Mike Auty
97e41e21e4
Volatility 3 1.0.0-beta.1 release
2019-10-13 11:28:09 +01:00
Mike Auty
48f2c78a7d
Update versioning to support appropriate version checks.
2019-10-13 11:12:28 +01:00
Mike Auty
2229c50de8
Remove executable bit from data files.
2019-10-13 10:09:10 +01:00
Mike Auty
9b0a910d7e
Update typing and documentation on renderers.
2019-10-07 10:35:17 +01:00
Mike Auty
71e082f25f
Ensure the layers are loaded on layer stacker run, not just when a layer is stacked.
2019-10-07 01:52:58 +01:00
Mike Auty
d3f1a396da
Handle JSON errors when caching banners.
2019-10-04 22:50:25 +01:00
Mike Auty
3784c9aff6
Fix up missing/inaccurate plugin description strings.
2019-10-03 01:05:57 +01:00
Mike Auty
3b656e337a
Update windows extensions to ensure they're documented.
2019-10-02 20:25:54 +01:00
Mike Auty
10a379b0ee
Make 'import as' consistent and ensure proper plugin dependencies.
2019-10-02 01:25:03 +01:00
Mike Auty
9a17beb77f
Ensure consistency of importing interfaces.
2019-10-02 01:18:46 +01:00
Mike Auty
8e10f4e3d1
Clarify handles error message.
2019-10-02 00:06:25 +01:00
Mike Auty
9ac622afa0
Fix up import style to be consistent.
2019-10-01 23:46:02 +01:00
Mike Auty
ba14e10d00
pdbconv: Ensure voids do not have a size
...
This partially reverts e17427b9a0
which was an attempt to match other generators, but was inaccurate.
2019-09-29 15:36:26 +01:00
Andrew Case and ikelos
a4a918ea58
Suggested changes from ikelos
2019-09-27 20:50:21 +01:00
Andrew Case and ikelos
bf29e23e1c
add updated mac ifconfig support
2019-09-27 20:50:21 +01:00
Mike Auty
c00b820f74
Fix up recent Mac PagedInvalidAddress additions.
2019-09-27 11:21:49 +01:00
Mike Auty
81be3c0d66
Make InvalidAddressException a LayerException as it should be.
2019-09-27 11:19:53 +01:00
Mike Auty
153b3b7d39
Make sure we catch the most general exception for what we mean.
2019-09-27 11:19:53 +01:00
Andrew Case
2a98227306
Mac - have pstree inherit from tasks
2019-09-26 23:11:26 -05:00
Andrew Case
b1d07396a0
Mac - have psaux inherit from tasks
2019-09-26 23:08:33 -05:00
Andrew Case
49c4ae2aa4
Mac - have bash inherit from tasks
2019-09-26 23:05:49 -05:00
Andrew Case
a6e7c7a919
Mac - have malfind inherit from tasks
2019-09-26 23:01:37 -05:00
Andrew Case
7339c12eaa
Mac - have proc maps inherit from tasks
2019-09-26 22:52:45 -05:00
Andrew Case
eeb04655e6
Mac - smear protection in network address enumeration
2019-09-26 22:08:47 -05:00
Andrew Case
3af593c16a
Mac - switch netstat to inherit from tasks
2019-09-26 22:07:41 -05:00
Andrew Case
2d7bc99d6a
Mac - make pslist smear resistant
2019-09-26 21:57:48 -05:00
Andrew Case
a85ce3ecf5
Merge branch 'master' of https://github.com/volatilityfoundation/volatility3
2019-09-26 21:56:55 -05:00
Andrew Case
b4ad15c226
Mac - update lsof to inherit from tasks and be more smear resistant
2019-09-26 21:56:38 -05:00
Mike Auty
dfcbd78a8a
Remove object validate method.
...
With agreement from @attrc and @imhlv2, I'm removing the useless
validate method from the object. It defaulted to returning inaccurate
information (validity undetermined, but validate returned True as if
validation had happened) and is better handled by individual classes
implementing is_valid (which seems the preferred nomenclature) and
throwing exceptions if it's called on a class that doesn't have it.
2019-09-27 01:49:42 +01:00
Mike Auty
8b3453dd29
Ensure we use the cache rathe rather than just saying we will.
2019-09-26 21:18:23 +01:00
Mike Auty
066a4e64f2
Minor fix for construct_layers.
2019-09-26 21:16:46 +01:00
Mike Auty
ae010a2390
Improve log levels and distribution of messages.
2019-09-26 21:16:12 +01:00
Mike Auty
211ad0d524
Remove useless calls to validate.
2019-09-26 15:58:22 +01:00
Mike Auty
679a0eabc2
Tidy Exceptions and ensure LayerExceptions are passed a layer name.
2019-09-26 15:44:36 +01:00
Mike Auty
2acdc3e060
Fix up PADDING_INFO for very specific versions of windows.
2019-09-26 13:35:23 +01:00
Mike Auty
e0b9d72c84
Update the license URL and LICENSE.txt
2019-09-25 21:44:05 +01:00
Mike Auty
ee008cb76b
Make sure we accurately check the PADDING_INFO presence.
2019-09-25 21:32:53 +01:00
Mike Auty
2252876375
Correct the PADDING_INFO handling.
2019-09-25 21:32:53 +01:00
Mike Auty
5a8946da83
Shift the InfoMask stuff into the top-down approach.
2019-09-25 21:32:53 +01:00
Mike Auty
b0559656fc
Update the header offsets for the InfoMask.
2019-09-25 21:32:53 +01:00
Mike Auty
6a3a6cdb3c
Add this as more of an example of how to cache.
...
In a volatility object, we can use our own internal _vol variable to
expose values externally, or just for us to cache. It will override
preexisting values though, so when used as a cache, best to make its key
long and unique as possible.
2019-09-25 21:32:53 +01:00
Mike Auty
0fd9bf2dbb
Try to shave some time from the poolscanner by Infomask checking.
2019-09-25 21:32:53 +01:00
Mike Auty
37cb541013
Change the layer naming convention to include the underscores when necessary.
2019-09-25 19:38:39 +01:00
Mike Auty
926288a7ac
Ensure process layer name contains the process ID.
2019-09-25 01:15:58 +01:00
Mike Auty
b25094035d
Update renderers to work on populated treegrids.
2019-09-23 23:59:35 +01:00
Mike Auty
72567e1c50
Yapf-0.28.0 rerun across the whole codebase.
2019-09-21 21:08:23 +01:00
Mike Auty
dad88692b8
Minor improvements for pyinstaller packages.
2019-09-21 21:06:05 +01:00
Mike Auty
d2b892cf94
Fix up docstring errors in documentation build
2019-09-19 23:00:37 +01:00
Mike Auty
1f9605abf7
Revert "Fix warnings when generated documentation."
...
This actually broke autodoc generation and wasn't accurate. The
documentation warnings may have to stay for now.
This reverts commit 37e13321f9 .
2019-09-17 18:32:44 +01:00
Mike Auty
a248bdc804
Fix up old code and docstring indent issue.
2019-09-17 18:15:05 +01:00