Commit Graph
5288 Commits
Author SHA1 Message Date
Donghyun KimandGitHub b0e0f20966 Merge branch 'volatilityfoundation:develop' into fix/ethread 2022-05-10 01:12:10 +09:00
Donghyun KimandGitHub 01c7d5858c Merge branch 'volatilityfoundation:develop' into feature/vadwalk 2022-05-10 01:09:46 +09:00
Gustavo Moreira 62e00c0879 Added smear protection in loops. Added/improved some docstrings. 2022-05-09 20:18:11 +10:00
Gustavo Moreira 2c181fb9be Move path_root check up so path() and get_mnt_sb() can be avoided in the cases _do_get_path() fails. 2022-05-09 19:38:25 +10:00
ikelosandGitHub 64acc6d75f Merge pull request #730 from paulkermann/bugfix/remove_unused_import
Removed unused svcscan import from Callbacks plugin
2022-05-09 09:12:56 +01:00
Paul Kermann f54edee362 removed svcscan import 2022-05-09 10:56:40 +03:00
ikelosandGitHub cf05f454b2 Merge pull request #711 from paulkermann/feature/registry_callbacks
Support CallbackListHead when CmpCallBackVector not present
2022-05-09 07:55:32 +01:00
ikelosandGitHub b34366e8bf Merge pull request #729 from digitalisx/fix/typo
Fix: typo for `cli` exception message.
2022-05-09 07:33:27 +01:00
Donghyun Kim bbbecd6692 Add: argument type for _generator 2022-05-09 11:37:05 +09:00
Donghyun Kim fde05cd1f2 Fix: typo for cli exception message 2022-05-09 11:23:13 +09:00
Donghyun KimandGitHub 5dd0e1a33e Merge branch 'volatilityfoundation:develop' into feature/vadwalk 2022-05-08 20:52:30 +09:00
ikelosandGitHub ea440c1e16 Merge pull request #728 from digitalisx/fix/typo
Fix: typo for documents (`symbol-tables`, `volshell`)
2022-05-08 10:51:01 +01:00
Donghyun Kim 8f369180e4 Fix: typo for documents 2022-05-08 18:33:38 +09:00
Donghyun Kim 000fdd74c8 Fix: change left and right value 2022-05-08 00:44:49 +09:00
Donghyun Kim 0edee3fe25 Add: vadwalk plugin initialize version 2022-05-08 00:35:53 +09:00
ikelosandGitHub f191a32c37 Merge pull request #725 from digitalisx/fix/gitignore
Add: python virtual environments, memory dump on `.gitignore`.
2022-05-07 13:30:18 +01:00
Donghyun Kim 8b6194f8f4 Remove: environment .bak on .gitignore 2022-05-07 18:16:43 +09:00
ikelosandGitHub 683c6d40f6 Merge pull request #726 from digitalisx/fix/typo
Fix: typo for `dlllist` plugin.
2022-05-07 00:25:00 +01:00
Donghyun Kim 16313c5939 Fix: typo for dlllist 2022-05-06 01:18:31 +09:00
Donghyun Kim 6b7d5b63fe Add: venv environments, memory dump for .gitignore 2022-05-06 00:49:03 +09:00
Donghyun KimandGitHub 51dffba82c Merge branch 'volatilityfoundation:develop' into fix/ethread 2022-05-03 15:53:01 +09:00
Mike Auty 14c11b24f6 Symbols: Make _IMAGE_NT_HEADERS optional since not all Windows versions contain it 2022-05-02 14:33:35 +01:00
ikelosandGitHub a7c746a1d3 Merge pull request #714 from paulkermann/feature/minor_improvments
Improving object type_name resolution
2022-05-02 12:26:28 +01:00
Paul Kermann bb1e41f59b remove at_layer 2022-05-02 09:36:50 +03:00
Paul Kermann 8bd7daf28f fix minor improvments 2022-05-02 09:33:41 +03:00
Donghyun Kim aa597505de Merge branch 'fix/ethread' of https://github.com/Digitalisx/volatility3 into fix/ethread 2022-05-02 10:34:13 +09:00
Donghyun Kim 51b9019601 Bump: patch version 2.1.1 2022-05-02 10:34:04 +09:00
Donghyun KimandGitHub d3ed864870 Merge branch 'volatilityfoundation:develop' into fix/ethread 2022-05-02 00:34:42 +09:00
Donghyun Kim 78eb31014b Fix: get owning process method from _ETHREAD 2022-05-02 00:00:33 +09:00
Mike Auty 818002aba4 Codebase: Fix LGTM issues 2022-04-30 15:13:34 +01:00
Gustavo Moreira db9f287cb1 Unrelated to this PR. Removed unused import. 2022-04-30 15:25:55 +10:00
Gustavo Moreira 9b0b2547d5 Manage invalid address exception when reading src and dst addresses 2022-04-30 14:37:51 +10:00
Gustavo Moreira 5f70c7031c Added kernel 'socket' and 'vsock_sock' struct extensions.
This removes hardcoding state in same socket families, taking the information directly from the generic 'socket'.
2022-04-30 14:29:52 +10:00
Gustavo Moreira f919d29c50 Changing properties for getters 2022-04-30 14:14:18 +10:00
Gustavo Moreira 1679769da7 Catch exception when it is unable to get the kernel module name 2022-04-29 12:58:32 +10:00
Gustavo Moreira 37d8328a18 Adding typing information to container_of() 2022-04-29 12:41:11 +10:00
Gustavo Moreira a17d1617f4 Remove author 2022-04-29 12:08:04 +10:00
Gustavo Moreira 333bb090cd Minor. Constants regrouped 2022-04-29 10:21:28 +10:00
Gustavo Moreira b4081a83fd Merge remote-tracking branch 'upstream/develop' into linux_sockstats_plugin 2022-04-29 10:04:54 +10:00
ikelosandGitHub 48c1533e89 Merge pull request #600 from gcmoreira/linux_pslist_pstree_improvements
Linux PSList and PSTree plugins improvements
2022-04-29 00:53:39 +01:00
Gustavo Moreira 7b30d46908 Merge remote-tracking branch 'upstream/develop' into linux_pslist_pstree_improvements 2022-04-29 07:03:44 +10:00
Gustavo Moreira 9aba96a197 Remove unused import module 2022-04-29 06:46:58 +10:00
Gustavo Moreira e1b8a0b5cc container_of() is no longer needed here 2022-04-29 06:42:37 +10:00
Andrew Case 3175e25420 Remove the inheritance from pslist 2022-04-28 16:11:51 +00:00
Andrew Case b43d61ca03 Address feedback from ikelos 2022-04-28 15:42:10 +00:00
Mike Auty 5f87964916 Linux: Make sure the pslist offset column says that it's virtual 2022-04-28 15:41:29 +01:00
ikelosandGitHub f8bdac06a2 Merge pull request #654 from cpuu/develop
Add offset information in pslist plugin for Linux
2022-04-28 15:39:59 +01:00
Gustavo Moreira 192759b5d5 Updated to use the new task::get_threads 2022-04-28 10:17:39 +10:00
Gustavo Moreira 0a3c629782 Updated to use task's is_thread_group_leader function 2022-04-28 10:14:49 +10:00
Gustavo Moreira ed5d373771 Merge remote-tracking branch 'upstream/develop' into linux_pslist_pstree_improvements 2022-04-28 09:49:17 +10:00