WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-08-29 03:09:48 +02:00
Code Issues Packages Projects Releases Wiki Activity
2,537 Commits 80 Branches 17 Tags
754cfcd7acdd613f8b7fabf3c4ee70ff7cc55cc3
Commit Graph
2537 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Mike Auty 754cfcd7ac Documentation: Add more detail on writing objects 
Fixes #390
 2020-12-06 23:55:49 +00:00
Mike Auty 3b700bbee5 Documentation: Ensure non-os plugins are documented 2020-12-06 23:55:26 +00:00
Mike Auty 0d267d0d56 Codebase: Improve typing using monkeytype 2020-12-06 21:34:28 +00:00
Mike Auty 9fa107a6c0 CLI: Support MultiTypeData in JSON output. Fixes #384 2020-12-02 23:41:21 +00:00
Mike Auty 27fcd1a641 CLI: Error on non-existant output_dir 2020-12-02 23:16:17 +00:00
cecioandikelos c9c37a9b35 OS check reworked as suggested by @iMHLv2 and @ikelos 2020-12-02 14:23:12 +00:00
cecioandikelos 1cf625fc89 fix: the bounce from physical to virtual process is required only for OS < Win10. 
Added the check in the "dump" option
 2020-12-02 14:23:12 +00:00
Mike Auty f88ce55199 Automagic: Improve debugging output for linux/mac 2020-12-02 09:51:42 +00:00
Mike Auty 8fb53a32a8 PdbUtility: Support multiple debug directories 2020-12-01 01:21:36 +00:00
Mike Auty 4d0a07194a PDBUtility: Update to use only pefile 2020-12-01 01:21:36 +00:00
Mike Auty d77399b82b Pdbconv: Use both pefile and volatility to get the guid 2020-12-01 01:21:36 +00:00
Mike Auty 65310eb841 Pdbconv: Slight tweaks to database_name finding 2020-11-29 23:05:21 +00:00
Mike Auty dd0f690988 Pdbconv: Extract appropriate database name if possible 
Fixes #381
 2020-11-29 22:56:01 +00:00
AsafEitaniandikelos 4ec006e606 Fix 'maxsize variable doing nothing' bug 
In one of the earlier commits the varible was erased from being passed to vaddump - that corrects it.
 2020-11-18 19:56:30 +00:00
Mike Auty 9150cd971b Core: Change base class for FileHandlerInterface 
Python 3.6 doesn't appear to support IO[bytes] (and this is also from
the typing library), so we instead now inherit from RawIOBase.  This
provides read, but does not come with a constructor (like FileIO) so
is suitable for our needs.

Fixes issue #376.
 2020-11-17 22:04:55 +00:00
Mike Auty 30de81795c Windows: Update requirements to pslist 2.0.0 2020-11-16 09:41:42 +00:00
Mike Auty 745fce2281 Symbols: Fix pool error handling 
Fixes #375
 2020-11-15 23:56:07 +00:00
Mike Auty 4a8b4d1706 Plugins: Bump remaining plugins to framework require 2.0.0 2020-11-15 16:53:03 +00:00
Mike Auty 44c37d9761 Objects: Fix the comparison of enumerations 2020-11-12 17:32:56 +00:00
Mike Auty 60a70d06ca PDB: Fix issue #374 2020-11-12 17:02:40 +00:00
Mike Auty 49aeaf2a49 Plugins: Resolve remaining LGTM recommendations 2020-11-09 00:03:07 +00:00
Mike Auty 0a655d76a8 Core: Fix LGTM recommendations 
This is mostly unused imports and unused variables.
 2020-11-04 22:41:39 +00:00
Mike Auty 7c75018fc4 Core: Fix Warnings from LGTM 2020-11-04 21:02:36 +00:00
Mike Auty ae3a97e2c7 Core: Fix errors found by LGTM 2020-11-04 20:05:12 +00:00
Mike Auty cee63ab6e8 Development: Fix warnings from external tool 2020-11-04 20:01:03 +00:00
Mike Auty a9c742b3a2 Codebase: Fix == None (from lgtm audit) 2020-11-04 14:32:42 +00:00
Mike Auty ac95d1f481 Renderers: Allow bytes in JSON output 
Fixes #367
 2020-11-02 00:04:30 +00:00
Mike Auty 1d8081e409 Plugins: Fix exception thrown in handles 
Fixes #368
 2020-11-01 14:50:48 +00:00
Mike Auty e9c753cfc7 Automagic: Optimize windows layer construction 2020-11-01 00:11:34 +00:00
Mike Auty 46f6ee2eae Automagic: Ensure progress percentages complete 2020-10-31 23:32:17 +00:00
Mike Auty 47ff37b07b Plugins: Make layerwiter more configurable 
This adds support for dumping multiple layers at once, listing available
layers and selects the highest non-mapped layer.  Mapping is specified
in the metadata and currently is only applied to intel layers.
 2020-10-31 23:30:22 +00:00
Mike Auty dbd00b9759 Plugins: Fix paths read by isfinfo 2020-10-31 21:26:26 +00:00
Mike Auty 7a36628e48 Extensions: Meaningful error for failed inet_ntop 2020-10-31 11:47:38 +00:00
Mike Auty 31ff6ce482 Plugins: Bump isfinfo framework version 2020-10-30 16:11:35 +00:00
Mike Auty c622ee4897 Plugins: Bump framework version for banners 2020-10-30 14:59:01 +00:00
Mike Auty 5aa67d12af Volshell: More fixes for framework 2.0.0 2020-10-29 09:43:16 +00:00
Mike Auty f9345acf43 Documentation: Document how to handle files 2020-10-29 09:43:16 +00:00
Mike Auty e99706384c Volshell: Bump required framework version 2020-10-29 09:43:16 +00:00
Mike Auty ea629591ef Plugins: Make open method clearer to use 
This highlights that the FileHandler class can also be seen as a method
similar to open, and it removes unnecessary context managers, allowing
plugins to close files as they wish (they must, however, remember to
close the file for it to be committed).
 2020-10-29 09:43:16 +00:00
Mike Auty 0e596c2112 Windows: Minor additions based on the framework bump 2020-10-29 09:43:16 +00:00
Mike Auty 5e8788bb2d Windows: Fix an issue from the rebase 2020-10-29 09:43:16 +00:00
Mike Auty 95d3de9317 Windows: Convert psscan to the new file interface 2020-10-29 09:43:16 +00:00
Mike Auty 29cb430a72 Codebase: Apply yapf clean-up across the codebase 2020-10-29 09:43:16 +00:00
Mike Auty f58c115727 Windows: Fix up rebase issues 2020-10-29 09:43:16 +00:00
Mike Auty 375fc64773 Windows: Ensure the appropriate versions are correct 2020-10-29 09:43:16 +00:00
Mike Auty d554ae0218 Windows: Resolve file_handler type confusion 2020-10-29 09:43:16 +00:00
Mike Auty eaa0d2cd9d Windows: Tweak temporary filename 2020-10-29 09:43:16 +00:00
Mike Auty 13ad8efb52 Windows: Include direct access CLI file output 2020-10-29 09:43:16 +00:00
Mike Auty c44074c685 Windows: Fix pslist copypasta typo 2020-10-29 09:43:16 +00:00
Mike Auty 616f7e5d96 Windows: Fix up modules dumping 2020-10-29 09:43:16 +00:00