WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-06 17:57:38 +02:00
Code Issues Packages Projects Releases Wiki Activity
5,288 Commits 80 Branches 17 Tags
67a83871adac20171a862d55dcafe5ab383c024b
Commit Graph
5288 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Gustavo Moreira fe105dc4a7 Add doc strings and typing info everywhere. 
Improve some variable names
 2021-12-21 15:01:29 +11:00
Gustavo Moreira 7099a7a52e Fix. We should call the net type method here. 2021-12-21 14:54:38 +11:00
Gustavo Moreira a7520a377d Supporting socket and reuseport filters in all the socket families. 2021-12-21 14:53:13 +11:00
Mike Auty 3bc90b8200 Plugins: Add more information to layerwriter --list 2021-12-20 20:38:12 +00:00
Gustavo Moreira 39c97b8e97 Moving thread type check methods to the task object 2021-12-20 15:26:45 +11:00
ikelosandGitHub fc12956706 Merge pull request #603 from volatilityfoundation/feature/none-renderer 
CLI: Add in None renderer to avoid text output
 2021-12-19 22:21:56 +00:00
Mike Auty 997b857246 CLI: Add in None renderer to avoid text output 2021-12-19 22:16:53 +00:00
Gustavo Moreira 86d3785bea Fixing constant module and reference comment 2021-12-17 14:42:23 +11:00
Gustavo Moreira 16cb449a77 Added changes to the Linux pslist and pstree plugins to be able to show user threads. 2021-12-17 14:23:14 +11:00
Gustavo Moreira f23b288ffc Bump framework and plugin required minor version 2021-12-15 17:52:07 +11:00
Gustavo Moreira fcf9983d51 Removed --all-process and added --mntns. 2021-12-15 13:48:46 +11:00
Gustavo Moreira a1d145c34f Cleaning space issues 2021-12-14 22:10:52 +11:00
Gustavo Moreira 7dc33b8314 fix typo 2021-12-14 17:28:38 +11:00
Gustavo Moreira a1ff8d7809 Fix comment. This was related to netlink_sock not packer_sock 2021-12-14 17:25:58 +11:00
Gustavo Moreira 34176a8066 Moving log lines from warning to LOGLEVEL_V 2021-12-14 17:10:45 +11:00
Gustavo Moreira f4e1f4729f Added type annotations 2021-12-14 16:56:27 +11:00
Gustavo Moreira 8af7422928 Parameterized generator 2021-12-14 16:52:47 +11:00
Gustavo Moreira b4bcdd0856 Minor changes 2021-12-14 16:51:02 +11:00
Gustavo Moreira 7ed5739e24 socket is no longer imported in this file. Remove the underscore 2021-12-14 16:24:57 +11:00
Gustavo Moreira 52181c7e8f Improvements to the parameterized generator changes 2021-12-14 16:22:30 +11:00
Gustavo Moreira c54818e630 Remove redundancies around array_to_string(). It returns a str() already. 2021-12-14 16:00:11 +11:00
Gustavo Moreira a386a7a948 Removed underscore from unused arguments 2021-12-14 15:40:51 +11:00
Gustavo Moreira 86676cf4e8 Changing BPF_PROG_TYPE_UNSPEC constant in favor of a literal 0 and a comment. 2021-12-14 15:37:55 +11:00
Gustavo Moreira 6970776c4c Renaming function to use single underscore and name from extra to extended 2021-12-14 15:37:48 +11:00
Gustavo Moreira 2e93db9b57 Adding versioning to SockHandlers 2021-12-14 15:37:43 +11:00
Gustavo Moreira 9766327433 Parameterized generator 2021-12-14 15:37:37 +11:00
Gustavo Moreira 5c507f5ae8 Plugins versioning fixes 2021-12-14 15:37:19 +11:00
ikelosandGitHub 3c11099e66 Merge pull request #596 from gcmoreira/assorted-fixes 
Assorted fixes
 2021-12-12 22:54:18 +00:00
Gustavo Moreira c5c1f355ef Changing not not for a more explicit if statement 2021-12-13 09:51:25 +11:00
Gustavo Moreira 6456e55ddc Added Sockstat linux plugin to enumerate all processes sockets. 
The output format is based on the `ss` tools. It supports:
* Unix socket
* Inet/Inet6 sockets
* Netlink sockets
* VSock sockets
* Packet sockets
* XDP sockets (eBPF)
* Bluetooth sockets (When the respective symbols are present)

Changes to the linux Lsof plugin were required to be able to reuse its filedescriptor listing capability.
 2021-12-10 17:51:27 +11:00
Gustavo Moreira 02bf609fd1 Prepare linux.lsof.Lsof plugin to work as a helper library for other plugin. 2021-12-10 17:50:52 +11:00
Gustavo Moreira d2ad867d1e my mistake, it should be negated twice to get True when is valid 2021-12-10 13:20:43 +11:00
Gustavo Moreira e1942976bf wrong comparison with None 2021-12-10 13:10:47 +11:00
Gustavo Moreira 8e7aff4ad8 not in please 2021-12-10 13:09:41 +11:00
Gustavo Moreira 36ac92c11c undefined layers module 2021-12-10 13:06:38 +11:00
Gustavo Moreira 17e0b04cb3 undefined glob module 2021-12-10 13:06:15 +11:00
Mike Auty 581251cb05 Linux: Fix long standing typo (thanks to @gcmoreira) 2021-12-08 23:34:53 +00:00
Mike Auty 832bdc2ab1 Linux: Fix long standing typo (thanks to @gcmoreira) 2021-12-08 23:34:23 +00:00
ikelosandGitHub 32ec4afed3 Merge pull request #586 from volatilityfoundation/issues/qemu-speed-up 
Layers: Speed up qemu by not bisecting
 2021-12-08 23:08:32 +00:00
ikelosandGitHub 8f083ed1dd Merge pull request #476 from japhlange/issues/issue474_netscan_win8sp1x64 
adds netstat symbols to Win8x64 ISF files
 2021-12-06 20:10:25 +00:00
Jan 125658ee0d re-adds accidentally deleted file 2021-12-06 21:09:39 +01:00
Jan be4d014f1a improves decision making when to inspect driver pe header based on version_dict 2021-12-06 17:18:39 +01:00
Jan 6cd2d940f3 adds proper version requirement for verinfo 2021-12-06 17:18:38 +01:00
Jan 3aac7b228e adds a few clarifying comments and handles errors better 2021-12-06 17:16:23 +01:00
Jan ee65793fd8 adds new ISF for tcpip.sys 6.3.9600.19935 + distinguisher 2021-12-06 17:16:20 +01:00
Jan 90ad7b1609 reverts pointless createtime offset change 2021-12-06 17:14:40 +01:00
Jan fffb375909 adds netstat symbols to Win8x64 ISF files 2021-12-06 17:14:40 +01:00
Mike Auty 96820e2804 Plugins: Bump skeleton_key_check to 2.0.0 2021-12-03 16:02:06 +00:00
ikelosandGitHub da1216a747 Merge pull request #594 from a5hlynx/develop 
update version to 2.0.0
 2021-12-03 15:58:15 +00:00
a5hlynx 680349016e update version to 2.0.0 2021-12-04 00:29:00 +09:00