cecio and ikelos
c9c37a9b35
OS check reworked as suggested by @iMHLv2 and @ikelos
2020-12-02 14:23:12 +00:00
cecio and ikelos
1cf625fc89
fix: the bounce from physical to virtual process is required only for OS < Win10.
...
Added the check in the "dump" option
2020-12-02 14:23:12 +00:00
Mike Auty
ea629591ef
Plugins: Make open method clearer to use
...
This highlights that the FileHandler class can also be seen as a method
similar to open, and it removes unnecessary context managers, allowing
plugins to close files as they wish (they must, however, remember to
close the file for it to be committed).
2020-10-29 09:43:16 +00:00
Mike Auty
5e8788bb2d
Windows: Fix an issue from the rebase
2020-10-29 09:43:16 +00:00
Mike Auty
95d3de9317
Windows: Convert psscan to the new file interface
2020-10-29 09:43:16 +00:00
Mike Auty
bbc2ac0018
Plugins: Bump required_framework_version and yapf
2020-10-29 09:43:16 +00:00
cecio and ikelos
61d4ee3c0e
some mods in comments
2020-09-08 22:36:09 +01:00
cecio and ikelos
9c5dcda6e9
"pe" imported directly and little modification to comment
2020-09-08 22:36:09 +01:00
cecio and ikelos
d060a5cbdb
dump of processes extracted by psscan (Issue #318 )
2020-09-08 22:36:09 +01:00
AsafEitani and ikelos
29e2f4485f
Added dlllist and netscan to timline
2020-08-31 17:05:20 +01:00
Mike Auty
9c74f0bc88
Windows: Clear-up some extra whitespace in certain plugins
2020-08-31 13:55:48 +01:00
cesare and ikelos
ffbe4e0d1a
added pid filter to psscan.
2020-08-31 13:52:04 +01:00
cesare and ikelos
0c90fbaae6
added to psscan the pid/dump option
2020-08-31 13:52:04 +01:00
Mike Auty
9a17beb77f
Ensure consistency of importing interfaces.
2019-10-02 01:18:46 +01:00
Mike Auty
e0b9d72c84
Update the license URL and LICENSE.txt
2019-09-25 21:44:05 +01:00
Mike Auty
72567e1c50
Yapf-0.28.0 rerun across the whole codebase.
2019-09-21 21:08:23 +01:00
Mike Auty
e922cef316
Improve docstrings for all plugins, and reformat all docstrings.
2019-09-07 22:59:54 +01:00
Mike Auty
9cde94bceb
Change the license blurb on all files.
2019-08-27 23:11:00 +01:00
Mike Auty
7904be3fd2
Yapf reformat all files.
2019-03-04 22:11:44 +00:00
Analyst
31d17fa19e
Revert "fix psscan and mutantscan imports now that core plugins are under framework"
...
This reverts commit 99f9a989cb .
2019-03-04 11:57:23 -06:00
Analyst
901a38d40b
pool scanner update: we only ask for specific object types, so no need to filter the results anymore
2019-03-04 11:00:42 -06:00
Analyst
99f9a989cb
fix psscan and mutantscan imports now that core plugins are under framework
2019-03-04 10:30:26 -06:00
Mike Auty
4e8c8a7232
Fix issues with SymbolRequirement refactoring.
2019-02-11 22:30:22 +00:00
Michael Ligh and ikelos
12fe297c80
builtin_constraints() returns all constraints by default
2019-02-07 09:08:32 +00:00
Michael Ligh and ikelos
33f3f4372c
parameterize generate_pool_scan() - let plugins choose which contraints to use
...
plugins can choose from a list of built-ins or they can create their own and pass them into generate_pool_scan()
2019-02-07 09:08:32 +00:00
Michael Ligh and ikelos
c1341e6278
refactor poolscanner to be leveraged by other plugins. add psscan
2019-02-07 09:08:32 +00:00