WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-12 04:37:38 +02:00
Code Issues Packages Projects Releases Wiki Activity
4,667 Commits 80 Branches 17 Tags
a00a59cd235cb18b7dc28ccf2669e2a82368fab5
Commit Graph
4667 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Eve 099403d07c Linux: fix bug with iomem plugin where an absolute address is used to make an object but the absolute flag is not set 2023-11-29 20:47:14 +00:00
Mike Auty b20643d5e0 Linux: Tidy up the elf symbol table name 2023-11-29 12:03:43 +00:00
ikelosandGitHub 0769df4b3c Merge pull request #1039 from Abyss-W4tcher/linux_extensions_patches 
Linux extensions patches
 2023-11-29 12:02:46 +00:00
Abyss Watcher 39144ff45f type hint get_symbols_names_and_addresses 2023-11-29 12:51:08 +01:00
Eve c610497fa0 Windows: update vadyarascan to use generic yarascan requirements 2023-11-29 09:28:34 +00:00
ikelosandGitHub 4ce42fcac4 Merge pull request #1049 from volatilityfoundation/issues/improve-mftscan 
Simplify attribute object accesses
 2023-11-28 21:45:13 +00:00
k1nd0ne 7624c494e8 Simplify attribute object accesses like #1049 + custom class (MFTAttribute) 2023-11-28 13:57:02 +01:00
Mike Auty 8d5877e904 Simplify attribute object accesses 
This is a very small percentage slower, for some reason, than the
previous mechanism, probably overhead from object creation/member
access.  However, it vastly simplifies the code and makes better use of
the volatility object model.
 2023-11-27 01:00:00 +00:00
ikelosandGitHub 9f9afbf90f Merge pull request #1048 from volatilityfoundation/issues/issue922 
Issues/issue922
 2023-11-26 12:53:49 +00:00
Mike Auty 8b6ab44310 Core: Fix array_of_pointers to act only on those pointers 2023-11-26 12:30:06 +00:00
Mike Auty 62506aece6 Core: Fix up github security issues 
This fixes an unused import, an improper use of self and lots and lots
of places where we implicitly return None.  This now explicitly returns
None to improve readability and prevent mixed implicit and explicit
return values.  This should also somewhat aid type checking by humans.
 2023-11-26 11:24:53 +00:00
k1nd0ne 24609856de Fixing: unused import, typo, ISF enhancement 2023-11-25 17:04:47 +01:00
ikelosandGitHub 7012edb815 Merge pull request #885 from eve-mem/vmayarascan 
add linux.vmayarascan
 2023-11-23 09:08:17 +00:00
k1nd0ne c3dbf9714d Better variable init 2023-11-20 19:12:07 +01:00
Abyss Watcher 80483722eb split module functions to keep current API 2023-11-20 11:57:56 +01:00
k1nd0ne fd5c828939 Renaming file, handling url parsing using urllib, changing logger and requirement condition placement. 2023-11-20 11:02:31 +01:00
k1nd0ne 46a6ab1721 Making sure it is ADS 2023-11-19 13:09:47 +01:00
k1nd0ne 6c6d036cc0 Adding Alternate Data Stream Scanner 2023-11-19 00:54:56 +01:00
k1nd0ne ceac912014 Adding requirements 2023-11-18 15:47:49 +01:00
k1nd0ne f8e3464219 Forgot to return 'None' in the s3 scheme 2023-11-18 15:17:54 +01:00
k1nd0ne fa2b840b55 Object Storage Layer for PR #1037 2023-11-18 15:05:11 +01:00
Abyss Watcher 6372b6f367 symbols getters follow vol2 format 2023-11-17 17:52:58 +01:00
Abyss Watcher 1a73717b93 set 'module' as config string 2023-11-17 17:49:54 +01:00
ikelosandGitHub d56297c4b1 Merge pull request #1038 from eve-mem/linux_check_afinfo_member_checks 
Linux: add member presence checks to linux.checks_afinfo
 2023-11-15 23:00:25 +00:00
Eve 4f4e2efd99 Linux: update warning logic in linux.checks_afinfo so that only one warning is shown and debug logs are cleaner 2023-11-15 10:29:06 +00:00
ikelosandGitHub c616c0b35e Merge pull request #1011 from eve-mem/layer_debug_info 
Layer debug info to show file size
 2023-11-15 01:06:13 +00:00
ikelosandGitHub 2e4d6cde17 Merge pull request #1035 from eve-mem/linux_bash_get_sections_only_once 
Linux: update bash plugin to only get memory sections once
 2023-11-15 00:59:30 +00:00
ikelosandGitHub 19d40b1a7f Merge pull request #1027 from daddycocoaman/fix/pdbutility-signature 
fix guid and pdb_name for #1026
 2023-11-14 23:38:53 +00:00
Abyss Watcher 36327a4315 check if symbol name is empty after strip 2023-11-14 17:20:16 +01:00
Abyss Watcher bf68fa8ce2 use KSYM_NAME_LEN for symbol name length 2023-11-14 17:09:36 +01:00
Abyss Watcher 2de97af061 use refcnt for inheritance 2023-11-14 16:54:10 +01:00
Abyss Watcher 83de6274ef fix symbols and function calls 2023-11-14 16:53:08 +01:00
Eve 5ab0e4f83f Linux: remove _valid_magic from linux elf extension, check for _type_prefix and _hdr attrs instead 2023-11-14 07:22:00 +00:00
Eve f7d5e722a2 Linux: add member presence checks to linux.checks_afinfo _check_afinfo function to stop crashes when none of the required members are present 2023-11-13 07:05:30 +00:00
Eve 9fe7d479f6 Linux: update bash plugin to only get memory sections once 2023-11-10 20:58:07 +00:00
Eve ebe19bf179 Linux: update maple tree extension to fix issue #1032 2023-11-10 20:30:38 +00:00
ikelosandGitHub 82c5af76df Merge pull request #1024 from volatilityfoundation/feature/citation 
Documentation: Add in a CITATION.cff file
 2023-11-08 20:20:09 +00:00
Leron GrayandGitHub 40dcff16e9 Merge branch 'volatilityfoundation:develop' into fix/pdbutility-signature 2023-11-06 11:37:01 -06:00
ikelosandGitHub fda1db4695 Merge pull request #1023 from volatilityfoundation/feature/santitize-filenames 
Core: Add (optional) sanitization to the FileHandler class
 2023-11-06 08:24:19 +00:00
Leron Gray c2b008969c update pefile requirements 2023-11-05 16:25:43 -06:00
Leron Gray b9c4a1d8a7 fix guid and pdb_name for #1026 2023-10-31 13:52:26 -05:00
Mike Auty 3bb1285dbf Layers: Make removal of a layer more efficient, as noted in #809 2023-10-29 13:53:55 +00:00
ikelosandGitHub e5d3134508 Merge pull request #1025 from Abyss-W4tcher/remote_isf 
Core: Remote ISF - correct sql query and strip identifier
 2023-10-23 19:03:46 +01:00
Abyss Watcher c20baf9d1f black formatting 2023-10-23 17:49:03 +02:00
Abyss Watcher 3a65626671 black formatting 2023-10-23 17:47:57 +02:00
Abyss Watcher 2d3b3158dc correct sql query and strip identifier 2023-10-21 23:34:17 +02:00
ikelosandGitHub 11ddafde44 Merge pull request #999 from 616c696365/fix-issue-895 
Windows: Update pslist.py, add friendly option
 2023-10-19 10:29:42 +01:00
ikelosandGitHub 104623ede2 Merge pull request #1018 from volatilityfoundation/1017-printkey-breaks-when-encountering-invalid-root-node 
issue #1017 - check for valid root node type
 2023-10-19 10:18:55 +01:00
ikelosandGitHub 806801ea69 Merge pull request #1020 from volatilityfoundation/1019-printkey-timestamps-are-misleadingincorrect 
issue #1019 - for subkeys, return the modified time of the subkey its…
 2023-10-19 10:18:22 +01:00
Dave Lassalle a497216beb issue #1019 - black updates 2023-10-18 14:09:42 -05:00