WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-08 02:37:39 +02:00
Code Issues Packages Projects Releases Wiki Activity
4,703 Commits 80 Branches 17 Tags
a2e99b2633a0099e19bbb5692d7919a9e5cd17cd
Commit Graph
4703 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Gustavo Moreira a2e99b2633 Linux: Object extensions: Fix type annotations for improved clarity and accuracy. 2024-11-12 16:13:50 +11:00
Gustavo Moreira 3216700d8b Linux: module object extension: Fix recursion call issue 2024-11-12 16:05:59 +11:00
Gustavo Moreira 106b3b3dd0 Linux: PageCache: Fix inode offset when logging an error 2024-11-12 16:01:04 +11:00
ikelosandGitHub 1e871af064 Merge pull request #1339 from volatilityfoundation/issues/issue1336 
Core: Limit capstone to compatible versions
 2024-11-08 11:23:41 +00:00
ikelosandGitHub 36c0b33bef Merge pull request #1341 from joren485/fix-typo-suspicious-threads 
Fix typo in SuspiciousThreads
 2024-11-08 10:15:45 +00:00
ikelosandGitHub eb5534dee4 Merge pull request #1340 from joren485/print-plugin-description 
Print plugin description on plugin --help
 2024-11-08 10:12:48 +00:00
Joren Vrancken b37ba26dd6 Fix typo in SuspiciousThreads 2024-11-08 10:19:05 +01:00
Joren Vrancken 74cf394ad0 Print plugin description on plugin --help 2024-11-08 10:06:59 +01:00
ikelosandGitHub 70188b0190 Merge pull request #1317 from gcmoreira/linux_boottime_support 
Linux - Boottime support
 2024-11-08 07:52:30 +00:00
ikelosandGitHub 932ea7f44a Merge pull request #1337 from joren485/update-amcache-description 
Improve windows.amcache plugin description
 2024-11-07 23:38:15 +00:00
Mike Auty 6494260d91 Core: Limit capstone to compatible versions 2024-11-07 23:34:30 +00:00
Joren Vrancken 20317e0d13 Improve windows.amcache plugin description 2024-11-07 18:05:36 +01:00
ikelosandGitHub efa4959517 Merge pull request #1300 from Abyss-W4tcher/dirty_ioc_windows_malfind 
[plugin] Add dirty state IoC detection to malfind
 2024-11-07 13:44:56 +00:00
Abyss Watcher a5253ac276 re-trigger black 2024-11-07 13:40:18 +01:00
ikelosandGitHub 130d1188e8 Merge pull request #1307 from dgmcdona/dgmcdona/windows-scheduled-tasks 
Windows: Adds scheduled tasks plugin
 2024-11-06 22:58:25 +00:00
Gustavo MoreiraandGitHub f05a1691b6 Merge branch 'develop' into linux_boottime_support 2024-11-05 06:05:50 -03:00
Gustavo Moreira c0fa2cfcd6 Linux: Boottime API: User linux_constanst import 2024-11-05 20:02:55 +11:00
Gustavo Moreira 2efb4e7d28 Merge branch 'develop' into linux_boottime_support 2024-11-05 19:56:15 +11:00
ikelosandGitHub a00a59cd23 Merge pull request #1329 from gcmoreira/linux_fix_merge_hidden_modules 
linux: hidden_modules: Fix mess with merge #1283
 2024-10-30 22:17:59 +00:00
Gustavo Moreira e183f81de6 linux: hidden_modules: Fix mess with merge #1283 2024-10-31 08:28:07 +11:00
ikelosandGitHub 0ee0f4488e Merge pull request #1283 from gcmoreira/linux_hidden_modules 
Add linux hidden_modules plugin
 2024-10-30 20:46:36 +00:00
Gustavo Moreira 4f86b3f1c0 Merge branch 'develop' into linux_hidden_modules 2024-10-31 07:26:11 +11:00
ikelosandGitHub 73f8ddbf47 Merge pull request #1328 from gcmoreira/linux_module_mod_mem_type_cache 
Linux refactory module extension object mod_mem_type cache
 2024-10-30 15:32:55 +00:00
ikelosandGitHub efe1e1e579 Merge pull request #1326 from gcmoreira/linux_pagecache_fix_typing 
Linux: PageCache API: Fix typing
 2024-10-30 15:31:24 +00:00
ikelosandGitHub 6414c66804 Merge pull request #1327 from gcmoreira/linux_vfsmount_fix_type_comparison 
Linux: vfsmount type: Fix type comparison
 2024-10-30 15:30:43 +00:00
Gustavo Moreira b098596687 Linux: module extension object: Add type annotation to the mod_mem_type property 2024-10-30 19:50:13 +11:00
Gustavo Moreira aecf8d4327 Linux: module extension object: Refactor to replace custom property cache with functools.cached_property that's available from Python 3.8 2024-10-30 18:53:20 +11:00
Gustavo Moreira 84a2233d04 Linux: vfsmount type: Fix type comparison 2024-10-30 16:25:28 +11:00
Gustavo Moreira cf94b078cd Linux: PageCache API: Fix typing 2024-10-30 16:11:03 +11:00
Gustavo Moreira a05397e8b6 Linux: Boottime API: Minor. Fix docstring typo 2024-10-30 15:57:00 +11:00
Gustavo Moreira e197fbaf5f Linux: Boottime API: Refactor __sub__ to operate through __add__() and negate() for improved clarity and reuse 2024-10-30 15:39:40 +11:00
Gustavo Moreira 7abe92cf2f Linux: Boottime API: Minor. Move negate() up 2024-10-30 15:36:46 +11:00
Gustavo Moreira 42d918c05d Linux: Boottime API: Refactor Timespec Methods. 
Move TimespecVol3 methods to an abstract class Timespec64Abstract, which is now inherited by Timespec64 and Timespec64Concrete.
 2024-10-30 15:21:13 +11:00
Gustavo Moreira 722ccd527e Linux: Extensions: Clean up the Linux constants imports in the object extension file 2024-10-30 12:56:09 +11:00
Gustavo Moreira 4b76b699ad Linux: hidden_modules: Add docstrings and comments to enhance the documentation of the module verification process. Move the hardcoded values to the linux constants file. 2024-10-30 09:56:05 +11:00
Gustavo Moreira f537c4a7e0 Merge branch 'develop' into linux_hidden_modules 2024-10-30 09:24:51 +11:00
Gustavo Moreira 8960bdab08 Linux: hidden_modules: Add a symbol table check for a recent dwarf2json version 2024-10-29 17:33:06 +11:00
Gustavo Moreira 1c6a548017 Linux: hidden_modules: Simplify symbols type checks 2024-10-29 17:30:47 +11:00
Gustavo Moreira dfd8a1f195 Linux: hidden_modules: Include kernel version and commit details 2024-10-29 17:22:48 +11:00
Gustavo Moreira cbe071ff3e Linux: hidden_modules: Import the whole architectures module 2024-10-29 17:19:30 +11:00
Gustavo Moreira 526007f948 Linux: hidden_modules: Use child_template 2024-10-29 16:41:47 +11:00
Gustavo Moreira bee2a398eb Linux: Minor: Add comment/header on each set of constants 2024-10-29 15:13:26 +11:00
Gustavo Moreira bb6dc9a595 Merge branch 'develop' into linux_boottime_support 2024-10-29 14:41:51 +11:00
Gustavo Moreira 57ffd5b939 Linux: Boottime API: Refactor TimespecVol3::negate() to return a new object instead of modifying the original. It also normalizes its values, aligning with the behavior of the other addition and subtraction operators 2024-10-29 14:24:16 +11:00
Gustavo Moreira c4274c942c Linux: Fix exception message in TimespecVol3::__sub__() 2024-10-29 13:49:58 +11:00
Gustavo Moreira 4895af47bd Linux: Boottime timeliner: Rollback timeliner event type changes and use the created time for the boot time plugin 2024-10-29 13:46:19 +11:00
David McDonald efdbc27b95 Windows: Scheduled tasks - removes special time type 
Removes the TaskSchedulerTime dataclass and discards the
is_localized value parsed with the timestamp.
 2024-10-25 14:15:06 -05:00
David McDonald 0413cc5e26 Windows: Scheduled tasks - code review fixes 2024-10-25 12:56:18 -05:00
ikelosandGitHub a1961401d5 Merge pull request #1320 from dgmcdona/dgmcdona/linux_pagecache_missing_iter_implementation 
Linux: Extensions - removes abc.Iterable definition
 2024-10-25 00:35:24 +01:00
David McDonald 4c2d2f98da Removes collections.abc.Iterable superclass 
Per @gcmoreira this is the correct fix vs the one previously proposed,
since self.vol.member_name cannot be used as the member name to
iterate this type.
 2024-10-24 15:39:15 -05:00