Commit Graph
5288 Commits
Author SHA1 Message Date
Mike Auty 05ffab9108 Windows: Make generate_mapping externally visible 2021-03-15 22:39:24 +00:00
Mike Auty 0890a96249 Windows: Check strings file before use
This will cause the strings plugin to exit early if the strings file has
formatting issues.
2021-03-15 22:16:49 +00:00
Mike Auty 0a7a749667 Documentation: Add text about banners and isfinfo 2021-03-15 11:15:44 +00:00
Mike Auty 95a9effbe3 Windows: Generalize symbol_table_from_pdb 2021-03-14 23:28:00 +00:00
Mike Auty 970d15a82e Documentation: Document volshell 2021-03-14 21:47:53 +00:00
Mike Auty 4e50402f11 Windows: Add additional version info finding method 2021-03-14 20:17:06 +00:00
Mike Auty f41c75775a Windows: Group JSON symbols under directories 2021-03-14 19:24:45 +00:00
Mike Auty 5d77a7ca6b PDB: Don't bump the version unnecessarily
The version field of the producer should be enough to determine the
difference
2021-03-13 18:50:29 +00:00
Mike Auty 638d73b822 PDB: Improve pdb parsing 2021-03-13 15:34:02 +00:00
Mike Auty cdf67cad2b Windows: Cache PDB files again
Unfortunately, opening the file as a layer will cause it to cache anyway
2021-03-13 01:50:11 +00:00
dadokkio cd3ad1e067 fix config 2021-03-12 13:09:38 +01:00
Arcuri DavideandGitHub 5c8bd3c9d9 enable support for compiled rules 2021-03-12 11:30:04 +01:00
Frank BlockandGitHub 9c1603e372 Added Comment/TODO for transition state issue
See https://github.com/volatilityfoundation/volatility3/pull/475
2021-03-11 23:55:37 +01:00
Frank BlockandGitHub 3e04b347cd Added Comment/TODO for transition state issue
See https://github.com/volatilityfoundation/volatility3/pull/475
2021-03-11 23:54:03 +01:00
Frank BlockandGitHub 5d55bcfa52 Adjusted bit operation for PFN calculation 2021-03-11 23:33:39 +01:00
Frank BlockandGitHub 085aacc86a Moved new _maxphyaddr to WindowsIntel32e 2021-03-11 23:24:21 +01:00
Mike Auty 5eaa5ef7b2 CLI: Remove unnecessary urllib imports 2021-03-11 15:50:45 +00:00
Frank BlockandGitHub d5f85e9cc6 Temporary workaround for changes in transition PTE 2021-03-11 14:14:33 +01:00
Frank BlockandGitHub 3bb8ddf089 Temporary workaround for changes in transition PTE 2021-03-11 14:11:39 +01:00
Mike Auty a9e91ea19b Objects: Writing an object should return the re-read object 2021-03-07 16:08:36 +00:00
Mike Auty 5e01ab811b CLI: Improve URI handling error for windows 2021-03-07 13:08:48 +00:00
Mike Auty 6a6e2a0e5c CLI: Fix and refactor the URI handling code 2021-03-07 13:03:45 +00:00
Mike Auty 01025c88bb CLI: Fixes windows file path handling
Closes: #470
2021-03-07 12:44:15 +00:00
ikelosandGitHub 099042ec3d Merge pull request #471 from chop0/patch-1
Update copyright notice
2021-03-07 10:50:41 +00:00
Alec PetridisandGitHub 69d303da8c Update copyright notice 2021-03-06 22:44:19 -08:00
Mike Auty 1b57a899e8 Objects: Encode strings as bytes when writing 2021-03-05 01:16:14 +00:00
Mike Auty 62c1d1df35 Layers: Avoid writing to unwritable physical layers 2021-03-05 01:14:44 +00:00
Mike Auty 963b448d36 Objects: Revert setting attributes to write data 2021-03-05 01:13:34 +00:00
Mike Auty f251a1db15 Windows: Update PDB code to work without cache 2021-03-05 01:10:26 +00:00
Mike Auty bc47073903 CLI: Fix logging issue after root logger change 2021-03-05 00:17:09 +00:00
ikelosandGitHub 3fe8e2d4d9 Merge pull request #469 from volatilityfoundation/feature/improved-object-writing
Objects: Improve writing of objects
2021-03-04 23:45:14 +00:00
ikelosandGitHub 9ef972192d Merge pull request #468 from volatilityfoundation/feature/improved-typing
Core: Improve typing across codebase
2021-03-04 23:36:42 +00:00
Mike Auty a75ccd72b1 Layers: Restore a loss from a rebase/merge 2021-03-04 23:34:04 +00:00
Mike Auty f51b534792 Merge branch 'feature/better-nonexistant-file-handling' into develop 2021-03-04 23:26:07 +00:00
Mike Auty 2fe7e22bf8 CLI: Tidy up single_location handling 2021-03-04 23:25:53 +00:00
ikelosandGitHub 7613cd7a00 Merge pull request #467 from volatilityfoundation/feature/partial-cache-to-tmpfile-move
Layers: Allow manual cache control and disable for PDB
2021-03-04 23:15:56 +00:00
Mike Auty 0c8c52ba32 Layers: Allow manual cache control and disable for PDB 2021-03-04 23:13:44 +00:00
Mike Auty 0b4f49736c Volshell: Fix missing import 2021-03-04 18:48:58 +00:00
ikelosandGitHub 51c3818d71 Merge pull request #461 from volatilityfoundation/feature/regex-trie
Layers: Improve regex scanning for linux/mac
2021-03-02 15:54:37 +00:00
Mike Auty 2a41b1eee9 Linux: Make bang_addrs has something to search for 2021-03-02 15:50:21 +00:00
Mike Auty 1d35406ffe CLI: Improve file parameter handling 2021-03-02 15:45:21 +00:00
Mike Auty 9deb0c9d8a CLI: Fix early logging target 2021-03-02 11:15:16 +00:00
Mike Auty 681b68f252 Objects: Improve writing of objects 2021-02-28 02:44:41 +00:00
Mike Auty 77e406e408 Layers: Fix issue if leechcore not available 2021-02-25 18:07:28 +00:00
Mike Auty 70a94bf205 Automagic: Make sure Linux gets in the metadata too 2021-02-25 18:02:16 +00:00
ikelosandGitHub b180cc163a Merge pull request #459 from AsafEitani/match-pid-result-fields
changing PID field names
2021-02-25 01:29:54 +00:00
ikelosandGitHub 561058624c Merge pull request #460 from volatilityfoundation/feature/leechcore-support
Layers: Add in LeechCore physical file support
2021-02-24 17:43:12 +00:00
Mike Auty e27fc115dc Layers: Improve regex scanning for linux/mac 2021-02-24 17:39:43 +00:00
Mike Auty e18e9700f2 Core: Improve typing across codebase 2021-02-24 01:13:49 +00:00
Mike Auty 8131a9e817 Layers: Add in LeechCore physical file support 2021-02-23 14:46:43 +00:00