Commit Graph
3028 Commits
Author SHA1 Message Date
Mike Auty a31f846b14 Documentation: Reorganize and consolidate pages 2022-01-16 00:47:40 +00:00
Mike Auty a9e5589260 Documentation: Add summary table for linux/mac ISF creation 2022-01-15 22:02:02 +00:00
Mike Auty 8791631db5 Documentation: More minor fixes 2022-01-15 21:40:25 +00:00
Mike Auty c93e20ab36 Plugins: linux.kmsg update documentation and reformat 2022-01-15 21:14:52 +00:00
Mike Auty 1f7acf2779 Documentation: Update sphinx requirement to 4.0.0 2022-01-15 21:02:20 +00:00
ikelosandGitHub 0abff16580 Merge pull request #615 from volatilityfoundation/feature/yara-rules-update
Plugins: Update yarascan options
2022-01-13 15:21:41 +00:00
Mike Auty f67f1e242d Documentation: Ensure the doc reqs are included in s_dist builds 2022-01-12 22:11:25 +00:00
Mike Auty 8920fd634a Merge branch 'release/v2.0.0' into develop 2022-01-12 21:39:12 +00:00
Mike Auty d469d9c597 Documentation: Update master branch to stable branch 2022-01-12 21:13:32 +00:00
Mike Auty 1f9d6f5baa Documentation: Update master branch to stable branch 2022-01-12 21:13:05 +00:00
Mike Auty 3294d0a2c2 Documentation: Update README.md before release 2022-01-12 21:06:53 +00:00
Mike Auty a0b66f33f9 Documentation: Update README.md before release 2022-01-12 21:06:20 +00:00
Mike Auty d34030e9ea Plugins: Add note to improve yarascan in the future 2022-01-09 20:53:40 +00:00
Mike Auty 114a8d7c8d Plugins: Update yarascan options
Add in a yara_source option in the process method.  Unfortunately
yara_rules is still poorly named, but would require a major version
bump, so to avoid major disruption, we're just adding the yara_source
option instead.
2022-01-09 20:32:34 +00:00
Mike Auty e91e65d64b Renderers: Make appending rows massively more efficient
Previously we were generating the list of children (for most likely the
root node) for every single append statement, during which we were
recalculating the length of the list, twice.  In plugins that output a
lot of rows this would add an enourmous overhead (that likely grew as
the length of the output grew).  Without this overhead, the time taken
for the TreeGrid._append method went from 1230.0s to 2.4s.
2021-12-31 22:48:21 +00:00
ikelosandGitHub 168b0d0b05 Merge pull request #611 from volatilityfoundation/issues/issue604
Renderers: Make appending rows massively more efficient
2021-12-31 22:47:50 +00:00
Mike Auty 65048e3d49 Merge branch 'release/v2.0.0' into develop 2021-12-31 00:59:47 +00:00
Mike Auty dd13b427e0 Volshell: Update the linux pslist requirement 2021-12-31 00:57:18 +00:00
Mike Auty ac7127d05a Volshell: Sync errors with the CLI concerning unsatisfied requirements
Fixes #607
2021-12-31 00:55:23 +00:00
Mike Auty 571ab8f659 Volshell: Update the linux pslist requirement 2021-12-31 00:51:21 +00:00
Mike Auty c13b49262d Renderers: Make appending rows massively more efficient
Previously we were generating the list of children (for most likely the
root node) for every single append statement, during which we were
recalculating the length of the list, twice.  In plugins that output a
lot of rows this would add an enourmous overhead (that likely grew as
the length of the output grew).  Without this overhead, the time taken
for the TreeGrid._append method went from 1230.0s to 2.4s.
2021-12-30 01:47:51 +00:00
Mike Auty c8dd8d08bd Volshell: Synchronize with the standard CLI cache clearing 2021-12-29 22:26:28 +00:00
ikelosandGitHub 8134b8e2d0 Merge pull request #605 from cstation/qemu_additional_sections
QEMU: Add 'dirty-bitmap' and 'pbs-state', handle page_size more consistently
2021-12-29 21:30:15 +00:00
cstation a96f5de6a0 QEMU: Add 'dirty-bitmap' and 'pbs-state', handle page_size more consistently 2021-12-29 22:19:38 +01:00
Mike Auty 3bc90b8200 Plugins: Add more information to layerwriter --list 2021-12-20 20:38:12 +00:00
ikelosandGitHub fc12956706 Merge pull request #603 from volatilityfoundation/feature/none-renderer
CLI: Add in None renderer to avoid text output
2021-12-19 22:21:56 +00:00
Mike Auty 997b857246 CLI: Add in None renderer to avoid text output 2021-12-19 22:16:53 +00:00
ikelosandGitHub 3c11099e66 Merge pull request #596 from gcmoreira/assorted-fixes
Assorted fixes
2021-12-12 22:54:18 +00:00
Gustavo Moreira c5c1f355ef Changing not not for a more explicit if statement 2021-12-13 09:51:25 +11:00
Gustavo Moreira d2ad867d1e my mistake, it should be negated twice to get True when is valid 2021-12-10 13:20:43 +11:00
Gustavo Moreira e1942976bf wrong comparison with None 2021-12-10 13:10:47 +11:00
Gustavo Moreira 8e7aff4ad8 not in please 2021-12-10 13:09:41 +11:00
Gustavo Moreira 36ac92c11c undefined layers module 2021-12-10 13:06:38 +11:00
Gustavo Moreira 17e0b04cb3 undefined glob module 2021-12-10 13:06:15 +11:00
Mike Auty 581251cb05 Linux: Fix long standing typo (thanks to @gcmoreira) 2021-12-08 23:34:53 +00:00
Mike Auty 832bdc2ab1 Linux: Fix long standing typo (thanks to @gcmoreira) 2021-12-08 23:34:23 +00:00
ikelosandGitHub 32ec4afed3 Merge pull request #586 from volatilityfoundation/issues/qemu-speed-up
Layers: Speed up qemu by not bisecting
2021-12-08 23:08:32 +00:00
ikelosandGitHub 8f083ed1dd Merge pull request #476 from japhlange/issues/issue474_netscan_win8sp1x64
adds netstat symbols to Win8x64 ISF files
2021-12-06 20:10:25 +00:00
Jan 125658ee0d re-adds accidentally deleted file 2021-12-06 21:09:39 +01:00
Jan be4d014f1a improves decision making when to inspect driver pe header based on version_dict 2021-12-06 17:18:39 +01:00
Jan 6cd2d940f3 adds proper version requirement for verinfo 2021-12-06 17:18:38 +01:00
Jan 3aac7b228e adds a few clarifying comments and handles errors better 2021-12-06 17:16:23 +01:00
Jan ee65793fd8 adds new ISF for tcpip.sys 6.3.9600.19935 + distinguisher 2021-12-06 17:16:20 +01:00
Jan 90ad7b1609 reverts pointless createtime offset change 2021-12-06 17:14:40 +01:00
Jan fffb375909 adds netstat symbols to Win8x64 ISF files 2021-12-06 17:14:40 +01:00
Mike Auty 96820e2804 Plugins: Bump skeleton_key_check to 2.0.0 2021-12-03 16:02:06 +00:00
ikelosandGitHub da1216a747 Merge pull request #594 from a5hlynx/develop
update version to 2.0.0
2021-12-03 15:58:15 +00:00
a5hlynx 680349016e update version to 2.0.0 2021-12-04 00:29:00 +09:00
Mike Auty f821ac6072 Layers: Comment out unused code in AVML 2021-11-17 20:42:11 +00:00
Mike Auty 8d48faa0d9 Layers: Close file on layer destruction to prevent ResourceWarning 2021-11-17 13:52:25 +00:00