Mike Auty
7271dcd11e
Fix up the documentation (and formatting) slightly
2026-08-13 23:29:08 +01:00
Mike Auty
847bb8d12c
Ensure the arrow/parquet classes aren't created unless the libraries are there
2026-08-13 23:25:40 +01:00
Mike Auty
392df7745e
Rework where the banner output happens
2026-05-01 15:05:37 +01:00
Mike Auty
9c2de16e2a
Add in a much larger range if earlier checks don't find the DTB
2026-04-06 22:14:22 +01:00
Mike Auty
eb52181836
Bump the non-release version number now
2026-04-02 21:26:52 +01:00
Mike Auty
34384ddb4b
Switch to using github infrastructure for test cases...
2026-03-12 22:25:46 +00:00
Mike Auty
86b53d90b0
Update documentation to remove black and use ruff
2026-03-09 20:47:24 +00:00
Mike Auty
013921e787
Switch to using ruff for formatting as well as linting
2026-03-08 20:48:02 +00:00
Mike Auty
98e2f7a1f5
Put back in the debugging line
2026-03-08 20:35:33 +00:00
Mike Auty
d3a9481a31
Tidy the threshold code for empty DTBs using code from @abyss-w4tcher and reduce it slightly
2026-03-08 20:29:18 +00:00
Mike Auty
e095851ab9
Improve Win11 DTB detection
...
It seems windows 11 has started moving the DTB further afield. This
change adds another region located empirically, so it might need
extending for everything between the second and third regions
potentially. It may also be possible to shrink the third region, but
that will need more example images (it's still not clear what causes
the use of the higher DTB, although the image it was found in was 18Gb).
2026-02-20 18:34:39 +00:00
Mike Auty
81fae3a83b
We weren't breaking between accumulating lines and outputting them
2026-02-19 22:48:03 +00:00
Mike Auty
fd22429b0b
Ubunutu-latest no longer supports 3.9
2026-02-19 20:20:10 +00:00
Mike Auty
48a5000f78
Make the output of banners match the identifier in isfinfo
2026-01-31 18:03:55 +00:00
Mike Auty
743927d6a2
Make black happy
2026-01-31 18:00:07 +00:00
Mike Auty
1b58e7e25b
Add version to pdb signature scanner and require it for the banners plugin
2026-01-31 17:58:45 +00:00
Mike Auty
881d4e85e8
Add in intial support for locating windows 'banners'
2026-01-31 17:53:30 +00:00
Mike Auty
a52b26e15c
Merge branch 'stable' into develop
2026-01-29 21:54:34 +00:00
Mike Auty
d8485fe460
Add arrow support to pyinstaller build
2026-01-29 21:04:51 +00:00
Mike Auty
6b9a6f84c3
Bump year for copyrights to 2026
2026-01-29 20:39:09 +00:00
Mike Auty
d0ed42456c
Increment the size of the amount scanned, not just the start location
2026-01-08 22:34:32 +00:00
Mike Auty
1abd67746f
Appease black
2026-01-08 22:04:18 +00:00
Mike Auty
9d67420d0e
Improve windows intel detection for Windows 11
2026-01-08 21:59:03 +00:00
Mike Auty
0da666fbba
Reduce code reuse
2026-01-04 14:19:32 +00:00
Mike Auty
b461e77c5e
Rebased version of the fix for issue1255
2026-01-04 14:14:42 +00:00
Mike Auty
0089aefaf6
Reformat because ruff and black disagree
2025-12-28 14:13:44 +00:00
Mike Auty
105ee08d91
Avoid trying to lookup child nodes that have been filtered
...
Fixes issue1309.
2025-12-28 14:09:59 +00:00
Mike Auty
50f64f66d5
Document the reason for skipping entirely duplicated page tables
2025-12-16 10:03:37 +00:00
Mike Auty
4ce58a636d
Reorder imports and fix black issue
2025-11-19 16:49:50 +00:00
Mike Auty
ea4aab5652
Fix black/ruff checks
2025-11-19 16:39:02 +00:00
Mike Auty
81f135f315
Linux: Rework module calls to parameterize rather than pull in methods
2025-11-19 16:26:54 +00:00
Mike Auty
f13ad125d7
Update the expiry dates of various functions to at least a year's notice
2025-10-16 20:33:28 +01:00
Mike Auty
46c508fff2
Bump removal of plugins by a year to ensure suitable time for transition
2025-10-16 20:29:02 +01:00
Mike Auty
7536e9dd14
Start to support uv installation of volatility
2025-09-30 19:08:10 +01:00
Mike Auty
841b2b6435
Ruff fixes that black agrees with
2025-09-29 23:04:01 +01:00
Mike Auty
2a2f27a399
Fix ruff issue
2025-09-15 20:00:09 +01:00
Mike Auty
1a1f3be633
Swap ObjectInformation from namedtuple to dataclass
2025-09-15 20:00:09 +01:00
Mike Auty
1ebb82a0c0
Try to fix documentation builds
2025-07-12 11:09:47 +01:00
Mike Auty
b2e8364646
Windows: Fix pe_symbols type checking
2025-06-10 15:59:22 +01:00
Mike Auty
520e2cfcdd
Core: Fix up warning message
2025-06-07 14:21:22 +01:00
Mike Auty
c85026ee91
Core: Ensure people running renamed plugins know that the plugins are deprecated
2025-06-07 14:20:37 +01:00
Mike Auty
fb76bf6b6c
Linux: Minor linting fixes to fbdev plugin
2025-06-07 10:22:53 +01:00
Mike Auty
0d7f985ef6
Plugins: Add in __init__ files to create submodules for OS plugins
2025-06-07 10:16:22 +01:00
Mike Auty
8924776698
Plugins: Remove deprecated PluginRequirement in favour of VersionRequirement
2025-06-07 09:41:19 +01:00
Mike Auty
40a3d23e2d
Infra: Update checkout actions
2025-05-26 10:19:28 +01:00
Mike Auty
6269091be7
CLI: Support listing/clearing breakpoints in volshell
2025-05-18 20:18:29 +01:00
Mike Auty
ee445d9746
Add in workflow_dispatch for pyinstaller action
2025-05-06 22:27:03 +01:00
Mike Auty
92673be42c
Reformat and install volatility package deps before build
2025-05-06 22:15:38 +01:00
Mike Auty
5bb4cd90c1
Remove no longer needed functools import
2025-05-05 13:16:29 +01:00
Mike Auty
ae08c8ecfc
Support setting the breakpoint on the lowest layer
2025-05-05 13:14:19 +01:00
Mike Auty
f5ec6dc7dd
Add in initial version of breakpointing
2025-05-05 12:55:48 +01:00
Mike Auty
d3da34ce10
Update codeql action from v2 to v3
2025-04-27 16:18:47 +01:00
Mike Auty
f4a2c7aec2
Drop pycov requirement by 1 since github can't seem to find the most recent version
2025-04-27 15:02:12 +01:00
Mike Auty
bc265edcdc
Try to slightly loosen the pytest-cov requirement
2025-04-27 15:00:09 +01:00
Mike Auty
9c7655a635
Add in coverage recording to the test process
2025-04-27 14:56:17 +01:00
Mike Auty
b5c98a080a
Fix a default value being mutable
2025-04-25 11:31:45 +01:00
Mike Auty
5cc8e36073
Documentation: Improve the readme to make quickstart the first thing people see
2025-04-08 16:05:30 +01:00
Mike Auty
9dcb359e32
Ensure the release branch has the right version number
2025-04-07 14:56:19 +01:00
Mike Auty
338c76c2ca
Documentation: Add in @dgmcdonna suggestions/corrections
2025-04-03 17:08:13 +01:00
Mike Auty
3b21b350f1
Documentation: Add in a small section on the coding style about using f-string modifiers over separate calls
2025-04-03 17:04:18 +01:00
Mike Auty
ed1b1f5369
Avoid bumping the version too quickly without reason
2025-04-03 16:30:25 +01:00
Mike Auty
b01c17f419
CLI: Fix bad typing issue in pretty printer
...
Fixes #1759
2025-04-03 16:24:47 +01:00
Mike Auty
d3d19fe776
CLI: Handle BaseAbsentValues in JSON
2025-04-01 23:38:05 +01:00
Mike Auty
aad6a56336
Fix old typing mechanism
2025-04-01 23:20:49 +01:00
Mike Auty
e2fb96a0d3
Fix up JSON rendering of hex bytes and LayerData
2025-04-01 23:14:03 +01:00
Mike Auty
9791ae5878
Fix up direct import issue
2025-04-01 22:23:03 +01:00
Mike Auty
b73e4f0d2b
Don't completely remove the chainmap, but change one dict to a namedmapping
2025-03-29 14:32:14 +00:00
Mike Auty
ee0ad0b4af
Update the various MINOR version bumps to the current version
2025-03-28 01:46:14 +00:00
Mike Auty
de11e87f28
Fix ruff error (again)
2025-03-25 00:08:07 +00:00
Mike Auty
a013170a2d
Slotting has little effect, so don't change so much
2025-03-24 23:58:45 +00:00
Mike Auty
acfedd6d9c
Sets slots to none has no effect on memory as long as __dict__ isn't instanciated
2025-03-24 23:23:22 +00:00
Mike Auty
200746cbe6
Fix silly usage of update
2025-03-24 22:46:36 +00:00
Mike Auty
292ed6aeb4
Try to avoid variables changing types
2025-03-24 22:41:52 +00:00
Mike Auty
62d1d818b3
Restore use of ChainMap as well
2025-03-24 22:40:14 +00:00
Mike Auty
0ea5d795fd
Fix ruff issue
2025-03-24 22:36:12 +00:00
Mike Auty
8610c681ab
Restore the chainmap, since we need it for cloning
2025-03-24 22:33:25 +00:00
Mike Auty
3153cd7e30
Remove the chainmap and multiple dictionaries to reduce memory consumption
2025-03-24 19:21:51 +00:00
Mike Auty
f0153817c5
Add in slots to object model
2025-03-24 00:58:28 +00:00
Mike Auty
e86981c880
Various: Update yarascan plugins to output LayerData instead of just bytes
2025-03-23 00:42:13 +00:00
Mike Auty
6f599fa645
Various: Minor bump malfind functions for all OSes
2025-03-23 00:42:13 +00:00
Mike Auty
af01fcdcff
Core: Remove unnecessary f-string
2025-03-23 00:42:13 +00:00
Mike Auty
c18c6cbf30
Core: Shift renderers from interfaces
2025-03-23 00:42:13 +00:00
Mike Auty
6af8cd09f0
Renderers: Add in fallback method for formatting cellrenderers
2025-03-23 00:42:13 +00:00
Mike Auty
94d6f4f131
CLI: Indicate missing bytes from padded bytes
2025-03-23 00:42:13 +00:00
Mike Auty
85870a9a94
Windows: Update the required framework version for plugins outputting LayerData
2025-03-23 00:42:13 +00:00
Mike Auty
4145ef2c0d
Renderers: Add no_surrounding to LayerData and include MINOR version bump
2025-03-23 00:42:11 +00:00
Mike Auty
e936b33784
CLI: Fix ruff check error
2025-03-23 00:41:43 +00:00
Mike Auty
2e8d18e7cb
Windows: Convert mbrscan over to LayerData output
2025-03-23 00:41:43 +00:00
Mike Auty
2304ea4cbe
Windows: Convert mftscan plugins to LayerData output
2025-03-23 00:41:43 +00:00
Mike Auty
1d5d981be1
Windows: Convert malfind to LayerData renderer
2025-03-23 00:41:43 +00:00
Mike Auty
ba82067dac
CLI: Add in initial LayerData renderer
2025-03-23 00:41:43 +00:00
Mike Auty
d3a5883130
Core: Fix up more bad typing operators
2025-03-23 00:41:43 +00:00
Mike Auty
45ee399623
Core: Fix up yet another typo
2025-03-23 00:41:43 +00:00
Mike Auty
16d1b2697c
Core: Fix typing for python < 3.10
2025-03-23 00:41:43 +00:00
Mike Auty
4fd501d38f
Core: Resolve ruff errors
2025-03-23 00:41:43 +00:00
Mike Auty
1ecd75f665
Core: Apply black to interfaces and the CLI
2025-03-23 00:41:43 +00:00
Mike Auty
453f52ba3e
CLI: Add in concept of CellRenderer
2025-03-23 00:41:43 +00:00
Mike Auty
55151f546d
Initial work on adding a LayerData renderer type
2025-03-23 00:41:43 +00:00
Mike Auty
9550db82a9
Bump the ruff action
2025-03-15 20:31:01 +00:00
Mike Auty
56a64150ab
Core: Update coding requirement on function calls
2025-02-27 10:27:13 +00:00
Mike Auty