 Mike Auty
|
20dbe41eee
|
Development: Improve scripts for operating over Mac KDK
|
2020-06-10 19:49:45 +01:00 |
|
|
Mike Auty
|
975fa36610
|
Development: Add the ability to keep downloaded/extracted files
|
2020-06-10 00:53:52 +01:00 |
|
|
Mike Auty
|
874ec2e410
|
Development: Improve extract_kernel for the Mac KDK
|
2020-05-30 01:53:18 +01:00 |
|
|
Mike Auty
|
84e9b92d71
|
Development: Allow for debian packages in stock converter.
|
2020-05-25 23:44:43 +01:00 |
|
|
Mike Auty
|
27660d62ee
|
Development: Add in fedora kernel locations.
|
2020-05-25 02:04:43 +01:00 |
|
|
Mike Auty
|
48d3fb8f98
|
Development: Add in simple script to create centos ISF files
|
2020-05-24 21:56:28 +01:00 |
|
|
cometandikelos
|
beed68b8bf
|
update
|
2020-01-27 23:31:05 +00:00 |
|
|
Mike Auty
|
acc74af06f
|
pdbparse-to-json: Fix missing HRESULT type.
|
2019-10-31 23:04:37 +00:00 |
|
|
Mike Auty
|
72567e1c50
|
Yapf-0.28.0 rerun across the whole codebase.
|
2019-09-21 21:08:23 +01:00 |
|
|
Mike Auty
|
39fa9057ff
|
Remove errant scan_kernel from svcscan for rekall.
|
2019-08-11 23:32:34 +01:00 |
|
|
Mike Auty
|
75f386784a
|
Clean up development directory.
|
2019-08-11 17:33:53 +01:00 |
|
|
Mike Auty
|
0b71c1130f
|
Add in the image-hash to make results easier to match up.
|
2019-08-11 17:19:59 +01:00 |
|
|
Mike Auty
|
40d04ed1ff
|
Improve comparison titles, store stderr and output up until timeout.
|
2019-08-11 11:33:42 +01:00 |
|
|
Mike Auty
|
cdc19ad5fa
|
Add in 5 minute timeout for comparison tests.
|
2019-08-10 18:58:47 +01:00 |
|
|
Mike Auty
|
6f7dc1a75e
|
Add in the scan_kernel parameter for rekall to offer a fair comparison.
|
2019-08-08 23:20:59 +01:00 |
|
|
Mike Auty
|
6c23968a11
|
Add in support for choosing specific frameworks to test.
|
2019-08-06 13:32:03 +01:00 |
|
|
Mike Auty
|
f8587a08f2
|
Refactor and add support for testing rekall.
|
2019-08-05 01:20:24 +01:00 |
|
|
Mike Auty
|
d1227220b5
|
Add in additional plugins and pypy support.
|
2019-07-22 23:49:43 +01:00 |
|
|
Mike Auty
|
8e6cba022b
|
Add in more debugging information to the schema validator development script.
|
2019-07-10 14:09:59 +01:00 |
|
|
Mike Auty
|
272224a1b0
|
Refactor all references to Context.memory to Context.layers.
|
2019-07-07 17:42:51 +01:00 |
|
|
Mike Auty
|
84a1307c93
|
More minor typing fixes.
|
2019-05-11 23:10:39 +01:00 |
|
|
Mike Auty
|
4cfde031f6
|
Additional typing fixes.
|
2019-05-11 22:57:06 +01:00 |
|
|
Mike Auty
|
db480bb1b8
|
Fix up minor typing issue.
|
2019-05-05 16:00:26 +01:00 |
|
|
Mike Auty
|
573dd88885
|
Add some typing information and better error checking in pdbconv.
|
2019-05-05 15:51:47 +01:00 |
|
|
Mike Auty
|
287ed2be94
|
Fix up the logging messages.
|
2019-04-28 14:00:36 +01:00 |
|
|
Mike Auty
|
d89ade4e02
|
Remove requests dependency.
It turns out the MS servers don't require a specific header anymore, so
we can use the built in urllib.
|
2019-04-28 13:56:54 +01:00 |
|
|
Mike Auty
|
4959bb93b1
|
Don't write empty temporary files when there's a 404.
|
2019-04-27 22:50:02 +01:00 |
|
|
Mike Auty
|
5d380d666f
|
Make sure we convert names for pointers.
|
2019-04-27 22:25:41 +01:00 |
|
|
Mike Auty
|
08e22e9bee
|
Fix up some terrible code where we caught all exceptions.
|
2019-04-27 22:19:55 +01:00 |
|
|
Mike Auty
|
a99a40b691
|
Use base-types to define pointer types.
|
2019-04-27 22:16:03 +01:00 |
|
|
Mike Auty
|
67d0c18e8a
|
Add in missing types to pdbconv.
|
2019-04-27 22:09:50 +01:00 |
|
|
Mike Auty
|
ca46f090c2
|
Fix up pdbparse GUID parsing to use Bytes.
|
2019-04-27 22:02:02 +01:00 |
|
|
Mike Auty
|
470d3906dc
|
Improve PDB parsing to include symbol undecoration.
|
2019-04-27 21:05:55 +01:00 |
|
|
Mike Auty
|
60144c44d3
|
Add in base-type generation for pdbconv.py.
|
2019-04-23 22:28:29 +01:00 |
|
|
Mike Auty
|
93ddb9596b
|
Add in base-type generator.
|
2019-04-23 21:37:51 +01:00 |
|
|
Mike Auty
|
c229cf4db2
|
Fix schema issues with pdbconv and a couple small issues.
|
2019-04-23 00:15:49 +01:00 |
|
|
Mike Auty
|
a1f7d1a1de
|
Add in missing import.
|
2019-04-22 23:29:25 +01:00 |
|
|
Mike Auty
|
717f67fd1a
|
Clean up after downloading a PDB and support additional determining of size.
|
2019-04-22 21:09:17 +01:00 |
|
|
Mike Auty
|
d9d3a29b08
|
Remove llvm2json since pdbconv now exists.
|
2019-04-22 20:50:36 +01:00 |
|
|
Mike Auty
|
c07c4f5625
|
Add in pdb retreival and argparse support.
|
2019-04-22 20:49:30 +01:00 |
|
|
Mike Auty
|
75fb8aa301
|
Add in GUID production to pdbconv.
|
2019-04-22 14:41:08 +01:00 |
|
|
Mike Auty
|
81d5fdd58d
|
Add in some missing types.
|
2019-04-22 13:51:23 +01:00 |
|
|
Mike Auty
|
1f0947d7e1
|
Add in pdbconv script to completely generate the JSON from a PDB file using pdbparse.
|
2019-04-22 01:45:00 +01:00 |
|
|
Mike Auty
|
f1bbba1048
|
Make the comparison output quiet and ignore the volatility script name.
|
2019-03-15 14:43:15 +00:00 |
|
|
Mike Auty
|
d15dd469b5
|
Add in a volatility3 vs volatility2 test-rig.
|
2019-03-10 12:35:33 +00:00 |
|
|
Mike Auty
|
784336bb6e
|
Add in mac KDK generate_json script.
|
2019-03-03 01:12:07 +00:00 |
|
|
Mike Auty
|
1e9205a75f
|
Add in mac KDK dmg kernel extraction script.
|
2019-03-01 01:40:19 +00:00 |
|
|
Mike Auty
|
26ae324050
|
Add in attempt at name demangling for symbols.
|
2019-02-27 11:26:24 +00:00 |
|
|
Mike Auty
|
d8413efc1d
|
Add in further ignoring of the 0xf7 unicode character.
|
2019-02-25 22:51:41 +00:00 |
|
|
Mike Auty
|
4c2a29ae01
|
Convert to ruamel.yaml and allow \x7f characters, since llvm sometimes outputs them.
|
2019-01-27 18:20:59 +00:00 |
|