|
8090d72149
|
Update volatility3/framework/plugins/renderers/parquet_renderer.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-09-15 09:32:10 +02:00 |
|
|
|
4af48ae3b0
|
Update volatility3/framework/plugins/renderers/parquet_renderer.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-09-15 09:31:34 +02:00 |
|
|
|
4c7a9b517f
|
Update volatility3/framework/plugins/renderers/parquet_renderer.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-09-15 09:31:28 +02:00 |
|
|
|
86fe4485f0
|
Update volatility3/framework/plugins/renderers/parquet_renderer.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-09-15 09:31:20 +02:00 |
|
|
Kyrre-Wahl-Kongsgard
|
d21a81d8c3
|
fix: update type hints to support Python 3.8
|
2025-09-05 06:55:00 +02:00 |
|
|
Kyrre-Wahl-Kongsgard
|
3c830e6e67
|
black & ruff
|
2025-08-06 15:43:46 +02:00 |
|
|
Kyrre-Wahl-Kongsgard
|
eb7daa95a0
|
flatten tree output
|
2025-08-06 15:38:09 +02:00 |
|
|
Kyrre-Wahl-Kongsgard
|
533b305afb
|
Added tests for the Parquet and Arrow renderers
|
2025-08-02 18:07:05 +02:00 |
|
|
Kyrre-Wahl-Kongsgard
|
11b312383c
|
fix: update data type mappings for format_hints.Bin and format_hints.Hex to pa.uint64
|
2025-07-22 10:09:55 +02:00 |
|
|
Kyrre-Wahl-Kongsgard
|
6437148dc8
|
remove old parquet renderer
|
2025-07-21 23:47:24 +02:00 |
|
|
Kyrre-Wahl-Kongsgard
|
e7c1126b05
|
moved the arrow/parquet renderers to a subdir for renderers
|
2025-07-21 23:46:14 +02:00 |
|
|
Kyrre-Wahl-Kongsgard
|
72422d0db9
|
fix bug: hadn't properly renamed the write_data method name
|
2025-07-21 13:38:54 +02:00 |
|
|
Kyrre-Wahl-Kongsgard
|
0f32bec263
|
restore orginal text_renderer
|
2025-07-14 14:20:37 +02:00 |
|
|
Kyrre-Wahl-Kongsgard
|
066076b4d8
|
black formatting
|
2025-07-14 14:10:31 +02:00 |
|
|
Kyrre-Wahl-Kongsgard
|
8479fa1c13
|
moved renderer parsing to after the plugins are imported
|
2025-07-14 14:07:44 +02:00 |
|
|
Kyrre-Wahl-Kongsgard
|
d3a6b030b7
|
moved arrow/parquet parsers to it's own file and reverted changes
|
2025-07-14 13:38:35 +02:00 |
|
|
Kyrre-Wahl-Kongsgard
|
78d56534c0
|
fix: handle layerdata to pyarrow conversion
|
2025-06-28 12:16:36 +02:00 |
|
|
Kyrre-Wahl-Kongsgard
|
0389596987
|
Fix: Avoid import-time errors if pyarrow is missing
- Use string type annotations for pa.* types in Arrow/Parquet renderers.
- Ensure pyarrow dependency is checked only in __init__.
|
2025-06-28 11:46:13 +02:00 |
|
|
kyrre
|
1c7856212f
|
linting
|
2025-06-27 17:01:08 +02:00 |
|
|
kyrre
|
a0b00766f8
|
formatting with ruff
|
2025-06-27 16:58:35 +02:00 |
|
|
kyrre
|
50767ffb8d
|
add arrow and parquet renderers
|
2025-06-27 16:33:28 +02:00 |
|
|
ikelosandGitHub
|
308a4668b7
|
Merge pull request #1829 from SolitudePy/regexscan
Regexscan fixes
|
2025-06-22 23:10:38 +01:00 |
|
|
SolitudePy
|
c270cf4b15
|
RegexScan: parameterize _generator
|
2025-06-12 20:09:28 +03:00 |
|
|
ikelosandGitHub
|
f5feee842d
|
Merge pull request #1841 from SolitudePy/check_creds_malware
Malware categorization: linux.check_creds
|
2025-06-12 08:05:01 +01:00 |
|
|
ikelosandGitHub
|
470c53c5f7
|
Merge branch 'develop' into check_creds_malware
|
2025-06-11 22:21:59 +01:00 |
|
|
ikelosandGitHub
|
63019c0988
|
Merge pull request #1833 from SolitudePy/psxview_malware
Malware categorization: windows.psxview
|
2025-06-11 22:18:32 +01:00 |
|
|
SolitudePy
|
742b0634b9
|
readjust _run to contain less code & removal of redundant code
|
2025-06-11 19:30:29 +03:00 |
|
|
ikelosandGitHub
|
76db04c494
|
Merge pull request #1807 from volatilityfoundation/bugfix/windows_thrdscan_tuple_unpacking
Windows Thrdscan: Fix broken tuple unpacking
|
2025-06-11 14:06:43 +01:00 |
|
|
ikelosandGitHub
|
58f441186c
|
Merge pull request #1850 from SolitudePy/malware_plugins_category
Malware categorization: linux.tty_check, linux.netfilter, linux.modxview
|
2025-06-10 21:20:12 +01:00 |
|
|
ikelosandGitHub
|
43ed10a4f8
|
Merge pull request #1846 from SolitudePy/linux_malware_plugins
Malware categorization: linux.malfind & linux.keyboard_notifiers
|
2025-06-10 21:07:42 +01:00 |
|
|
ikelosandGitHub
|
58e41d754a
|
Merge pull request #1845 from SolitudePy/categorize_linux_malware
Malware categorization: linux.check_afinfo & linux.hidden_modules
|
2025-06-10 21:05:41 +01:00 |
|
|
ikelosandGitHub
|
9596893f1b
|
Merge pull request #1844 from SolitudePy/check_syscall_malware
Malware categorization: linux.check_syscall
|
2025-06-10 21:02:34 +01:00 |
|
|
ikelosandGitHub
|
e06910c763
|
Merge pull request #1843 from SolitudePy/check_modules_malware
Malware categorization: linux.check_modules
|
2025-06-10 21:00:02 +01:00 |
|
|
ikelosandGitHub
|
c62d77e4e2
|
Merge pull request #1842 from SolitudePy/check_idt_malware
Malware categorization: linux.check_idt
|
2025-06-10 20:58:04 +01:00 |
|
|
ikelosandGitHub
|
f2f83f5ce1
|
Merge pull request #1838 from SolitudePy/unhooked_syscalls_malware
Malware categorization: windows.unhooked_system_calls
|
2025-06-10 20:54:33 +01:00 |
|
|
SolitudePy
|
8040c049e0
|
Tests: change class name for tty_check
|
2025-06-10 20:30:05 +03:00 |
|
|
SolitudePy
|
e3877f68ec
|
Plugins: categorize linux.tty_check as a malware plugin
|
2025-06-10 19:37:57 +03:00 |
|
|
SolitudePy
|
77801e4cb0
|
Plugins: categorize linux.netfilter as a malware plugin
|
2025-06-10 19:22:12 +03:00 |
|
|
SolitudePy
|
6c35bc3fa0
|
Plugins: categorize linux.modxview as a malware plugin
|
2025-06-10 19:12:09 +03:00 |
|
|
SolitudePy
|
a06d59bc52
|
Plugins: categorize linux.malfind as a malware plugin
|
2025-06-07 22:58:46 +03:00 |
|
|
SolitudePy
|
faf7d781be
|
Plugins: categorize linux.keyboard_notifiers as a malware plugin
|
2025-06-07 22:55:29 +03:00 |
|
|
SolitudePy
|
f9941b5b6e
|
black
|
2025-06-07 22:00:03 +03:00 |
|
|
SolitudePy
|
c71fd30c8a
|
shortcut class name
|
2025-06-07 21:58:43 +03:00 |
|
|
SolitudePy
|
21d66839fe
|
use class name with module name?
|
2025-06-07 21:56:36 +03:00 |
|
|
SolitudePy
|
35c4e9f50b
|
Plugins: change class name to original
|
2025-06-07 21:52:22 +03:00 |
|
|
ikelosandGitHub
|
ebd6c8719a
|
Merge pull request #1840 from SolitudePy/drivermodule_malware
Malware categorization: windows.drivermodule
|
2025-06-07 18:09:57 +01:00 |
|
|
SolitudePy
|
5144f26a8e
|
CI
|
2025-06-07 19:58:12 +03:00 |
|
|
SolitudePy
|
1d2b78976a
|
Plugins: categorize linux.hidden_modules as a malware plugin
|
2025-06-07 19:54:44 +03:00 |
|
|
SolitudePy
|
962665b412
|
Plugins: categorize linux.check_afinfo as a malware plugin + test fix
|
2025-06-07 19:44:50 +03:00 |
|
|
SolitudePy
|
70514396b3
|
linux.malware.check_syscall - fix test
|
2025-06-07 19:35:26 +03:00 |
|