 Mike Auty
|
a248bdc804
|
Fix up old code and docstring indent issue.
|
2019-09-17 18:15:05 +01:00 |
|
|
Mike Auty
|
7efe19224e
|
Make several small typing information fixes.
|
2019-09-17 18:01:11 +01:00 |
|
|
Mike Auty
|
33451967b2
|
Typing fixes for virtmap and remove extranious exception.
|
2019-09-17 17:58:47 +01:00 |
|
|
superponibleandikelos
|
ae8822dddf
|
check if hive offset is valid before yielding
|
2019-09-17 16:59:50 +01:00 |
|
|
superponibleandikelos
|
2fa9e6b84d
|
fix typo in comment
|
2019-09-17 16:59:50 +01:00 |
|
|
superponibleandikelos
|
508a9148ed
|
catch InvalidAddressException when creating RegistryHive
|
2019-09-17 16:59:50 +01:00 |
|
|
superponibleandikelos
|
36f5e47d5b
|
fix up docstrings to match yield values
|
2019-09-17 16:59:50 +01:00 |
|
|
Mike Auty
|
c6cdbc7342
|
Move the hive_iterator to HiveList, since it's more intuitively where it should live.
|
2019-09-17 16:59:50 +01:00 |
|
|
Mike Auty
|
b292188319
|
Update userassist to use the new printkey API.
|
2019-09-17 16:59:50 +01:00 |
|
|
Mike Auty
|
46c047b7b3
|
Update API slightly to return objects not strings.
|
2019-09-17 16:59:50 +01:00 |
|
|
Mike Auty
|
b413e4a13d
|
Refactor printkey to be more usable from other plugins.
|
2019-09-17 16:59:50 +01:00 |
|
|
Mike Auty
|
76a1bb972c
|
Restore the mac queue_event class override.
For some reason, this went missing in commit
a3caf39097, which looks to have been an
error.
|
2019-09-16 12:04:50 +01:00 |
|
|
Mike Auty
|
fc2ee7e401
|
Improve plugin category detection for systems such as volshell.
|
2019-09-16 11:36:43 +01:00 |
|
|
Mike Auty
|
5b5a7b3966
|
Fix up typing for PluginRequirement.
|
2019-09-16 00:59:04 +01:00 |
|
|
Mike Auty
|
10cf65fb60
|
Add in better documentation for callbacks.
|
2019-09-10 00:43:44 +01:00 |
|
|
Michael Lighandikelos
|
4e3db7a3de
|
add PluginRequirements for ssdt and svcscan. add missing _version to svcscan
|
2019-09-08 16:08:48 +01:00 |
|
|
Michael Lighandikelos
|
1d7f2a9582
|
use ntkrnlmp.object() instead of context.object(). remove config_path argument to list* functions
|
2019-09-08 16:08:48 +01:00 |
|
|
Michael Lighandikelos
|
50548bac73
|
reformat with yapf
|
2019-09-08 16:08:48 +01:00 |
|
|
Michael Lighandikelos
|
e71b72b3a7
|
add the windows callbacks plugin
|
2019-09-08 16:08:48 +01:00 |
|
|
Mike Auty
|
421af88c29
|
Classmethod make_subconfig so other classmethods can use it.
|
2019-09-08 14:50:48 +01:00 |
|
|
Mike Auty
|
10ea65a236
|
Remove unnecessary imports.
|
2019-09-08 14:19:58 +01:00 |
|
|
Mike Auty
|
ffc7682d61
|
Ensure that layers are automatically imported when needed.
|
2019-09-08 14:13:28 +01:00 |
|
|
Mike Auty
|
03bc3d927d
|
Improve the name of a handles exposed function.
|
2019-09-08 13:22:42 +01:00 |
|
|
Mike Auty
|
3318e9c4a5
|
Fix a typo introduced in 5362e2094e.
|
2019-09-08 01:58:46 +01:00 |
|
|
Mike Auty
|
189b8c4d69
|
Update the windows info plugin with classmethods.
|
2019-09-07 23:00:41 +01:00 |
|
|
Mike Auty
|
e922cef316
|
Improve docstrings for all plugins, and reformat all docstrings.
|
2019-09-07 22:59:54 +01:00 |
|
|
Mike Auty
|
dc0a809729
|
Printkey: Don't offer two options for the same value.
|
2019-09-07 22:05:09 +01:00 |
|
|
Mike Auty
|
959e1617fd
|
Shift one-time checks out of loops.
|
2019-09-07 12:40:32 +01:00 |
|
|
Mike Auty
|
fa58722848
|
Slight documentation fixes.
|
2019-09-04 23:53:18 +01:00 |
|
|
Mike Auty
|
c88044db5b
|
Update more API documentation.
|
2019-09-04 00:34:55 +01:00 |
|
|
Mike Auty
|
a362dc109a
|
Update API documentation.
|
2019-09-03 21:28:19 +01:00 |
|
|
Mike Auty
|
b158c58310
|
Ensure non-found keys mimic found key output a little closer.
|
2019-09-01 22:44:42 +01:00 |
|
|
Mike Auty
|
952a1b9d69
|
Move printkey recursion around to get proper tree depth.
|
2019-09-01 16:17:26 +01:00 |
|
|
Mike Auty
|
f040ceed96
|
Ensure keys and values are at the same level.
|
2019-09-01 16:10:58 +01:00 |
|
|
Mike Auty
|
3d7b2a520b
|
Ensure the tree output for printkey doesn't jump into deep layers.
|
2019-09-01 16:05:51 +01:00 |
|
|
Mike Auty
|
c2feba6651
|
Remove debugging calls from layerwriter plugin.
|
2019-09-01 15:50:29 +01:00 |
|
|
Mike Auty
|
5d75d617b3
|
Add in better support for sorting BaseAbsentValues.
|
2019-08-31 22:01:01 +01:00 |
|
|
Mike Auty
|
39c4d061a1
|
Convert registry.printkey hive_walker to a class method.
|
2019-08-31 14:32:35 +01:00 |
|
|
Mike Auty
|
0cb5ca995c
|
Correctly fix the intermediate file format versions.
|
2019-08-31 14:24:22 +01:00 |
|
|
Mike Auty
|
c47ead41b1
|
Move to the SemVer versioning scheme.
|
2019-08-31 13:03:51 +01:00 |
|
|
Mike Auty
|
a3caf39097
|
Use a mapping to determine kind to class.
|
2019-08-31 12:57:53 +01:00 |
|
|
Mike Auty
|
87d0970e72
|
Remove column indicies.
They didn't look useful, and given the values were ordered by their
position in the list, it seemed appropriate to do the same with column
names.
|
2019-08-30 11:30:58 +01:00 |
|
|
Mike Auty
|
35dbdfc69d
|
Add in PluginRequirement for proc_maps plugin.
|
2019-08-27 23:35:19 +01:00 |
|
|
Mike Auty
|
a9853eca50
|
Fix the copyright headers (and yapf) in the mac plugins.
|
2019-08-27 23:34:06 +01:00 |
|
|
Andrew Caseandikelos
|
6b4c13089d
|
add mac_proc_maps
|
2019-08-27 23:31:01 +01:00 |
|
|
Andrew Caseandikelos
|
07ece011a3
|
Add mac_tasks
|
2019-08-27 23:28:51 +01:00 |
|
|
Mike Auty
|
9cde94bceb
|
Change the license blurb on all files.
|
2019-08-27 23:11:00 +01:00 |
|
|
Mike Auty
|
387024fe96
|
Don't forget to return a default encoded blob.
|
2019-08-27 21:09:13 +01:00 |
|
|
Mike Auty
|
a5f0c7f1b9
|
Don't forget the linear layer.
|
2019-08-27 21:09:13 +01:00 |
|
|
Mike Auty
|
42b2fb120a
|
Swap TranslationLayerInterface decendents over to LinearMappedLayers
|
2019-08-27 21:09:13 +01:00 |
|