 Abyss Watcher
|
a162fceed4
|
migrate windows and linux tests to dedicated files
|
2025-03-04 16:54:11 +01:00 |
|
|
Abyss Watcher
|
f7dfab57fd
|
adjust helpers and add match_output_row
|
2025-03-04 16:46:03 +01:00 |
|
|
Abyss Watcher
|
367e0ebc0d
|
add sample abstraction
|
2025-03-04 16:41:12 +01:00 |
|
|
ikelosandGitHub
|
795b853ad5
|
Merge pull request #1641 from volatilityfoundation/1639-broken-use-of-cell_datacount
#1639 - cast big data to _CM_BIG_DATA
|
2025-02-27 20:06:13 +00:00 |
|
|
Dave Lassalle
|
a906506736
|
#1639 - cast big data to _CM_BIG_DATA
|
2025-02-26 13:25:40 -06:00 |
|
|
ikelosandGitHub
|
481e93b6fd
|
Merge pull request #1635 from volatilityfoundation/issues/issue1443
Linux: Fix typing is lsof
|
2025-02-25 15:08:27 +00:00 |
|
|
Mike Auty
|
1c8f9edaf0
|
Linux: Fix typing is lsof
Fixes #1443
|
2025-02-25 10:15:30 +00:00 |
|
|
ikelosandGitHub
|
d8b8b20bcc
|
Merge pull request #1625 from volatilityfoundation/issues/issue1435
Windows: Fix console potentially unbound variables
|
2025-02-25 09:42:43 +00:00 |
|
|
ikelosandGitHub
|
1f3c4f24dc
|
Merge pull request #1631 from volatilityfoundation/issues/issue1408
Issues/issue1408 - Delete partial cache downloads
|
2025-02-25 09:40:37 +00:00 |
|
|
ikelosandGitHub
|
08f47d499c
|
Merge pull request #1630 from volatilityfoundation/issues/issue1629
Issues/issue1629
|
2025-02-25 09:36:39 +00:00 |
|
|
ikelosandGitHub
|
d70c571e6a
|
Merge pull request #1624 from volatilityfoundation/feature/linux_ifconfig_plugin
Feature/linux ifconfig plugin
|
2025-02-25 09:35:09 +00:00 |
|
|
ikelosandGitHub
|
37bdb6cb99
|
Merge pull request #1632 from volatilityfoundation/fix_poolscanners
Check Win10+ SlushSize member to support Windows 11 pool scanning. Re…
|
2025-02-23 22:38:32 +00:00 |
|
|
Andrew Case
|
ba56e42634
|
Fix for black
|
2025-02-23 22:34:23 +00:00 |
|
|
Andrew Case
|
335606774d
|
Check Win10+ SlushSize member to support Windows 11 pool scanning. Restrict the Pools that current scanners accept.
|
2025-02-23 22:30:20 +00:00 |
|
|
Mike Auty
|
48894dae0c
|
Core: Fix up ruff issue from #1631
|
2025-02-23 20:56:17 +00:00 |
|
|
Mike Auty
|
2ff83c4434
|
Core: Ensure cached files aren't saved if incomplete
|
2025-02-23 20:50:35 +00:00 |
|
|
Mike Auty
|
c269086402
|
Core: Improve caching to only allow one open file write at a time
|
2025-02-23 20:31:07 +00:00 |
|
|
Mike Auty
|
e9a6f3214c
|
Add comment for where to apply the fix
|
2025-02-23 20:29:29 +00:00 |
|
|
Mike Auty
|
5fabd7a04b
|
Linux: Correct partial renaming attempt - take 2
|
2025-02-23 15:49:18 +00:00 |
|
|
Mike Auty
|
6d254fa961
|
Linux: Correct partial renaming attempt
|
2025-02-23 15:48:05 +00:00 |
|
|
Mike Auty
|
944c841278
|
Linux: Rename net extensions to allow for net variable name
|
2025-02-23 15:44:38 +00:00 |
|
|
ikelosandGitHub
|
2ffb3ac6b1
|
Merge pull request #1623 from volatilityfoundation/issues/issue1618
Layers: Reduce double bounds test and simplify intel translation
|
2025-02-21 19:54:33 +00:00 |
|
|
Mike Auty
|
ce490298bf
|
Linux: Fix up typo unchanged net instance in sockscan
|
2025-02-20 09:51:43 +00:00 |
|
|
Mike Auty
|
6c019776ac
|
Windows: Remove non-functional threads filtering
Filtering can be carried out through --filter commands on the CLI
|
2025-02-20 09:39:53 +00:00 |
|
|
Mike Auty
|
70a9171fd4
|
Windows: Remove pid filtering option from threads
|
2025-02-20 09:24:38 +00:00 |
|
|
Mike Auty
|
17ea6e9fd0
|
Linux: Fix altered SockHandlers signature
|
2025-02-20 09:20:57 +00:00 |
|
|
Mike Auty
|
2ff7dea512
|
Linux: Remember to apply the symbols to addr as well as link
|
2025-02-20 01:07:10 +00:00 |
|
|
Mike Auty
|
815d695aab
|
Linux: Leave the existing symbol table the same
|
2025-02-20 00:30:48 +00:00 |
|
|
Mike Auty
|
056d7813a7
|
Linux: fix up typing typo
|
2025-02-20 00:25:31 +00:00 |
|
|
Mike Auty
|
1458b7dfc7
|
Linux: Add vast quantities of missing type information
|
2025-02-20 00:17:48 +00:00 |
|
|
Mike Auty
|
bfd210236f
|
Linux: Fix up too-net typing syntax
|
2025-02-20 00:00:53 +00:00 |
|
|
Mike Auty
|
eb21f89cf3
|
Linux: Fix ruff errors
|
2025-02-19 23:54:15 +00:00 |
|
|
Mike Auty
|
2fa0ce8e5c
|
Bump required version numbers
|
2025-02-19 23:51:06 +00:00 |
|
|
Mike Auty
|
054bb48157
|
Separate out the net symbols from standard linux
Also includes some typing changes.
|
2025-02-19 23:48:20 +00:00 |
|
|
Mike Auty
|
3ea563bde8
|
Windows: Use built-in libraries where possible (idea from #1627)
|
2025-02-19 18:48:32 +00:00 |
|
|
Mike Auty
|
8106a16529
|
Windows: Fix typing in lower python versions
|
2025-02-16 22:33:57 +00:00 |
|
|
Mike Auty
|
a31ea33f84
|
Windows: Fix console potentially unbound variables
|
2025-02-16 22:28:54 +00:00 |
|
|
Mike Auty
|
6486b4a569
|
Linux: Fix some black issues
|
2025-02-16 21:46:26 +00:00 |
|
|
Mike Auty
|
ea2c50710e
|
Linux: Correct enum import issues
|
2025-02-16 21:44:37 +00:00 |
|
|
ikelosandGitHub
|
80f2cc6a43
|
Merge pull request #1079 from gcmoreira/linux_ifconfig_plugin
Linux ip.Addr and ip.Link plugins
|
2025-02-16 21:41:05 +00:00 |
|
|
ikelosandGitHub
|
51c19fbdf2
|
Merge branch 'feature/linux_ifconfig_plugin' into linux_ifconfig_plugin
|
2025-02-16 21:40:36 +00:00 |
|
|
ikelosandGitHub
|
e0902ad7df
|
Merge pull request #1621 from volatilityfoundation/issue_1487_driver_handling
Stop reporting terminated/smeared drivers. Enforce names present. Add…
|
2025-02-16 21:24:13 +00:00 |
|
|
Andrew Case
|
7a533054f7
|
Address feedback
|
2025-02-16 21:24:33 +00:00 |
|
|
Mike Auty
|
346e58e798
|
Layers: Reduce double bounds test and simplify intel translation
|
2025-02-16 18:50:44 +00:00 |
|
|
Mike Auty
|
d5976146fb
|
Layers: Restore get_valid_table caching
Partially restore performance as per #1618
|
2025-02-16 18:24:23 +00:00 |
|
|
Andrew Case
|
ca5f811405
|
Stop reporting terminated/smeared drivers. Enforce names present. Add kernel start checking in all places
|
2025-02-15 21:26:54 +00:00 |
|
|
ikelosandGitHub
|
81bac4db11
|
Merge pull request #1613 from Abyss-W4tcher/linux_pagecache_recoverfs
New plugin: linux.pagecache.recoverfs
|
2025-02-15 16:26:17 +00:00 |
|
|
Abyss Watcher
|
2bf0a26c73
|
typos
|
2025-02-15 15:28:23 +01:00 |
|
|
Abyss Watcher
|
b86e54e427
|
extra checks and debug messages
|
2025-02-15 15:25:26 +01:00 |
|
|
Abyss Watcher
|
c2f8697cc5
|
normalize symlinks by relying on purepath
|
2025-02-15 15:24:53 +01:00 |
|