WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-08-22 14:32:21 +02:00
Code Issues Packages Projects Releases Wiki Activity
2,537 Commits 80 Branches 17 Tags
754cfcd7acdd613f8b7fabf3c4ee70ff7cc55cc3
Commit Graph
480 Commits
Author SHA1 Message Date
cecioandikelos c9c37a9b35 OS check reworked as suggested by @iMHLv2 and @ikelos 2020-12-02 14:23:12 +00:00
cecioandikelos 1cf625fc89 fix: the bounce from physical to virtual process is required only for OS < Win10. 
Added the check in the "dump" option
 2020-12-02 14:23:12 +00:00
AsafEitaniandikelos 4ec006e606 Fix 'maxsize variable doing nothing' bug 
In one of the earlier commits the varible was erased from being passed to vaddump - that corrects it.
 2020-11-18 19:56:30 +00:00
Mike Auty 30de81795c Windows: Update requirements to pslist 2.0.0 2020-11-16 09:41:42 +00:00
Mike Auty 4a8b4d1706 Plugins: Bump remaining plugins to framework require 2.0.0 2020-11-15 16:53:03 +00:00
Mike Auty 49aeaf2a49 Plugins: Resolve remaining LGTM recommendations 2020-11-09 00:03:07 +00:00
Mike Auty 0a655d76a8 Core: Fix LGTM recommendations 
This is mostly unused imports and unused variables.
 2020-11-04 22:41:39 +00:00
Mike Auty 7c75018fc4 Core: Fix Warnings from LGTM 2020-11-04 21:02:36 +00:00
Mike Auty a9c742b3a2 Codebase: Fix == None (from lgtm audit) 2020-11-04 14:32:42 +00:00
Mike Auty 1d8081e409 Plugins: Fix exception thrown in handles 
Fixes #368
 2020-11-01 14:50:48 +00:00
Mike Auty 47ff37b07b Plugins: Make layerwiter more configurable 
This adds support for dumping multiple layers at once, listing available
layers and selects the highest non-mapped layer.  Mapping is specified
in the metadata and currently is only applied to intel layers.
 2020-10-31 23:30:22 +00:00
Mike Auty dbd00b9759 Plugins: Fix paths read by isfinfo 2020-10-31 21:26:26 +00:00
Mike Auty 31ff6ce482 Plugins: Bump isfinfo framework version 2020-10-30 16:11:35 +00:00
Mike Auty c622ee4897 Plugins: Bump framework version for banners 2020-10-30 14:59:01 +00:00
Mike Auty ea629591ef Plugins: Make open method clearer to use 
This highlights that the FileHandler class can also be seen as a method
similar to open, and it removes unnecessary context managers, allowing
plugins to close files as they wish (they must, however, remember to
close the file for it to be committed).
 2020-10-29 09:43:16 +00:00
Mike Auty 0e596c2112 Windows: Minor additions based on the framework bump 2020-10-29 09:43:16 +00:00
Mike Auty 5e8788bb2d Windows: Fix an issue from the rebase 2020-10-29 09:43:16 +00:00
Mike Auty 95d3de9317 Windows: Convert psscan to the new file interface 2020-10-29 09:43:16 +00:00
Mike Auty 29cb430a72 Codebase: Apply yapf clean-up across the codebase 2020-10-29 09:43:16 +00:00
Mike Auty f58c115727 Windows: Fix up rebase issues 2020-10-29 09:43:16 +00:00
Mike Auty 375fc64773 Windows: Ensure the appropriate versions are correct 2020-10-29 09:43:16 +00:00
Mike Auty d554ae0218 Windows: Resolve file_handler type confusion 2020-10-29 09:43:16 +00:00
Mike Auty c44074c685 Windows: Fix pslist copypasta typo 2020-10-29 09:43:16 +00:00
Mike Auty 616f7e5d96 Windows: Fix up modules dumping 2020-10-29 09:43:16 +00:00
Mike Auty b703210024 Windows: Refactor names of FileInterfaces 2020-10-29 09:43:16 +00:00
Mike Auty 3bd462720b Windows: Minor typos with the last patch 2020-10-29 09:43:16 +00:00
Mike Auty 56266f97de Windows: Fix up rebased malfind and vadinfo 2020-10-29 09:43:16 +00:00
Mike Auty 032c6b0ac7 Windows: Make more use of plugin.open 2020-10-29 09:43:16 +00:00
Mike Auty 7cadbf32d4 Windows: Update dumping code from commit to close 2020-10-29 09:43:16 +00:00
Mike Auty e8fb8c929c Plugins: Introduce FileHandlerInterface 2020-10-29 09:43:16 +00:00
Mike Auty bbc2ac0018 Plugins: Bump required_framework_version and yapf 2020-10-29 09:43:16 +00:00
Mike Auty 4400c43903 Codebase: Yapf across the whole codebase 2020-10-27 01:06:24 +00:00
Andrew Caseandikelos 0f60250e4f Add missing requirements specification 2020-10-24 23:12:57 +01:00
Andrew Caseandikelos b5d50c055b Add the Mac kevents plugin 2020-10-24 23:12:57 +01:00
Andrew Caseandikelos 1c709aa09c Add mac_vfsevents 2020-10-24 23:12:10 +01:00
Andrew Caseandikelos 13ad03f49e Add plugins for enumerate of mac kauth listeners and scopes 2020-10-24 23:11:37 +01:00
iMHLv2andikelos 0d4075355a refs #332 catch invalid address exceptions when reading DllBase 2020-10-07 23:16:14 +01:00
Mike Auty dc8bec199f Windows: Minor formatting and typing improvements 2020-09-24 01:01:51 +01:00
iMHLv2andikelos 8baf13d3e3 refs #333 catch InvalidAddressException instead of AttributeError when accessing DLL timestamps 2020-09-23 19:27:37 +01:00
memoryforensics1andikelos 9048c04aa4 envars plugin 
parse environment variables
 2020-09-22 20:03:19 +01:00
Mike Auty c436882f4d Windows: Fix up the sids JSON slightly 2020-09-22 19:49:34 +01:00
memoryforensics1andikelos 0f34c82b6c Update privileges.py 2020-09-22 19:49:01 +01:00
memoryforensics1andikelos 004fc1480b Update privileges.py 2020-09-22 19:49:01 +01:00
memoryforensics1andikelos 15bce1ce72 privileges plugin 
added privileges plugin
 2020-09-22 19:49:01 +01:00
Mike Auty f3e77ad645 Windows: Minor typos and JSON name change in sids plugins 2020-09-22 19:38:36 +01:00
memoryforensics1andikelos 31080ad416 fix 2020-09-22 18:21:58 +01:00
memoryforensics1andikelos a5d5ff2bda getsids getservicesids 2020-09-22 18:21:58 +01:00
Mike Auty 77312e193a Plugins: Update the banner plugin filename. 2020-09-22 00:25:20 +01:00
Mike Auty 0ac26d40a1 Plugins: Support mac banners as well 2020-09-22 00:21:13 +01:00
Mike Auty 0a57a49572 Plugins: Add LinuxBanners plugin 2020-09-22 00:21:13 +01:00