Commit Graph
5288 Commits
Author SHA1 Message Date
ikelosandGitHub 9a0ba988ab Merge pull request #609 from volatilityfoundation/issues/issue599
Automagic: Warn when multiple symbol files match a banner
2022-02-23 21:44:28 +00:00
Mike Auty 579a0b8735 Layers: More documentation and don't break correct URLs 2022-02-23 00:08:10 +00:00
Mike Auty 58697479bb Layers: Fix opening UNC paths on windows 2022-02-23 00:00:07 +00:00
ikelosandGitHub aa198f2709 Merge pull request #657 from paulkermann/bugfix/get_guid_from_mz
Fix read whole module
2022-02-22 01:09:13 +00:00
Paul Kermann f2e3df27f4 fix read whole module 2022-02-21 14:57:31 +02:00
ikelosandGitHub c024c2eecb Merge pull request #644 from paulkermann/bugfix/object_info
Object information ChainMap invalid order
2022-02-20 23:22:56 +00:00
ikelosandGitHub 4a1c701ff4 Merge pull request #651 from volatilityfoundation/feature/volshell-kernel-requirement
Volshell: Update to use KernelRequirement
2022-02-20 22:59:28 +00:00
Paul Kermann bfc4c50e67 related 2022-02-20 14:49:06 +02:00
cpuu 8bcb7b4227 Add offset information in pslist plugin for Linux 2022-02-18 13:25:46 +09:00
ikelosandGitHub a2b0bdfe25 Merge pull request #653 from paulkermann/feature/fast_pdb_scanning
Improve slow pdb scanning
2022-02-17 14:13:31 +00:00
Paul Kermann 3036875136 run optimized scan before slow scan 2022-02-17 16:10:44 +02:00
Paul Kermann da7dd32271 Improve slow pdb scanning 2022-02-17 15:31:48 +02:00
Mike Auty e6c3c94a10 Volshell: Update docs slightly 2022-02-17 01:46:54 +00:00
Mike Auty 9fb59e4714 Volshell: Further improvements for mac/linux 2022-02-17 01:43:50 +00:00
gcmoreiraandGitHub a7df7617dd Merge branch 'volatilityfoundation:develop' into linux_sockstats_plugin 2022-02-17 11:22:39 +11:00
Mike Auty 094a3c0a47 Volshell: Update to use KernelRequirement 2022-02-17 00:21:59 +00:00
Gustavo Moreira b40391ee1f Returning a starred expression is not yet supported in python 3.6. Fixed 2022-02-17 11:19:58 +11:00
ikelosandGitHub 96d4aafd6c Merge pull request #647 from volatilityfoundation/issues/issue646
Fix infinite loop in mftscan and timeliner body file updates
2022-02-14 20:35:24 +00:00
ikelosandGitHub f5ecdbe28d Merge pull request #645 from pudii/issues/issue313
Implement LDRmodules plugin
2022-02-14 01:12:21 +00:00
Mike Auty 22a7328e4c Windows: Prevent infinite loop in mftscan 2022-02-13 20:45:42 +00:00
pudii 12c3f34037 Add comments and fix minor code issues 2022-02-13 18:29:35 +01:00
Mike Auty 9cabf5362b Timeliner: Write out directly to the body file
Since the body file doesn't need sorting, we can output it immediately,
and this also means that partial results can be recorded even in the run
is terminted before it compeletes.

Goes someway to improving #646
2022-02-13 00:19:32 +00:00
pudii cf11de174a Implement LDRmodules plugin 2022-02-11 18:19:53 +01:00
Paul Kermann edbbc0159f bug fix 2022-02-10 10:31:18 +02:00
Mike Auty 05b4eb22fa Core: Bump the development version to 2.0.2 2022-02-09 20:19:17 +00:00
Mike Auty 8376d1ca9e Core: Prepare 2.0.1 release 2022-02-09 20:18:04 +00:00
trashcan122andMike Auty de87fd0b22 fix pdb mz parsing 2022-02-09 20:17:26 +00:00
Paul KermannandMike Auty 374542d544 Added data_offset to pattern matching result, fixes pdb scanning bug 2022-02-09 20:17:22 +00:00
Mike Auty 497eaea512 Core: Slight speed-up for all single struct.unpack calls 2022-02-09 20:07:13 +00:00
ikelosandGitHub 3e742bf1f7 Merge pull request #643 from ilay122/bugfix/mz_parsing
fix pdb mz parsing
2022-02-09 19:46:09 +00:00
trashcan122 ce166b9263 fix pdb mz parsing 2022-02-09 16:30:40 +02:00
ikelosandGitHub dbf6245b85 Merge pull request #641 from paulkermann/bugfix/pdb-scanning-offset-bug
Fixed pdb scanning bug
2022-02-09 09:04:11 +00:00
Paul Kermann a67121f1c1 Added data_offset to pattern matching result, fixes pdb scanning bug 2022-02-09 10:40:37 +02:00
Andrew Case 338fcdd0ab Add the psaux plugin for Linux command line argument listing 2022-02-02 15:48:41 +00:00
ikelosandGitHub 52f325ed54 Merge pull request #633 from Digitalisx/develop
Correcting typo for Windows constants code comment.
2022-01-31 11:38:12 +00:00
Donghyun KimandGitHub 7c238f93a0 Update __init__.py
Correcting typos for Windows Constants
2022-01-31 20:15:39 +09:00
ikelosandGitHub b84e478371 Merge pull request #623 from volatilityfoundation/issues/issue542
Plugins: Timeliner improve support for body files
2022-01-18 21:01:46 +00:00
ikelosandGitHub 0de8448f89 Merge pull request #622 from volatilityfoundation/issues/issue616
Plugins: yara python module check improvement
2022-01-18 21:00:33 +00:00
Mike Auty 0f90f7f6ca Plugins: Remove unused timeliner parameter 2022-01-18 20:58:48 +00:00
ikelosandGitHub 290e9fdb39 Merge pull request #628 from kevthehermit/plugin/sessions
add timeliner output to windows.sessions
2022-01-18 20:53:07 +00:00
KevTheHermit ac7cecf231 add timeliner output to windows.sessions 2022-01-18 20:42:38 +00:00
ikelosandGitHub a686042789 Merge pull request #626 from kevthehermit/plugin/sessions
Sessions Plugin
2022-01-18 19:37:37 +00:00
KevTheHermit be0dd49d31 Sessions Plugin use ModuleRequirement 2022-01-18 19:34:06 +00:00
KevTheHermit 0f23089cb4 Create Sessions Plugin 2022-01-17 00:28:59 +00:00
ikelosandGitHub 70375f24b8 Merge pull request #625 from volatilityfoundation/stable-readthedocs-fix
use doc/requirements.txt when building with readthedocs
2022-01-16 23:27:39 +00:00
Mike Auty 91a844a8b0 Merge branch 'stable' into develop 2022-01-16 23:26:54 +00:00
Nick L. Petroni, Jr 79a549f211 use doc/requirements.txt when building with readthedocs 2022-01-16 18:18:07 -05:00
ikelosandGitHub 02ff56ba71 Merge pull request #624 from volatilityfoundation/readthedocs-requirements
Fix readthedocs builds
2022-01-16 22:54:24 +00:00
Nick L. Petroni, Jr fa2a608cd2 update doc copyright 2022-01-16 17:32:02 -05:00
Nick L. Petroni, Jr 64acff1b59 use doc/requirements.txt when building with readthedocs 2022-01-16 17:11:53 -05:00