WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-11 12:17:38 +02:00
Code Issues Packages Projects Releases Wiki Activity
4,667 Commits 80 Branches 17 Tags
a00a59cd235cb18b7dc28ccf2669e2a82368fab5
Commit Graph
4667 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Gustavo Moreira be05ace29b Timeliner plugin: Add exception information 2024-09-12 16:06:40 +10:00
Gustavo Moreira 57de357ffd Timeliner plugin: Fix issue with filtering TimeLinerInterface plugins and using the filter argument 2024-09-12 16:05:40 +10:00
Gustavo Moreira 9e8471799a Improving code and adding the credential virtual addresses to the output. 2024-09-12 10:44:43 +10:00
Gustavo Moreira c77c662b70 Linux pidhashtable plugin pointer verification improvements 2024-09-11 21:09:08 +10:00
Gustavo Moreira 037eb1ce03 Linux Check_creds plugins pointer verification improvements 2024-09-11 16:30:41 +10:00
Gustavo Moreira c86d973329 Linux page cache plugins pointer verification improvements 2024-09-11 15:54:17 +10:00
ikelosandGitHub e76d51251b Merge pull request #1253 from volatilityfoundation/issues/issue1252 
CLI: Filter on rendered values
 2024-09-10 23:26:50 +01:00
ikelosandGitHub d238c59134 Merge pull request #1254 from volatilityfoundation/issues/plugin-requirement-recursion 
Core: Verify plugin requirements of plugins
 2024-09-10 23:26:27 +01:00
ikelosandGitHub 7d75c172f1 Merge pull request #1198 from volatilityfoundation/issues/issue1195 
Linux: Update vmayarascan to scan complete VMA blocks
 2024-09-10 22:02:14 +01:00
ikelosandGitHub f30cf39449 Merge branch 'develop' into issues/issue1195 2024-09-10 21:40:08 +01:00
Andrew Case b40c20dd7f Revert back to union to avoid failed tests 2024-09-10 14:55:00 -05:00
Andrew Case b7e604d63f Address feedback 2024-09-10 14:50:40 -05:00
Mike Auty fd2c97e1ba CLI: Use enumerate for renderers (thanks @gcmoreira) 2024-09-09 00:44:00 +01:00
Mike Auty 9152f33181 Core: Allow circular dependencies as long as they are all met 2024-09-08 21:58:09 +01:00
Mike Auty bf000ff0a0 Core: Add recursion protection to VersionRequirement check 2024-09-08 21:42:59 +01:00
Mike Auty ace590e8f0 Core: Fix up f-string containing a string 2024-09-08 16:08:48 +01:00
Mike Auty f3085b6c59 Core: Move the pluginrequirement check to generic versionrequirement 2024-09-08 16:06:23 +01:00
Mike Auty 4361c38573 Core: Verify plugin requirements of plugins 2024-09-08 14:55:04 +01:00
Mike Auty 8259ca9019 Core: Bump the framework number so we can differentiate CLI versions 2024-09-08 13:47:26 +01:00
Mike Auty 26cd73115b CLI: Filter on rendered values 2024-09-08 13:31:09 +01:00
Andrew Case 802fc024b5 switch api place 2024-09-06 13:27:04 -05:00
Andrew Case 61cf58d977 black fixes 2024-09-06 12:49:01 -05:00
Andrew Case fd87772877 Move VAD enumeration into pe_symbols 2024-09-06 12:47:42 -05:00
Andrew Case bcd93616c0 more black help 2024-09-06 12:36:35 -05:00
Andrew Case 7b48ee4be4 more black help 2024-09-06 12:36:13 -05:00
Andrew Case c223ac6e76 more black help 2024-09-06 12:31:55 -05:00
Andrew Case 30cb5bd3ab Formatting that my local black doesn't understand 2024-09-06 12:14:06 -05:00
Andrew Case 3bb9264a57 formatting 2024-09-06 12:11:16 -05:00
Andrew Case 69e6e59daf Add new pe_symbols API, debug registers plugin, unhooked system calls plugin 2024-09-06 12:01:21 -05:00
ikelosandGitHub d56cd83510 Merge pull request #1225 from volatilityfoundation/orphan_threads_v2 
Orphan threads v2
 2024-09-03 20:50:06 +01:00
ikelosandGitHub 6803bf375b Merge pull request #1249 from volatilityfoundation/mft_size_smear_fix 
Mft size smear fix
 2024-09-03 20:48:04 +01:00
Andrew Case 9c058936a8 Address feedback 2024-09-03 10:30:05 -05:00
ikelosandGitHub a40ac64572 Merge pull request #1247 from Abyss-W4tcher/archs_spec_unification 
[core, constants] : add OS and framework supported architectures
 2024-09-02 22:11:30 +01:00
ikelosandGitHub 3f5fce31e7 Merge pull request #1208 from dadokkio/develop 
yara-x support for yarascan
 2024-09-02 21:51:50 +01:00
Andrew Case 660e8a7b89 Add smear checks in MFT parsing code 2024-09-02 15:09:20 -05:00
Andrew Case 483cb7e4ee Add smear checks in MFT parsing code 2024-09-02 15:08:29 -05:00
Andrew CaseandGitHub c4cc50ea48 Merge branch 'develop' into orphan_threads_v2 2024-09-02 12:18:15 -05:00
Andrew Case 46a26c7dc5 Address feedback 2024-09-02 12:17:16 -05:00
Abyss Watcher 7a479d617f add OS and framework architectures constants 2024-08-28 18:40:41 +02:00
Davide Arcuri a2196850bc increase python version to 3.8 2024-08-28 10:39:28 +02:00
ikelosandGitHub 517f46e833 Merge pull request #1245 from volatilityfoundation/issues/fix-broken-1173-vesion-bump 
Bump the modules version number
 2024-08-28 08:07:41 +01:00
Mike Auty 6a157a785f Bump the modules version number 
Pull-request #1173 bumped the version of the modules plugin (even though
this only needed to be a MINOR version bump, see
https://github.com/volatilityfoundation/volatility3/pull/1173#discussion_r1649614761), but failed
to verify that other plugins which relied on it were also updated to
make use of the new plugin.  This was the version system working as
intended, but highlighted a review failure that the neither the author, nor the
reviewers, verified that the rest of the framework (specifically other plugins which
relied on modules) worked correctly with the new code (which this kind
of error is designed to fix).

Fixes #1244.
 2024-08-27 14:45:55 +01:00
ikelosandGitHub c524d8a3d1 Merge pull request #1242 from volatilityfoundation/issues/fix-up-extension-verisioning 
Remove get_vmlinux calls
 2024-08-25 12:28:29 +01:00
Gustavo Moreira d7356801f4 Merge branch 'develop' into linux_fix_mnt_namespace_issue_1187 2024-08-25 11:29:33 +10:00
Mike Auty e97abae156 Remove get_vmlinux calls 
Sorry, I know I asked for it, but I hadn't quite figured out what was
going on.  Things in the symbols/linux code are considered part of the
framework, and therefore it's the framework version that should have been
bumped.  Since the framework comes packages with LinuxUtilities we can
rely on the version numbers to be suitable.  This cleans up the mess I
caused, sorry for the extra work!  5:S
 2024-08-24 15:02:37 +01:00
ikelosandGitHub 966d23e301 Merge pull request #1233 from gcmoreira/linux_page_cache 
Linux Page Cache and IDR
 2024-08-24 14:43:35 +01:00
Gustavo Moreira 3bf9f8cec0 PR review fixes: Add typing info to pagecache.Files._follow_symlink() 2024-08-24 12:03:10 +10:00
Gustavo Moreira 90b327e632 PR review fixes: Make mountinfo.get_superblocks() a classmethod and adapt the code using it. 2024-08-24 11:45:29 +10:00
Gustavo Moreira d627f243e2 PR review fixes: Add typing info to the get_inodes() class method. 2024-08-24 10:55:01 +10:00
Gustavo Moreira d964e6f61d PR review fixes: Check for LinuxUtilities version everywhere we use it 2024-08-24 02:06:06 +10:00