WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-08-17 20:35:40 +02:00
Code Issues Packages Projects Releases Wiki Activity
2,203 Commits 80 Branches 17 Tags
87ff6dd87c19a65e59847700525c7fc2efccdb4c
Commit Graph
2203 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael Lighandikelos 87ff6dd87c refs #200 raise ValueError if an object doesn't have a name 2020-07-01 20:51:22 +01:00
Mike Auty 944bf2174f Automagic: Split out the stacker code 2020-07-01 20:30:31 +01:00
Mike Auty 232fcbe499 Objects: Go back to the *much* quicker exception handling 2020-07-01 20:24:30 +01:00
Mike Auty 51c0b873cc Objects: Reduce duplicated code (thanks @atcuno) 2020-07-01 20:24:30 +01:00
Mike Auty f1613a78b3 Objects: Use contextlib instead of finally 2020-07-01 20:24:30 +01:00
Mike Auty 1cdcd8d811 Core: The has-valid-members interface bumps the version 2020-07-01 20:24:30 +01:00
Mike Auty 6f1001f290 Objects: Add in the ability to test for member validity 2020-07-01 20:24:30 +01:00
Mike Auty 826102c0b5 Logging: Fixes issue #241 2020-06-30 08:58:40 +01:00
Mike Auty 4b29cf1986 Objects: Fix incorrect pointer readability check 2020-06-28 19:32:37 +01:00
Mike Auty 888b432667 Mac: Fix an error decoding bad UTF-8 values 
Closes #228.
 2020-06-28 01:07:16 +01:00
Mike Auty ea20ae1c0c Docs: Add CLI manpage (and fix a CLI option) 2020-06-28 00:57:46 +01:00
Mike Auty 91d9d37c68 Docs: Document cross-layer communication 2020-06-27 23:52:54 +01:00
Mike Auty d28e573c18 Renderers: Fix python deprecation warnings 2020-06-27 18:34:43 +01:00
Mike Auty ac1d99677d ISF: Support deprecating versions 2020-06-27 18:33:30 +01:00
Mike Auty cd9a46ebd1 Resources: Ensure we close all file pointers 2020-06-27 18:29:51 +01:00
Hans P. Reiserandikelos cc6f4fbf9d print correct db/dd/.. offset: increment offset after printing, not before 2020-06-25 22:19:19 +01:00
Mike Auty cf988944b9 Linux: Correct the ASLR for pre-masking (KASLR is still incorrect) 2020-06-23 16:56:40 +01:00
Hanno Heinrichsandikelos deb2b78312 Clear symbol cache after ASLR computation on Linux. 2020-06-23 16:45:22 +01:00
Hanno Heinrichsandikelos 30226d2bdd Fix find_aslr() function invocation for Linux. 2020-06-23 16:10:05 +01:00
Mike Auty abb1f3d71c Renderers: Fix inaccurate old code 2020-06-22 19:26:37 +01:00
Mike Auty 99a8c69e75 Renderers: Support partial results during population 2020-06-22 19:26:37 +01:00
Mike Auty 16a8e3771b Objects: Make bool an int 
We can't inherit from bool, so __new__ can't return a bool, so
everything has be done with int.  However __bool__ is already
defined for int, so it should have no significant impact
(other than type() calls).

Fixes issue 232.
 2020-06-18 16:53:14 +01:00
Mike Auty 0ffe318cb0 Project: Update copyright headers for files added in 2020. 2020-06-10 21:13:37 +01:00
Mike Auty d3ba947a56 Mac: Fix case names of certain plugins 
Closes #201.
 2020-06-10 21:02:16 +01:00
Mike Auty c134cf6eca Timeliner: Improve the option name 2020-06-10 20:33:04 +01:00
Mike Auty 1fe9cbd51d timeliner: Add the bodyfile output requirement switch to the plugin 2020-06-10 20:33:04 +01:00
Mike Auty 32fb2364a1 Timeliner: Ensure blank lines aren't printed. 2020-06-10 20:33:04 +01:00
Mike Auty fc27efc252 Add in body-file output support. 2020-06-10 20:33:04 +01:00
Mike Auty 5921671b38 timeliner: Yield as soon as we have output 2020-06-10 20:33:04 +01:00
Mike Auty b9d0cf17e3 Fix the output of exceptions with timeliner. 2020-06-10 20:33:04 +01:00
Mike Auty 80e2117c94 Layers: QEMU add in slow warning 2020-06-10 20:22:35 +01:00
Mike Auty 2bf8247b62 Layers: Extend segments to include original size as well as mapped size. 2020-06-10 20:22:35 +01:00
Mike Auty d0d7ea84b9 Layers: Remove debugging statement 2020-06-10 20:22:35 +01:00
Mike Auty df644ef5b7 Layers: Improve QEMU format support 2020-06-10 20:22:35 +01:00
Mike Auty 880bd0a2e0 Layers: Qemu only record segment data for pc.ram 2020-06-10 20:22:35 +01:00
Mike Auty 6564f0a3a4 Layers: Add in initial qemu layer code 2020-06-10 20:22:35 +01:00
Mike Auty 20dbe41eee Development: Improve scripts for operating over Mac KDK 2020-06-10 19:49:45 +01:00
Mike Auty 1a00723cb0 Core: Drastically reduce the import logging 2020-06-10 19:47:48 +01:00
Mike Auty 4437c29790 Symbols: Ensure all formats support symbol_shift (thanks Andrew!) 2020-06-10 19:39:20 +01:00
Mike Auty ede5ba07aa Symbols: Apply symbol_masking option to IntermediateSymbolTables 2020-06-10 19:39:20 +01:00
Mike Auty 085ccc47e0 SymbolTableRequirement: Do a merry dance around ASLR shifts in automagic 2020-06-10 19:39:20 +01:00
Mike Auty d6741435ef SymbolTables: Clear out the clone method and tidy up inheritance 2020-06-10 19:39:20 +01:00
Mike Auty d11ffa1f23 SymbolTable: Remove the no longer necessary mask_symbol_table method 2020-06-10 19:39:20 +01:00
Mike Auty 573590878a SymbolTable: Rework symbol_shift so it's part of the config 2020-06-10 19:39:20 +01:00
Mike Auty ad8fa0e934 Automagic: Improve mask/shift documentation 2020-06-10 19:39:20 +01:00
Mike Auty a6cd344e22 Automagic: Refactor ASLR finding for all symbol_finder using OSes 2020-06-10 19:39:20 +01:00
Mike Auty 863b9915c9 Automagic: Refactor mac aslr_finding 2020-06-10 19:39:20 +01:00
Mike Auty 37f40ed184 Linux: Fix a rebase error 2020-06-10 19:39:20 +01:00
Mike Auty 204657648a Linux: Narrow in on a particular symbol table 2020-06-10 19:39:20 +01:00
Mike Auty 054b95c8ed Remove debugging statements 2020-06-10 19:39:20 +01:00