WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-08-21 22:12:23 +02:00
Code Issues Packages Projects Releases Wiki Activity
1,865 Commits 80 Branches 17 Tags
a248bdc804fbd6a2ce3387eedc067eeea2fa9e83
Commit Graph
1865 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Mike Auty a248bdc804 Fix up old code and docstring indent issue. 2019-09-17 18:15:05 +01:00
Mike Auty 7efe19224e Make several small typing information fixes. 2019-09-17 18:01:11 +01:00
Mike Auty 33451967b2 Typing fixes for virtmap and remove extranious exception. 2019-09-17 17:58:47 +01:00
Mike Auty f872aa3390 Revert "Add in no-dump option to certificates plugin." 
Arg, too much mind changing.  This option would make sense if the
certificates plugin returned much useful information, but parsing
certificates isn't easy in with just stdlib, and therefore dumping the
certificates is the most sensible thing for this plugin to do (meaning
no need for a no-dump option).

This reverts commit 5491825652.
 2019-09-17 16:59:50 +01:00
Mike Auty 444fd5451b Add in no-dump option to certificates plugin. 2019-09-17 16:59:50 +01:00
Mike Auty ab4b77a754 Revert "Add in the option to not produce files." 
It makes more sense to allow each plugin to individually decide whether
to produce files or not.

This reverts commit 07adce2721.
 2019-09-17 16:59:50 +01:00
superponibleandikelos ae8822dddf check if hive offset is valid before yielding 2019-09-17 16:59:50 +01:00
Mike Auty 442b47c87d Add in the option to not produce files. 2019-09-17 16:59:50 +01:00
Mike Auty 83e113dad0 Revert "Provide a more user friendly filename." 
As Dave pointed out in the pull request, "User" assumes only one user
and not multiple hives.

This reverts commit a802ecab86.
 2019-09-17 16:59:50 +01:00
Mike Auty 1b953e3c80 Provide a more user friendly filename. 2019-09-17 16:59:50 +01:00
superponibleandikelos b6b2275c13 add hive_offset to crt filenames 2019-09-17 16:59:50 +01:00
superponibleandikelos 2fa9e6b84d fix typo in comment 2019-09-17 16:59:50 +01:00
superponibleandikelos 508a9148ed catch InvalidAddressException when creating RegistryHive 2019-09-17 16:59:50 +01:00
superponibleandikelos 2e4a8c7247 add user level hives for certificates 2019-09-17 16:59:50 +01:00
superponibleandikelos 2053d957bc update docstring copied from printkey 2019-09-17 16:59:50 +01:00
superponibleandikelos 36f5e47d5b fix up docstrings to match yield values 2019-09-17 16:59:50 +01:00
Mike Auty c6cdbc7342 Move the hive_iterator to HiveList, since it's more intuitively where it should live. 2019-09-17 16:59:50 +01:00
Mike Auty b292188319 Update userassist to use the new printkey API. 2019-09-17 16:59:50 +01:00
Mike Auty 46c047b7b3 Update API slightly to return objects not strings. 2019-09-17 16:59:50 +01:00
Mike Auty f2220e16b9 Add in initial attempt at certificate plugin. 2019-09-17 16:59:50 +01:00
Mike Auty b413e4a13d Refactor printkey to be more usable from other plugins. 2019-09-17 16:59:50 +01:00
Mike Auty 38f773fc91 Slightly tidy up volshell messages. 2019-09-17 01:04:10 +01:00
Mike Auty fb4f8e1d74 Ensure we use the right memberfor mac pids. 2019-09-16 12:08:20 +01:00
Mike Auty 76a1bb972c Restore the mac queue_event class override. 
For some reason, this went missing in commit
a3caf39097, which looks to have been an
error.
 2019-09-16 12:04:50 +01:00
Mike Auty fc2ee7e401 Improve plugin category detection for systems such as volshell. 2019-09-16 11:36:43 +01:00
Mike Auty 16194ef114 Add in linux and mac volshell support. 2019-09-16 11:35:46 +01:00
Mike Auty 74438f053c Update volshell plugin methods 2019-09-16 01:16:46 +01:00
Mike Auty 9d253f6e7e Develop volshell with display_* functions. 2019-09-16 01:00:03 +01:00
Mike Auty cc393c956a Ensure Volshell doesn't try to output after exiting. 2019-09-16 00:59:35 +01:00
Mike Auty 5b5a7b3966 Fix up typing for PluginRequirement. 2019-09-16 00:59:04 +01:00
Mike Auty 3142ffdd69 Add in sphinx-rtd-theme to doc requirements. 2019-09-12 17:09:32 +01:00
Mike Auty 10cf65fb60 Add in better documentation for callbacks. 2019-09-10 00:43:44 +01:00
Michael Lighandikelos 4e3db7a3de add PluginRequirements for ssdt and svcscan. add missing _version to svcscan 2019-09-08 16:08:48 +01:00
Michael Lighandikelos 1d7f2a9582 use ntkrnlmp.object() instead of context.object(). remove config_path argument to list* functions 2019-09-08 16:08:48 +01:00
Michael Lighandikelos 50548bac73 reformat with yapf 2019-09-08 16:08:48 +01:00
Michael Lighandikelos e71b72b3a7 add the windows callbacks plugin 2019-09-08 16:08:48 +01:00
Mike Auty 421af88c29 Classmethod make_subconfig so other classmethods can use it. 2019-09-08 14:50:48 +01:00
Mike Auty 10ea65a236 Remove unnecessary imports. 2019-09-08 14:19:58 +01:00
Mike Auty ffc7682d61 Ensure that layers are automatically imported when needed. 2019-09-08 14:13:28 +01:00
Mike Auty 03bc3d927d Improve the name of a handles exposed function. 2019-09-08 13:22:42 +01:00
Mike Auty 3318e9c4a5 Fix a typo introduced in 5362e2094e. 2019-09-08 01:58:46 +01:00
Mike Auty 189b8c4d69 Update the windows info plugin with classmethods. 2019-09-07 23:00:41 +01:00
Mike Auty e922cef316 Improve docstrings for all plugins, and reformat all docstrings. 2019-09-07 22:59:54 +01:00
Mike Auty dc0a809729 Printkey: Don't offer two options for the same value. 2019-09-07 22:05:09 +01:00
Mike Auty 959e1617fd Shift one-time checks out of loops. 2019-09-07 12:40:32 +01:00
Mike Auty fa58722848 Slight documentation fixes. 2019-09-04 23:53:18 +01:00
Mike Auty c88044db5b Update more API documentation. 2019-09-04 00:34:55 +01:00
Mike Auty a362dc109a Update API documentation. 2019-09-03 21:28:19 +01:00
Mike Auty b158c58310 Ensure non-found keys mimic found key output a little closer. 2019-09-01 22:44:42 +01:00
Mike Auty 952a1b9d69 Move printkey recursion around to get proper tree depth. 2019-09-01 16:17:26 +01:00