Mike Auty
9824538bd9
Numerous pycharm warnings resolved
...
This includes:
* Better ways of checking empty lists
* Not shadowing builtin functions like filter
* Preventing invalid slash warnings by marking strings as regexps
* Removing unnecessary brackets
* Lowercase variable names
* Adding/updating parameters in docstrings
* Removing unused code (lines not chunks)
* Change in not a member tests
* Changing some methods to static
* Shorting range membership checks
* Missing parameters
* Make some exception handlers more specific
* Don't define a lambda to a variable
* A few more instance checks to help type checkers
2018-12-16 13:21:06 +00:00
Mike Auty
29d41470a4
Mass reformat of typing imports
...
Relented on the strict import of direct objects/classes for the typing
module only. Typing module components can be directly imported because
it makes the code really painful to read and write otherwise.
This is still in-line with the python style guide adopted from Google at
http://google.github.io/styleguide/pyguide.html section 2.2.
2018-12-16 13:04:22 +00:00
Mike Auty
8c7cab163b
Minor fixes from the monkeytype run.
2018-12-13 23:49:24 +00:00
Mike Auty
dfe2f86fe2
Lots and lots of typing additions found by an initial monkeytype run.
2018-12-13 23:46:37 +00:00
Mike Auty
04c5007fbb
Fix minor issue with the conversion change.
2018-12-13 21:38:20 +00:00
Mike Auty
c0fcd15d4f
Minor changes to various checks to be more pythonic.
2018-12-13 21:07:25 +00:00
Mike Auty
a534ef216e
Pycharm reformatting.
2018-12-13 21:07:25 +00:00
Andrew Case and ikelos
03d41c3f79
Add mac psaux plugin
2018-12-13 21:07:25 +00:00
Andrew Case and ikelos
622c86f9ed
Add initial mac backend code, with broken DTB finding, along with the pslist plugin
2018-12-13 15:56:24 +00:00
Mike Auty
a16fb3bf7d
Don't break on validity tests.
2018-12-13 01:16:05 +00:00
Mike Auty
76264cee34
Catch invalid _OBJECT_HEADER objects.
2018-12-13 01:16:05 +00:00
Michael Ligh and ikelos
650a188d51
updates for win8/win10 poolscanning
2018-12-13 01:16:05 +00:00
Mike Auty
fa033b8ab7
Back out the symbol_table_name parameter, and provide full symbol names in the constraints.
2018-12-13 01:16:05 +00:00
Mike Auty
eacc45dab6
Ensure POOL_HEADER finds the right object in the right symbol table.
2018-12-13 01:16:05 +00:00
Michael Ligh and ikelos
4c68da8b06
move the functionality for getting an object's type into the _OBJECT_HEADER extension
2018-12-13 01:16:05 +00:00
Michael Ligh and ikelos
4b0e7e5309
remove the Path column from poolscanner. add File scanning
2018-12-13 01:16:05 +00:00
Michael Ligh and ikelos
d653839359
switch Handles.find_cookie() to a classmethod so it can be called from the poolscanner. add typing
2018-12-13 01:16:05 +00:00
Michael Ligh and ikelos
d667a68f97
switch Handles.list_objects() to a classmethod so it can be called from the poolscanner. pass the type_map into get_object()
2018-12-13 01:16:05 +00:00
Michael Ligh and ikelos
a76d71a7dc
move the functionality for getting an object's type into the _OBJECT_HEADER extension
2018-12-13 01:16:05 +00:00
Mike Auty
8acbe8bba3
Refactor conversion code from objects.utility to a conversion module in renderers.
2018-12-12 23:39:10 +00:00
Mike Auty
1a5c9d3af8
Roll symbols.utility into symbols file until we get enough functions we need to split them out again.
2018-12-12 23:38:01 +00:00
Mike Auty
f57bfa5738
Prepare core plugins for moving into the framework namespace.
2018-12-09 13:32:32 +00:00
Mike Auty
323ea0f348
Add in the timeliner interface to the linux bash plugin.
2018-12-08 18:26:45 +00:00
Mike Auty
b5d532555c
Convert the adhoc scanner into a layer scanner using sections.
2018-12-08 18:21:39 +00:00
Mike Auty
649a39a13d
Change time_as_integer from a property to get_time_as_integer method.
2018-12-08 18:00:44 +00:00
Mike Auty
918653e398
Convert aslr_mask_symbol_table to more parameterized form.
2018-12-08 17:55:13 +00:00
Mike Auty
378820bf23
More 'inheritance' fixes.
2018-12-08 17:45:28 +00:00
Mike Auty
780c5d2646
Avoid 'inheritance' issues with requirements.
2018-12-08 17:43:28 +00:00
Mike Auty
f1780bc547
Use constants.BANG (plus pycharm autoreformat).
2018-12-08 17:34:48 +00:00
Andrew Case and ikelos
dc91a16a2f
update check syscall
2018-12-08 17:34:48 +00:00
Andrew Case and ikelos
ade6aa1e74
update check_afinfo for write member
2018-12-08 17:34:48 +00:00
Andrew Case and ikelos
9d9b68eaa3
have check_afinfo not inherit from lsmod
2018-12-08 17:34:48 +00:00
Andrew Case and ikelos
8705fb3047
update time_object to get_time_object
2018-12-08 17:34:48 +00:00
Andrew Case and ikelos
0e7b6b6702
Updated hist_entry type and references, add bash plugin
2018-12-08 17:34:48 +00:00
Andrew Case and ikelos
36131d01bb
Add check_afinfo plugin
2018-12-08 17:34:48 +00:00
Andrew Case and ikelos
72798d3187
Add linux system call checking plugin
2018-12-08 17:34:48 +00:00
Mike Auty
5a331f9f01
A few remaining changes due to the API aleration.
2018-12-07 01:47:16 +00:00
Mike Auty
341b9b8f9e
Add in initial changes for scanner sections.
2018-12-07 01:47:16 +00:00
Mike Auty
5b3a81de05
Ensure the yarascan generator returns rows.
2018-12-01 20:48:53 +00:00
Mike Auty
185d4ccdc2
Fix issue with yara scans not accepting binary data.
2018-12-01 20:32:08 +00:00
Mike Auty
db7320e426
Bulk lint and a couple of typos fixed.
2018-11-08 00:19:17 +00:00
Andrew Case and ikelos
542a062779
Update how the modules list address is found
2018-11-08 00:19:17 +00:00
Andrew Case and ikelos
7aa729f4b7
add typing import to pslist
2018-11-08 00:19:17 +00:00
Andrew Case and ikelos
af496d4741
update lsof to print name properly
2018-11-08 00:19:17 +00:00
Andrew Case and ikelos
98e472e211
major updates and new plugins
2018-11-08 00:19:17 +00:00
Andrew Case and ikelos
63e9cd4604
initial set of Linux plugins and extensions for ikelos review
2018-11-08 00:19:17 +00:00
Mike Auty
36cc973d6d
Fix up minor typo in the plugin help.
2018-11-04 22:43:46 +00:00
Mike Auty
e6711f580d
Add required poolheader types and change the PoolHeaderSymbolTable to match the inheritted constructor signature.
2018-10-24 19:31:22 +01:00
Mike Auty
ff3bae0804
Fix up typing information.
2018-10-14 23:03:58 +01:00
Mike Auty
df57ee5045
Fix minor typo in poolscanner logic (thanks mypy!).
2018-10-10 15:32:28 +01:00
Mike Auty