WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-08 02:37:39 +02:00
Code Issues Packages Projects Releases Wiki Activity
5,288 Commits 80 Branches 17 Tags
67a83871adac20171a862d55dcafe5ab383c024b
Commit Graph
5288 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Mike Auty e30b575826 Add in the final version of the 1.0 license. 2019-09-25 09:11:28 +01:00
Mike Auty c05b8dfd6a Volshell: Add support for constructing objects at specific offsets. 2019-09-25 01:22:48 +01:00
Mike Auty 926288a7ac Ensure process layer name contains the process ID. 2019-09-25 01:15:58 +01:00
Mike Auty 628ff6f740 Volshell: Add a convenience display symbols function. 2019-09-25 01:02:43 +01:00
Mike Auty 320f24d23f Volshell: Rename key methods and separate out NullFileConsumer. 2019-09-24 00:05:41 +01:00
Mike Auty 21f3d29576 Volshell: split running the plugin into separate run and render steps. 2019-09-24 00:00:25 +01:00
Mike Auty 6a43cd4593 Volshell: improve help function if arguments are used. 2019-09-23 23:59:54 +01:00
Mike Auty b25094035d Update renderers to work on populated treegrids. 2019-09-23 23:59:35 +01:00
Mike Auty 0e61062cb0 Volshell: Try not to pollute the configuration dictionary. 2019-09-23 23:11:45 +01:00
Mike Auty 89938cfbbc Volshell: Add support for quickly running plugins 2019-09-23 22:59:56 +01:00
Mike Auty 6c4c3f5a52 Volshell: improve dt error handling 2019-09-23 22:31:12 +01:00
Mike Auty 03c2444fbb Volshell: Fix up typo and improve spacing 2019-09-23 22:17:25 +01:00
Mike Auty 152572182f volshell: Improve dt method 2019-09-23 22:13:32 +01:00
Mike Auty 575463e69e Improve volshell: aliases and mode 2019-09-23 21:41:35 +01:00
Mike Auty 5a0957a301 Ensure capstone gets included on windows pyinstaller builds. 2019-09-22 01:26:30 +01:00
Mike Auty 70207a86ac Update pyinstaller spec and add volshell spec file. 2019-09-21 21:20:37 +01:00
Mike Auty 72567e1c50 Yapf-0.28.0 rerun across the whole codebase. 2019-09-21 21:08:23 +01:00
Mike Auty dad88692b8 Minor improvements for pyinstaller packages. 2019-09-21 21:06:05 +01:00
Mike Auty d2b892cf94 Fix up docstring errors in documentation build 2019-09-19 23:00:37 +01:00
Mike Auty 1153e86f23 Ensure user plugins are in the plugins documentation. 2019-09-19 22:59:28 +01:00
Mike Auty aae1623696 Ensure we only remove autodoc files on clean command. 2019-09-19 22:42:06 +01:00
Mike Auty 3bb2e50f2c Ensure the autodoc generated files are regenerated each run. 2019-09-17 18:33:58 +01:00
Mike Auty 1f9605abf7 Revert "Fix warnings when generated documentation." 
This actually broke autodoc generation and wasn't accurate.  The
documentation warnings may have to stay for now.

This reverts commit 37e13321f9.
 2019-09-17 18:32:44 +01:00
Mike Auty a248bdc804 Fix up old code and docstring indent issue. 2019-09-17 18:15:05 +01:00
Mike Auty 7efe19224e Make several small typing information fixes. 2019-09-17 18:01:11 +01:00
Mike Auty 33451967b2 Typing fixes for virtmap and remove extranious exception. 2019-09-17 17:58:47 +01:00
Mike Auty f872aa3390 Revert "Add in no-dump option to certificates plugin." 
Arg, too much mind changing.  This option would make sense if the
certificates plugin returned much useful information, but parsing
certificates isn't easy in with just stdlib, and therefore dumping the
certificates is the most sensible thing for this plugin to do (meaning
no need for a no-dump option).

This reverts commit 5491825652.
 2019-09-17 16:59:50 +01:00
Mike Auty 444fd5451b Add in no-dump option to certificates plugin. 2019-09-17 16:59:50 +01:00
Mike Auty ab4b77a754 Revert "Add in the option to not produce files." 
It makes more sense to allow each plugin to individually decide whether
to produce files or not.

This reverts commit 07adce2721.
 2019-09-17 16:59:50 +01:00
superponibleandikelos ae8822dddf check if hive offset is valid before yielding 2019-09-17 16:59:50 +01:00
Mike Auty 442b47c87d Add in the option to not produce files. 2019-09-17 16:59:50 +01:00
Mike Auty 83e113dad0 Revert "Provide a more user friendly filename." 
As Dave pointed out in the pull request, "User" assumes only one user
and not multiple hives.

This reverts commit a802ecab86.
 2019-09-17 16:59:50 +01:00
Mike Auty 1b953e3c80 Provide a more user friendly filename. 2019-09-17 16:59:50 +01:00
superponibleandikelos b6b2275c13 add hive_offset to crt filenames 2019-09-17 16:59:50 +01:00
superponibleandikelos 2fa9e6b84d fix typo in comment 2019-09-17 16:59:50 +01:00
superponibleandikelos 508a9148ed catch InvalidAddressException when creating RegistryHive 2019-09-17 16:59:50 +01:00
superponibleandikelos 2e4a8c7247 add user level hives for certificates 2019-09-17 16:59:50 +01:00
superponibleandikelos 2053d957bc update docstring copied from printkey 2019-09-17 16:59:50 +01:00
superponibleandikelos 36f5e47d5b fix up docstrings to match yield values 2019-09-17 16:59:50 +01:00
Mike Auty c6cdbc7342 Move the hive_iterator to HiveList, since it's more intuitively where it should live. 2019-09-17 16:59:50 +01:00
Mike Auty b292188319 Update userassist to use the new printkey API. 2019-09-17 16:59:50 +01:00
Mike Auty 46c047b7b3 Update API slightly to return objects not strings. 2019-09-17 16:59:50 +01:00
Mike Auty f2220e16b9 Add in initial attempt at certificate plugin. 2019-09-17 16:59:50 +01:00
Mike Auty b413e4a13d Refactor printkey to be more usable from other plugins. 2019-09-17 16:59:50 +01:00
Mike Auty 38f773fc91 Slightly tidy up volshell messages. 2019-09-17 01:04:10 +01:00
Mike Auty fb4f8e1d74 Ensure we use the right memberfor mac pids. 2019-09-16 12:08:20 +01:00
Mike Auty 76a1bb972c Restore the mac queue_event class override. 
For some reason, this went missing in commit
a3caf39097, which looks to have been an
error.
 2019-09-16 12:04:50 +01:00
Mike Auty fc2ee7e401 Improve plugin category detection for systems such as volshell. 2019-09-16 11:36:43 +01:00
Mike Auty 16194ef114 Add in linux and mac volshell support. 2019-09-16 11:35:46 +01:00
Mike Auty 74438f053c Update volshell plugin methods 2019-09-16 01:16:46 +01:00