 Eve
|
89e477a068
|
Remove _parse_maple_tree_entry function and make parsing easier to read
|
2023-03-24 20:07:32 +00:00 |
|
|
Eve
|
5207cfcb93
|
Modify linux plugins to support both mmap and mm_mt
|
2023-03-24 15:10:34 +00:00 |
|
|
Eve
|
3d51b4a41a
|
Add basic support for linux maple tree struct
|
2023-03-24 15:08:59 +00:00 |
|
|
ikelosandGitHub
|
a77a1ae301
|
Merge pull request #920 from volatilityfoundation/issues/issue886
Windows: Memoize part of the pool handling code
|
2023-03-19 19:29:41 +00:00 |
|
|
cstationandGitHub
|
c7e28eaf29
|
Merge branch 'volatilityfoundation:develop' into feature/linux_elf_dump
|
2023-03-14 21:28:29 +00:00 |
|
|
cstation
|
3386a4fdc0
|
Remove broad try-except clause
|
2023-03-14 22:22:51 +01:00 |
|
|
Mike Auty
|
d9a365d96f
|
Linux: Rename linux.envars to linux.envvars
|
2023-03-11 17:33:20 +00:00 |
|
|
Mike Auty
|
9216bab61b
|
Core: Improve import exception reporting
|
2023-03-11 17:32:46 +00:00 |
|
|
Mike Auty
|
b5ef7248ab
|
Linux: Fix psscan task native_layer
|
2023-03-11 15:25:31 +00:00 |
|
|
Mike Auty
|
cfec8e4b12
|
Core: Pointer is_readable should check the native layer
|
2023-03-11 15:25:14 +00:00 |
|
|
Mike Auty
|
46f56770af
|
Core: Pointer is_readable should check the native layer
|
2023-03-11 15:18:58 +00:00 |
|
|
Mike Auty
|
36ec516470
|
Linux: Fix psscan task native_layer
|
2023-03-11 15:17:24 +00:00 |
|
|
Mike Auty
|
99417cdfcc
|
Linux: Psscan check parent pointer is valid
|
2023-03-11 14:17:37 +00:00 |
|
|
Mike Auty
|
85e86d45c5
|
Linux: fix black lint issues
|
2023-03-08 20:43:03 +00:00 |
|
|
Mike Auty
|
b8755ac574
|
Linux: fix black lint issues
|
2023-03-08 20:42:24 +00:00 |
|
|
Mike Auty
|
a35afd4f34
|
Core: Bump framwork version after release branch
|
2023-03-08 20:40:04 +00:00 |
|
|
ikelosandGitHub
|
97347efff3
|
Merge pull request #915 from 0xThiebaut/pstree
Add PID filtering to `windows.pstree`
|
2023-03-08 19:51:48 +00:00 |
|
|
ikelosandGitHub
|
cd2e07da27
|
Merge pull request #881 from eve-mem/linux_envars
add linux envars
|
2023-03-08 18:59:05 +00:00 |
|
|
ikelosandGitHub
|
f028b0a4dc
|
Merge pull request #894 from eve-mem/linux_iomem
add linux.iomem plugin based on vol2 plugin by atcuno
|
2023-03-08 18:58:35 +00:00 |
|
|
ikelosandGitHub
|
fff64b6071
|
Merge pull request #921 from eve-mem/linux_psscan
Fix Linux psscan
|
2023-03-08 18:56:16 +00:00 |
|
|
Eve
|
32db4c0e5f
|
Fix black linting for linux.psscan.
|
2023-03-08 14:08:44 +00:00 |
|
|
Eve
|
abfe104eb9
|
Fix linux.pscan to find memory layer to scan using kernel layers dependencies rather than hard coded value.
|
2023-03-08 14:02:13 +00:00 |
|
|
Eve
|
bdf57f0716
|
Add extra debug messages to linux.psscan when finding symbol locations
|
2023-03-08 13:44:08 +00:00 |
|
|
Eve
|
a34fb84976
|
Fix linux.psscan to use kernel offset when finding symbol location
|
2023-03-08 13:39:00 +00:00 |
|
|
Mike Auty
|
21e34ec605
|
Windows: Fix up double adding the symbol from context.module
|
2023-03-06 00:43:45 +00:00 |
|
|
Mike Auty
|
f3dea3619c
|
Windows: Memoize part of the pool handling code
|
2023-03-06 00:14:03 +00:00 |
|
|
Mike Auty
|
3791b21695
|
Layers: Fix new snappy implementation error
|
2023-03-06 00:13:47 +00:00 |
|
|
ikelosandGitHub
|
56b899e738
|
Merge pull request #913 from volatilityfoundation/feature/snappy-ctypes
Feature/snappy ctypes
|
2023-03-05 11:35:45 +00:00 |
|
|
Maxime THIEBAUT
|
588b096254
|
Add PID filtering to windows.pstree
|
2023-02-25 20:52:13 +01:00 |
|
|
Mike Auty
|
1770edf6fa
|
Automagic: Fix typo in cache stats
|
2023-02-22 17:24:12 +00:00 |
|
|
Mike Auty
|
ad3773d898
|
Automagic: Improve identified AVML CodeQL issues
|
2023-02-19 10:23:04 +00:00 |
|
|
Mike Auty
|
c7252e9707
|
Automagic: Handle snappy for windows.
|
2023-02-19 10:03:23 +00:00 |
|
|
Mike Auty
|
471b19b037
|
Layers: Use ctypes for snappy support
|
2023-02-18 21:15:43 +00:00 |
|
|
Mike Auty
|
4734a3d1f8
|
Automagic: Fix cache issue with missing files
|
2023-02-18 21:14:02 +00:00 |
|
|
ikelosandGitHub
|
4f028416a3
|
Merge pull request #907 from agearhe/patch-1
Update simple-plugin.rst
|
2023-02-10 08:03:05 +00:00 |
|
|
AshleyandGitHub
|
d6ebad8235
|
Update simple-plugin.rst
Very minor typo fix.
|
2023-02-09 21:19:11 -07:00 |
|
|
ikelosandGitHub
|
0245988fab
|
Merge pull request #882 from eve-mem/linux_psscan
add linux.psscan
|
2023-02-03 10:51:47 +00:00 |
|
|
Eve
|
9e5a98ca40
|
Update linux.psscan with black linting and version
|
2023-02-03 10:51:18 +00:00 |
|
|
Eve
|
e81935869a
|
Update linux.psscan to find kernel layer name correctly
|
2023-02-03 10:37:29 +00:00 |
|
|
Eve
|
4bb6d93e12
|
Update linux.psscan
|
2023-02-03 10:18:06 +00:00 |
|
|
ikelosandGitHub
|
78d75a7b33
|
Merge pull request #904 from paulkermann/bugfix/csv-escape
Add escapechar to csvwriter
|
2023-02-03 09:46:40 +00:00 |
|
|
Mike Auty
|
aac4c73528
|
Actions: Bump black checkout to Node16/wqv3
|
2023-02-03 09:22:30 +00:00 |
|
|
Mike Auty
|
43a17384c3
|
Core: Update to black 23.1.0 which removes many blank lines and parentheses
|
2023-02-03 00:35:49 +00:00 |
|
|
ikelosandGitHub
|
2a459266ba
|
Merge pull request #905 from volatilityfoundation/feature/canonical-helper
Add in the canonical helper functions for translating between volatility address ranges and intel canonical addresses
|
2023-02-03 00:29:07 +00:00 |
|
|
Eve
|
3b1e4ce0e2
|
Update linux.vmayarascan to pull requirements from the generic yarascan plugin
|
2023-02-01 11:27:44 +00:00 |
|
|
Eve
|
b375c6f71d
|
Update linux.iomem
|
2023-02-01 09:43:02 +00:00 |
|
|
Mike Auty
|
3297ba02e7
|
Core: Rather than scheduling it daily, only do it on commits
|
2023-01-29 12:46:06 +00:00 |
|
|
Mike Auty
|
c2a1afb0ba
|
Core: Update codeql action to only run once a week
|
2023-01-29 12:42:17 +00:00 |
|
|
Eve
|
1d4aa72c85
|
update linux.iomem with basic smear protection
|
2023-01-27 11:07:05 +00:00 |
|
|
Paul Kermann
|
728e8b608a
|
black reformat
|
2023-01-17 16:11:08 +02:00 |
|