Mike Auty
a35afd4f34
Core: Bump framwork version after release branch
2023-03-08 20:40:04 +00:00
ikelos and GitHub
97347efff3
Merge pull request #915 from 0xThiebaut/pstree
...
Add PID filtering to `windows.pstree`
2023-03-08 19:51:48 +00:00
ikelos and GitHub
cd2e07da27
Merge pull request #881 from eve-mem/linux_envars
...
add linux envars
2023-03-08 18:59:05 +00:00
ikelos and GitHub
f028b0a4dc
Merge pull request #894 from eve-mem/linux_iomem
...
add linux.iomem plugin based on vol2 plugin by atcuno
2023-03-08 18:58:35 +00:00
ikelos and GitHub
fff64b6071
Merge pull request #921 from eve-mem/linux_psscan
...
Fix Linux psscan
2023-03-08 18:56:16 +00:00
Eve
32db4c0e5f
Fix black linting for linux.psscan.
2023-03-08 14:08:44 +00:00
Eve
abfe104eb9
Fix linux.pscan to find memory layer to scan using kernel layers dependencies rather than hard coded value.
2023-03-08 14:02:13 +00:00
Eve
bdf57f0716
Add extra debug messages to linux.psscan when finding symbol locations
2023-03-08 13:44:08 +00:00
Eve
a34fb84976
Fix linux.psscan to use kernel offset when finding symbol location
2023-03-08 13:39:00 +00:00
Mike Auty
3791b21695
Layers: Fix new snappy implementation error
2023-03-06 00:13:47 +00:00
ikelos and GitHub
56b899e738
Merge pull request #913 from volatilityfoundation/feature/snappy-ctypes
...
Feature/snappy ctypes
2023-03-05 11:35:45 +00:00
Maxime THIEBAUT
588b096254
Add PID filtering to windows.pstree
2023-02-25 20:52:13 +01:00
Mike Auty
1770edf6fa
Automagic: Fix typo in cache stats
2023-02-22 17:24:12 +00:00
Mike Auty
ad3773d898
Automagic: Improve identified AVML CodeQL issues
2023-02-19 10:23:04 +00:00
Mike Auty
c7252e9707
Automagic: Handle snappy for windows.
2023-02-19 10:03:23 +00:00
Mike Auty
471b19b037
Layers: Use ctypes for snappy support
2023-02-18 21:15:43 +00:00
Mike Auty
4734a3d1f8
Automagic: Fix cache issue with missing files
2023-02-18 21:14:02 +00:00
ikelos and GitHub
4f028416a3
Merge pull request #907 from agearhe/patch-1
...
Update simple-plugin.rst
2023-02-10 08:03:05 +00:00
Ashley and GitHub
d6ebad8235
Update simple-plugin.rst
...
Very minor typo fix.
2023-02-09 21:19:11 -07:00
ikelos and GitHub
0245988fab
Merge pull request #882 from eve-mem/linux_psscan
...
add linux.psscan
2023-02-03 10:51:47 +00:00
Eve
9e5a98ca40
Update linux.psscan with black linting and version
2023-02-03 10:51:18 +00:00
Eve
e81935869a
Update linux.psscan to find kernel layer name correctly
2023-02-03 10:37:29 +00:00
Eve
4bb6d93e12
Update linux.psscan
2023-02-03 10:18:06 +00:00
ikelos and GitHub
78d75a7b33
Merge pull request #904 from paulkermann/bugfix/csv-escape
...
Add escapechar to csvwriter
2023-02-03 09:46:40 +00:00
Mike Auty
aac4c73528
Actions: Bump black checkout to Node16/wqv3
2023-02-03 09:22:30 +00:00
Mike Auty
43a17384c3
Core: Update to black 23.1.0 which removes many blank lines and parentheses
2023-02-03 00:35:49 +00:00
ikelos and GitHub
2a459266ba
Merge pull request #905 from volatilityfoundation/feature/canonical-helper
...
Add in the canonical helper functions for translating between volatility address ranges and intel canonical addresses
2023-02-03 00:29:07 +00:00
Eve
b375c6f71d
Update linux.iomem
2023-02-01 09:43:02 +00:00
Mike Auty
3297ba02e7
Core: Rather than scheduling it daily, only do it on commits
2023-01-29 12:46:06 +00:00
Mike Auty
c2a1afb0ba
Core: Update codeql action to only run once a week
2023-01-29 12:42:17 +00:00
Eve
1d4aa72c85
update linux.iomem with basic smear protection
2023-01-27 11:07:05 +00:00
Paul Kermann
728e8b608a
black reformat
2023-01-17 16:11:08 +02:00
Paul Kermann
e16887414e
add escapechar
2023-01-17 10:15:03 +02:00
ikelos and GitHub
91ec909b3c
Merge pull request #903 from paulkermann/fix/missing-import
...
Fix missing import
2023-01-16 11:08:05 +00:00
Paul Kermann
f036acdeb8
missing import
2023-01-16 13:02:20 +02:00
Mike Auty
4cafc982f4
Windows: Fix up callbacks typos and typing info
2023-01-16 10:47:09 +00:00
ikelos and GitHub
9f607d6903
Merge pull request #902 from paulkermann/bugfix/cmregisterscallbacks_smearing
...
Handle smearing in volatility callbacks plugin
2023-01-16 10:42:40 +00:00
Paul Kermann
5e33a98481
change default value to None
2023-01-16 12:39:08 +02:00
ikelos and GitHub
648fa78c95
Merge pull request #900 from paulkermann/improv/extra_logging_symbol_table_from_offset
...
Add debug message for symbol_table_from_offset
2023-01-16 10:18:19 +00:00
Paul Kermann
5aca49388e
fix smearing
2023-01-16 12:01:45 +02:00
Paul Kermann
bd291c43d5
added debug message
2023-01-16 10:15:36 +02:00
Mike Auty
1641a6e4c4
Windows: Fix up black issue with vadinfo
2023-01-12 19:58:51 +00:00
ikelos and GitHub
3cf47b9260
Merge pull request #835 from paulkermann/improv/vadinfo_containing_address
...
Added new containing address flag to vadinfo plugin
2023-01-12 19:05:20 +00:00
ikelos and GitHub
adbc33ceed
Merge branch 'develop' into improv/vadinfo_containing_address
2023-01-12 19:05:11 +00:00
Mike Auty
a1eeecf6de
Layers: Fix uncaught exception in Elf layer
2023-01-09 21:32:19 +00:00
Mike Auty
cd89e39ee0
Layers: Fix QEMU layer cutting off the last byte of the config
2023-01-06 22:10:50 +00:00
Mike Auty
af3b70320e
linux: Apply black linting to outstanding files
2023-01-06 10:18:17 +00:00
ikelos and GitHub
a9928d66f1
Merge pull request #597 from gcmoreira/linux_sockstats_plugin
...
Linux sockstats plugin
Merging without black linting, but will add that as soon as it's landed. This was waiting on review but the decision to move forward was made on Wednesday.
2023-01-06 10:16:14 +00:00
ikelos and GitHub
a19c2b8d14
Merge branch 'develop' into linux_sockstats_plugin
2023-01-06 09:35:37 +00:00
Eve
0163f0b9e6
add linux.iomem plugin based on vol2 plugin by atcuno
2023-01-05 13:43:47 +00:00
Mike Auty