Mike Auty
970cfc3cd8
Fix up pdbscan to avoid running if not needed.
2018-02-10 22:44:44 +00:00
Mike Auty
cd8f6876ff
Add in LayerListRequirement type.
2018-02-10 22:42:59 +00:00
Mike Auty
24be045266
Minor fix ups with typing and exceptions.
2018-02-10 22:42:31 +00:00
Mike Auty
7cb0330d04
Fix and correctly type ListRequirements.
2018-02-10 22:41:39 +00:00
Mike Auty
5a85f88636
Improve construction automagic (it now continues recursing after errors).
2018-02-10 22:38:50 +00:00
Mike Auty
4e7fc078ee
Tidy up the requirements namespace.
2018-02-10 13:45:17 +00:00
Mike Auty
cbe75dadf7
Add in Intel32e and improve IntelPAE.
2018-02-10 00:03:13 +00:00
Mike Auty
8b75c458ba
Fix up the calculations and filtering for pagefile offsets.
2018-02-09 01:19:22 +00:00
Mike Auty
a57dbc3638
Merge remote-tracking branch 'origin/master' into local/swap-support
2018-02-07 20:16:38 +00:00
Mike Auty
152dc9a210
Error check for when we can't find the file_symbol_url.
2018-02-07 19:56:02 +00:00
Mike Auty
8344497e85
Merge branch 'master' into local/swap-support
2018-02-01 00:51:53 +00:00
Mike Auty
3e3a3a85ba
Slightly clean-up magic import errors.
2018-01-30 15:22:50 +00:00
Mike Auty
08531c5859
Gracefully handle non-addurlinfo classes from the opener.
2018-01-30 15:22:33 +00:00
Mike Auty
deb7da246b
Add in initial shot at PAE page entry handling.
2018-01-28 16:29:28 +00:00
Mike Auty
35be4c5a84
Add in more information to the paged exceptions.
2018-01-28 16:25:16 +00:00
Mike Auty
c203663f0b
Refactor requirements to support a list of swap layers.
2018-01-28 14:48:50 +00:00
Mike Auty
bf8173f9a9
Improve the loader in the face of the file/python-magic duplicate module naming.
2018-01-28 13:34:19 +00:00
Mike Auty
663cf3eff8
Just tidy up the multistring searchers slightly.
2018-01-25 11:27:59 +00:00
Mike Auty
ccd00afdb2
Add in new multistring scanner based on re
...
Unfortunately in tests it turned out re was faster than a python
implementation of Wu-Manber. The Wu-Manber code has been left (because
why not) but it's not really advantageous over the re builtin since
it's compiled in C.
2018-01-24 20:22:00 +00:00
Mike Auty
4bb1161490
Make WuManber a callable program.
2017-12-24 12:53:50 +00:00
Mike Auty
69ec16ded3
Fix up the signatures for the overloaded __getitem__ method.
2017-12-13 23:21:31 +00:00
Mike Auty
31b69671cb
Fix up inheritance and type-annotations (plus pylint/pycharm formatting).
2017-12-13 23:16:06 +00:00
Mike Auty
3cb48c19e8
Remove the errant urllib3 import in favour of native python.
2017-12-13 20:48:52 +00:00
Mike Auty
e362c50460
Ensure we don't run through signatures when we've found one that gives a layer.
2017-12-13 20:48:52 +00:00
Mike Auty
265182b66b
Fix bug that massively broken the wintelstacker, slowing everything else down.
2017-12-13 20:48:52 +00:00
Mike Auty
e23bb65162
Add in better logging.
2017-12-13 20:48:52 +00:00
Mike Auty
942de5f166
Finish adding type-annotations thoughout the code.
2017-12-13 20:48:52 +00:00
Mike Auty
ee12b81f4a
Add in type-annotations for renderers and start on symbols.
2017-12-13 20:48:52 +00:00
Mike Auty
62b986d2e9
Remove code from plugins, since plugins aren't callable anymore.
2017-12-13 20:48:52 +00:00
Mike Auty
f50a0b715d
Add in object type-annotations.
2017-12-13 20:48:52 +00:00
Mike Auty
1dcad91126
Add in type annotations for scanners.
2017-12-13 20:48:52 +00:00
Mike Auty
ac12098317
Add type-annotations for reamining layer files.
2017-12-13 20:48:52 +00:00
Mike Auty
f40fae197d
Convert to python3.5 syntax (no local type-annotations).
2017-12-13 20:48:52 +00:00
Mike Auty
736cbff1b6
Start on the layers folder (with a few small fixes).
2017-12-13 20:48:52 +00:00
Mike Auty
6c52e04489
Fix up exception in DTBtests.
...
The exception was being caused by reading too little data from the
stream. We now skip it if that happens.
2017-12-13 20:48:52 +00:00
Mike Auty
de3b8cf76b
Fix exception being thrown in the middle of Nlpdtbfinder for layers without validity details.
2017-12-13 20:48:52 +00:00
Mike Auty
21b4506b7b
Add in type-annotations for the remaining interfaces.
2017-12-13 20:48:52 +00:00
Mike Auty
50b60c0df6
Add in more interfaces (and fix additional errors now that type information is available).
2017-12-13 20:48:52 +00:00
Mike Auty
5536412a5e
Add in initial work at interface type-annotations.
2017-12-13 20:48:52 +00:00
Mike Auty
2cc456e847
Finish off the automagic directory type annotations.
2017-12-13 20:48:52 +00:00
Mike Auty
d7d13eb19c
Add type annotations to most of the automagic files.
2017-12-13 20:48:52 +00:00
Mike Auty
d30daa5fd3
Bump to version 3.6 to ensure support for all type hinding (including local variables).
2017-12-13 20:48:52 +00:00
iMHLv2
fad5a238d5
add the windows handles plugin
2017-12-13 20:43:17 +00:00
Mike Auty
0ecf68af0f
Support table remapping for referenced symbol names.
2017-11-27 14:39:46 +00:00
Mike Auty
0ad6294662
Reuse the cache if we're within the same ResourceAccessor.
...
This effectively means that the FileTranslationLayer will reuse the
cached file even with multiple opens, but rerunning python, or starting
a new context (with a new FileTranslationLayer but on the same URL) will
cause a redownload whether necessary or not. This ensures that running
volatility as an engine (inside a long lived python session) will not
prevent a file being checked again later.
Other caching mechanisms (such as last-modified) should be used to
determine if the cached file is still valid.
Note this may cause issues if plugins run concurrently.
2017-11-25 14:00:16 +00:00
Mike Auty
7a40d8128c
Add in support for the smb protocol when loading files.
2017-11-24 22:28:14 +00:00
Mike Auty
917829d87f
Reduce the number of times a ResourceAccessor is created, and use all handlers.
2017-11-24 22:27:36 +00:00
Mike Auty
30059766b6
Plug the WindowsMixin into the automagic.
2017-11-24 12:02:34 +00:00
Mike Auty
e43ca15630
Improve the logging for scan failures.
2017-11-24 00:39:28 +00:00
Mike Auty
2d570fdb62
Fix up the broken get_symbols_by_location call.
2017-11-23 01:36:16 +00:00
Mike Auty