WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-12 12:47:39 +02:00
Code Issues Packages Projects Releases Wiki Activity
4,667 Commits 80 Branches 17 Tags
a00a59cd235cb18b7dc28ccf2669e2a82368fab5
Commit Graph
4667 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
cpuuandGitHub 159e5a2fbd Fix requirements.URLRequirement to requirements.URIRequirement 
[Refactor] Fix requirements.URLRequirement to requirements.URIRequirement in single_location assignment
 2023-05-04 11:59:30 +09:00
cpuuandGitHub da6f2cf850 Merge branch 'volatilityfoundation:develop' into develop 2023-05-04 10:56:34 +09:00
ikelosandGitHub b6af37af2d Merge pull request #938 from volatilityfoundation/issues/issue937 
Improve handling of swap files
 2023-05-03 00:45:50 +01:00
ikelosandGitHub 73cd54cf8a Merge pull request #945 from digitalisx/fix/code-comment 
Add: help comment for windows plugins (`windows.crashinfo`, `windows.ldrmodules`, `windows.statistics`).
 2023-05-03 00:45:23 +01:00
Donghyun Kim c06836e45d Lint: black issue for windows.ldrmodules 2023-05-02 05:58:57 +09:00
Donghyun Kim 79cd3fe2fe Lint: black issue for windows.statistics 2023-05-02 05:57:56 +09:00
Donghyun Kim 77081d3f68 Add: code comment for plugins 2023-05-02 05:51:24 +09:00
Mike Auty 317f565685 Core: Renable the import protection for volatility3.framework.plugins 
In commit 21d916b (about 10 months ago) the logic for the warning about
volatility3.framework importing was disabled.  This re-enables it.

Also updates to support pyinstaller 5.10 function stack depth.

Closes #944
 2023-04-30 09:02:40 +01:00
Gustavo Moreira b2d33c2cb0 Check if 'mnt_namespace' has the 'ns' member before using it 2023-04-26 00:36:58 +10:00
Gustavo Moreira 33f54f8cf7 Replace LinuxUtilities._do_get_path() with the new mountinfo _do_get_path() avoiding duplicate code. It also fixes issue #930 2023-04-26 00:33:35 +10:00
Mike Auty a5e6c550e3 Automagic: Handle file swap locations and throw a warning if they don't exist 2023-04-16 13:30:55 +01:00
Mike Auty 58af80df3c Requirements: Shift location_from_file to the requirement from the CLI class 2023-04-16 13:29:41 +01:00
Mike Auty 900ab70452 Volshell: Mark the script as executable in the repo 2023-04-14 08:08:27 +01:00
ikelosandGitHub cbc745d5a8 Merge pull request #936 from volatilityfoundation/release/v2.4.1 
Release  v2.4.1

```
New plugins:
   linux.sockstat
   linux.iomem
   linux.psscan
   linux.envars
   windows.drivermodule
   windows.vadwalk
Pid filtering for Windows pstree plugin
Minor fixes for Windows callbacks plugin
Minimum python version was increased to 3.7
Python-snappy dependency was replaced with ctypes to ease installation
Whole codebase was reformatted with black
Faster release cycle (targetting every 4 months)
```
v2.4.1 		2023-04-12 20:22:23 +01:00
Mike Auty 1b5a6b6267 Core: Bump the copyright year of the README 2023-04-12 19:58:53 +01:00
Mike Auty ebb74e2f92 Core: Bump the copyright year of the README 2023-04-12 19:57:15 +01:00
ikelosandGitHub 66c37c3945 Merge pull request #898 from volatilityfoundation/feature/xen-coredump-support 
Layers: Add in Xen CoreDump format support
 2023-04-09 14:10:56 +01:00
ikelosandGitHub 467462ea0e Merge pull request #935 from digitalisx/fix/typo 
Fix: typo for `linux.iomem` plugin.
 2023-04-09 14:08:35 +01:00
Donghyun Kim 2e0ecdd770 Fix: typo for linux iomem plugin 2023-04-07 18:04:56 +09:00
ikelosandGitHub 3c31de8847 Merge pull request #934 from volatilityfoundation/issues/issue931 
Automagic: Update clear-cache and do removals first
 2023-04-06 09:22:57 +01:00
ikelosandGitHub 2ed7d0d45c Merge pull request #933 from volatilityfoundation/issues/issue932 
Plugins: Support yara-4.3.0 and above
 2023-04-05 14:12:51 +01:00
Mike Auty f33ea67e86 Automagic: Update clear-cache and do removals first 2023-04-04 23:57:35 +01:00
Mike Auty 41edab2309 Plugins: Support yara-4.3.0 and above 2023-04-04 23:23:27 +01:00
Eve 8d47f89edd Linux.proc: Add debug msg when task has no mm member. 2023-03-30 08:57:43 +01:00
Eve 90b9157dcf Linux.proc: Fix broken variable in debug msg. 2023-03-30 08:54:56 +01:00
Mike Auty 60292c2da1 Linux: Fix slight issue in envvars renaming 2023-03-29 20:46:06 +01:00
Eve 61a2f78baa fix black linting in linux.proc plugin 2023-03-29 10:05:37 +01:00
Eve 18a9f89832 update logic for checking if a vma should be saved to disk in linux.proc plugin 2023-03-29 10:00:55 +01:00
Eve 089234671c Remove checks for leaf node in linux maple tree parsing, node type is enough. 2023-03-27 06:29:30 +01:00
Eve 89e477a068 Remove _parse_maple_tree_entry function and make parsing easier to read 2023-03-24 20:07:32 +00:00
Eve 5207cfcb93 Modify linux plugins to support both mmap and mm_mt 2023-03-24 15:10:34 +00:00
Eve 3d51b4a41a Add basic support for linux maple tree struct 2023-03-24 15:08:59 +00:00
ikelosandGitHub a77a1ae301 Merge pull request #920 from volatilityfoundation/issues/issue886 
Windows: Memoize part of the pool handling code
 2023-03-19 19:29:41 +00:00
cstationandGitHub c7e28eaf29 Merge branch 'volatilityfoundation:develop' into feature/linux_elf_dump 2023-03-14 21:28:29 +00:00
cstation 3386a4fdc0 Remove broad try-except clause 2023-03-14 22:22:51 +01:00
Mike Auty d9a365d96f Linux: Rename linux.envars to linux.envvars 2023-03-11 17:33:20 +00:00
Mike Auty 9216bab61b Core: Improve import exception reporting 2023-03-11 17:32:46 +00:00
Mike Auty b5ef7248ab Linux: Fix psscan task native_layer 2023-03-11 15:25:31 +00:00
Mike Auty cfec8e4b12 Core: Pointer is_readable should check the native layer 2023-03-11 15:25:14 +00:00
Mike Auty 46f56770af Core: Pointer is_readable should check the native layer 2023-03-11 15:18:58 +00:00
Mike Auty 36ec516470 Linux: Fix psscan task native_layer 2023-03-11 15:17:24 +00:00
Mike Auty 99417cdfcc Linux: Psscan check parent pointer is valid 2023-03-11 14:17:37 +00:00
Mike Auty 85e86d45c5 Linux: fix black lint issues 2023-03-08 20:43:03 +00:00
Mike Auty b8755ac574 Linux: fix black lint issues 2023-03-08 20:42:24 +00:00
Mike Auty a35afd4f34 Core: Bump framwork version after release branch 2023-03-08 20:40:04 +00:00
ikelosandGitHub 97347efff3 Merge pull request #915 from 0xThiebaut/pstree 
Add PID filtering to `windows.pstree`
 2023-03-08 19:51:48 +00:00
ikelosandGitHub cd2e07da27 Merge pull request #881 from eve-mem/linux_envars 
add linux envars
 2023-03-08 18:59:05 +00:00
ikelosandGitHub f028b0a4dc Merge pull request #894 from eve-mem/linux_iomem 
add linux.iomem plugin based on vol2 plugin by atcuno
 2023-03-08 18:58:35 +00:00
ikelosandGitHub fff64b6071 Merge pull request #921 from eve-mem/linux_psscan 
Fix Linux psscan
 2023-03-08 18:56:16 +00:00
Eve 32db4c0e5f Fix black linting for linux.psscan. 2023-03-08 14:08:44 +00:00