +01:00
Shutdown 370b6774ea Remove macOS from matrix hosts 2023-09-17 23:21:56 +02:00
Mike Auty 47ddf5d0e5 Core: Bump the version after 2.5.0 release branch 2023-09-06 20:34:13 +01:00
ikelosandGitHub b5b9c8ac41 Merge pull request #1003 from volatilityfoundation/issues/issue1002
Core: Fix missing packages in setup.py
2023-09-06 00:54:04 +01:00
ikelosandGitHub 5e8dfc0af2 Merge branch 'develop' into issues/issue1002 2023-09-06 00:50:32 +01:00