4521 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
ikelosandGitHub	714e987679	Merge pull request #1270 from eve-mem/windows_vadyarascan_sanity_check_warnings ... Windows: change warnings around large memory maps to debug level as per issue #1256	2024-09-25 23:26:30 +01:00
eve	09fa859a92	Windows: change warnings around large memory maps to debug level as per issue #1256	2024-09-25 09:02:51 +01:00
ikelosandGitHub	67f8265def	Merge pull request #1261 from gcmoreira/linux_checkcreds_pointer_verification_improvements ... Linux checkcreds pointer verification improvements	2024-09-22 15:12:46 +01:00
ikelosandGitHub	bb6ab45363	Merge pull request #1268 from gcmoreira/fix_constants_imports ... Fix changes introduced to volatility3.framework.constants in PRs #838	2024-09-18 14:55:20 +01:00
Gustavo Moreira	f77003b670	Fix changes introduced to volatility3.framework.constants in PRs #838 and #1247	2024-09-18 12:50:58 +10:00
Mike Auty	10ac21da2c	Windows: Remove the unnecessary requirement on verinfo ... Fixes #1267	2024-09-16 12:16:49 +01:00
ikelosandGitHub	48a770ae8a	Merge pull request #1250 from volatilityfoundation/pe_symbols_new ... Add new pe_symbols API, debug registers plugin, unhooked system calls…	2024-09-16 09:28:09 +01:00
Andrew Case	b788733683	More comments on unhooked system calls	2024-09-15 19:48:55 -05:00
ikelosandGitHub	b5b9372d16	Merge pull request #1266 from Abyss-W4tcher/set_default_req_value ... [configuration.py] use default req value in config_value call	2024-09-16 00:34:10 +01:00
Andrew Case	79b8ff7d05	Address final feedback	2024-09-15 18:29:05 -05:00
ikelosandGitHub	5525ce5b9b	Merge pull request #1260 from gcmoreira/linux_pidhashtable_plugin_pointer_verification_improvements ... Linux pidhashtable plugin pointer verification improvements	2024-09-15 20:33:48 +01:00
ikelosandGitHub	6c5b838733	Merge pull request #1258 from gcmoreira/timeliner_plugin_improvements ... Timeliner plugin `plugin-filter` improvements	2024-09-15 13:57:34 +01:00
Andrew Case	322f79fb50	Bail as early as possible	2024-09-14 17:18:26 -05:00
Andrew Case	291bc878ad	Break in a cleaner flow	2024-09-14 16:31:33 -05:00
Andrew Case	21d21cf4b8	Break properly in all paths. Help callers to ensure always lower case module name matching.	2024-09-14 16:26:38 -05:00
Andrew Case	ba0c975e73	Address all feedback	2024-09-13 18:50:47 -05:00
Abyss Watcher	67ee382c32	use default req value in config_value call	2024-09-13 18:53:33 +02:00
Gustavo Moreira	48ae43d64e	Bumping the major version since the output changed	2024-09-12 17:22:52 +10:00
Gustavo Moreira	a7dcd6d9e8	Minor: Add comment on TimeLinerInterface subclass filter	2024-09-12 16:19:13 +10:00
Gustavo Moreira	be05ace29b	Timeliner plugin: Add exception information	2024-09-12 16:06:40 +10:00
Gustavo Moreira	57de357ffd	Timeliner plugin: Fix issue with filtering TimeLinerInterface plugins and using the filter argument	2024-09-12 16:05:40 +10:00
Gustavo Moreira	9e8471799a	Improving code and adding the credential virtual addresses to the output.	2024-09-12 10:44:43 +10:00
Gustavo Moreira	c77c662b70	Linux pidhashtable plugin pointer verification improvements	2024-09-11 21:09:08 +10:00
Gustavo Moreira	037eb1ce03	Linux Check_creds plugins pointer verification improvements	2024-09-11 16:30:41 +10:00
ikelosandGitHub	e76d51251b	Merge pull request #1253 from volatilityfoundation/issues/issue1252 ... CLI: Filter on rendered values	2024-09-10 23:26:50 +01:00
ikelosandGitHub	d238c59134	Merge pull request #1254 from volatilityfoundation/issues/plugin-requirement-recursion ... Core: Verify plugin requirements of plugins	2024-09-10 23:26:27 +01:00
ikelosandGitHub	7d75c172f1	Merge pull request #1198 from volatilityfoundation/issues/issue1195 ... Linux: Update vmayarascan to scan complete VMA blocks	2024-09-10 22:02:14 +01:00
ikelosandGitHub	f30cf39449	Merge branch 'develop' into issues/issue1195	2024-09-10 21:40:08 +01:00
Andrew Case	b40c20dd7f	Revert back to union to avoid failed tests	2024-09-10 14:55:00 -05:00
Andrew Case	b7e604d63f	Address feedback	2024-09-10 14:50:40 -05:00
Mike Auty	fd2c97e1ba	CLI: Use enumerate for renderers (thanks @gcmoreira)	2024-09-09 00:44:00 +01:00
Mike Auty	9152f33181	Core: Allow circular dependencies as long as they are all met	2024-09-08 21:58:09 +01:00
Mike Auty	bf000ff0a0	Core: Add recursion protection to VersionRequirement check	2024-09-08 21:42:59 +01:00
Mike Auty	ace590e8f0	Core: Fix up f-string containing a string	2024-09-08 16:08:48 +01:00
Mike Auty	f3085b6c59	Core: Move the pluginrequirement check to generic versionrequirement	2024-09-08 16:06:23 +01:00
Mike Auty	4361c38573	Core: Verify plugin requirements of plugins	2024-09-08 14:55:04 +01:00
Mike Auty	8259ca9019	Core: Bump the framework number so we can differentiate CLI versions	2024-09-08 13:47:26 +01:00
Mike Auty	26cd73115b	CLI: Filter on rendered values	2024-09-08 13:31:09 +01:00
Andrew Case	802fc024b5	switch api place	2024-09-06 13:27:04 -05:00
Andrew Case	61cf58d977	black fixes	2024-09-06 12:49:01 -05:00
Andrew Case	fd87772877	Move VAD enumeration into pe_symbols	2024-09-06 12:47:42 -05:00
Andrew Case	bcd93616c0	more black help	2024-09-06 12:36:35 -05:00
Andrew Case	7b48ee4be4	more black help	2024-09-06 12:36:13 -05:00
Andrew Case	c223ac6e76	more black help	2024-09-06 12:31:55 -05:00
Andrew Case	30cb5bd3ab	Formatting that my local black doesn't understand	2024-09-06 12:14:06 -05:00
Andrew Case	3bb9264a57	formatting	2024-09-06 12:11:16 -05:00
Andrew Case	69e6e59daf	Add new pe_symbols API, debug registers plugin, unhooked system calls plugin	2024-09-06 12:01:21 -05:00
ikelosandGitHub	d56cd83510	Merge pull request #1225 from volatilityfoundation/orphan_threads_v2 ... Orphan threads v2	2024-09-03 20:50:06 +01:00
ikelosandGitHub	6803bf375b	Merge pull request #1249 from volatilityfoundation/mft_size_smear_fix ... Mft size smear fix	2024-09-03 20:48:04 +01:00
Andrew Case	9c058936a8	Address feedback	2024-09-03 10:30:05 -05:00