Mike Auty
4a8b4d1706
Plugins: Bump remaining plugins to framework require 2.0.0
2020-11-15 16:53:03 +00:00
Mike Auty
0a655d76a8
Core: Fix LGTM recommendations
...
This is mostly unused imports and unused variables.
2020-11-04 22:41:39 +00:00
Mike Auty
29cb430a72
Codebase: Apply yapf clean-up across the codebase
2020-10-29 09:43:16 +00:00
Mike Auty
bbc2ac0018
Plugins: Bump required_framework_version and yapf
2020-10-29 09:43:16 +00:00
Mike Auty
4400c43903
Codebase: Yapf across the whole codebase
2020-10-27 01:06:24 +00:00
Andrew Case and ikelos
0f60250e4f
Add missing requirements specification
2020-10-24 23:12:57 +01:00
Andrew Case and ikelos
b5d50c055b
Add the Mac kevents plugin
2020-10-24 23:12:57 +01:00
Andrew Case and ikelos
1c709aa09c
Add mac_vfsevents
2020-10-24 23:12:10 +01:00
Andrew Case and ikelos
13ad03f49e
Add plugins for enumerate of mac kauth listeners and scopes
2020-10-24 23:11:37 +01:00
Andrew Case and ikelos
e58e55b433
Update code for better variable names and minor version bump
2020-09-16 17:35:49 +01:00
Andrew Case and ikelos
afe39eee1b
Add new method for safe walking of generic list heads. Convert pslist to use it.
2020-09-16 17:35:49 +01:00
Andrew Case and ikelos
5e53440b43
Add the socket filters plugin for OSX
2020-09-13 22:06:09 +01:00
Andrew Case and ikelos
40eafa03e6
Change bad copy/descriptions for Mac that say Linux
2020-09-11 01:37:56 +01:00
Andrew Case and ikelos
98d6844ac0
Address ikelos's review comments
2020-09-11 01:28:14 +01:00
Andrew Case and ikelos
6673d4774c
Add cached file listing plugin for Mac
2020-09-11 01:28:14 +01:00
Mike Auty
73f3c217bd
Mac/Linux: Remove unnecessary imports
2020-08-18 09:15:13 +01:00
Mike Auty
90d347714c
Mac: Correct patch ordering
2020-08-18 09:10:16 +01:00
Mike Auty
9b57d7a58c
Plugins: Version Mac/LinuxUtilities classes
2020-08-18 09:07:32 +01:00
Mike Auty
8e420cbe62
Core: Multiple typing fixes across the tree
2020-08-16 22:22:24 +01:00
Andrew Case and ikelos
5734562997
Add mac.mount plugin
2020-08-14 22:43:52 +01:00
Mike Auty
15da1f5253
Plugins: Update pidlist_pid_hash_table to a pslist method
2020-08-14 22:39:40 +01:00
Andrew Case and ikelos
b976a57920
add pslist_pid_hash_table
2020-08-14 22:39:40 +01:00
Mike Auty
833cfc5607
Plugins: Update the docstring for pslist_sessions code
2020-08-14 22:30:34 +01:00
Mike Auty
08b8564802
Plugins: Update pslist_sessions to be a different process lister
2020-08-14 22:30:34 +01:00
Andrew Case and ikelos
93e16a7151
add pslist_sessions plugin
2020-08-14 22:30:34 +01:00
Mike Auty
13e36ec58a
Core: Rerun yapf across the codebase.
2020-07-28 16:57:48 +01:00
Mike Auty
61563350b3
Linux/Mac: Refactor *nix Utilities classes
2020-07-28 11:15:16 +01:00
Mike Auty
667329e2fd
Mac: Fix pslist pid_filter function
2020-07-23 02:02:01 +01:00
Mike Auty
9295f41586
Plugins: Convert existing plugins over to use a list for PIDs
2020-07-23 02:02:01 +01:00
Mike Auty
a173f12fce
Plugins: Normalize InvalidAddress exception handling
2020-07-18 16:38:49 +01:00
Mike Auty
43ae291815
Plugins: Add back in the checks because the filter might trip them
2020-07-18 16:38:49 +01:00
Mike Auty
73ad2bcd4e
Plugins: Since procs have been instantiated, checks aren't needed
2020-07-18 16:38:49 +01:00
Mike Auty
d15b23aa19
Plugins: Fix pslist_method inconsistencies
2020-07-18 16:38:49 +01:00
Mike Auty
7673dd8d2d
Mac: Consolidate methods of listing processes
...
This also updates all other plugins that rely on process listing
and theoretically allows them to choose their preferred method of
process listing. At the moment, the default (first in the method list)
is chosen. An optional pslist_method StringRequirement can be added to
each plugin, but using the list in the requirements could break if the
pslist plugin is too old (ie, using the list would happen before the
PluginRequirement gets checked).
If this is a feature we want, it should be easy to add to all but
netstat, which does not parameterize the list of processes.
2020-07-18 16:38:49 +01:00
Andrew Case and ikelos
0ccb1f82e6
Change copyright year and plugin doc strings
2020-07-18 16:38:49 +01:00
Andrew Case and ikelos
4799e8551e
Add process listing through examination of the process group hash table
2020-07-18 16:38:49 +01:00
Mike Auty
888b432667
Mac: Fix an error decoding bad UTF-8 values
...
Closes #228 .
2020-06-28 01:07:16 +01:00
Mike Auty
0ffe318cb0
Project: Update copyright headers for files added in 2020.
2020-06-10 21:13:37 +01:00
Mike Auty
d3ba947a56
Mac: Fix case names of certain plugins
...
Closes #201 .
2020-06-10 21:02:16 +01:00
Mike Auty
863b9915c9
Automagic: Refactor mac aslr_finding
2020-06-10 19:39:20 +01:00
Mike Auty
2748ce32d8
Initial attempts at cloning a symbol table
2020-06-10 19:39:20 +01:00
Mike Auty
0c43beb42d
Core: Apply yapf across all files again.
2020-05-05 22:14:33 +01:00
Andrew Case and ikelos
719cd0d476
Move module gathering into generator
2020-04-08 18:17:34 +01:00
Andrew Case and ikelos
b42dfd614a
Add API for mapping kernel addresses to kernel symbols or a specific kext
2020-04-08 18:17:34 +01:00
Mike Auty
b8bc0f0ed6
mac.netstat: Fix up typing and interface imports
2020-03-12 19:53:51 +00:00
Andrew Case and ikelos
7d6d74bc91
Update order of arguments
2020-03-12 19:47:15 +00:00
Andrew Case and ikelos
722700d2dc
Add docstrings
2020-03-12 19:47:15 +00:00
Andrew Case and ikelos
7b21e83b07
Mac - convert socket gathering to class method and clean up associated code
2020-03-12 19:47:15 +00:00
Andrew Case and ikelos
5a99d35a9e
update timer code
2020-02-12 19:56:37 +00:00
Andrew Case and ikelos
29cc435b5e
update sysctl v2
2020-02-12 19:17:19 +00:00
Mike Auty