 Andrew Case
|
f6aa6d87e8
|
Add --tmpfs-only flag to RecoverFs to replace tmpfs plugin of Volatility 2
|
2025-03-07 04:19:28 +00:00 |
|
|
Abyss Watcher
|
2bf0a26c73
|
typos
|
2025-02-15 15:28:23 +01:00 |
|
|
Abyss Watcher
|
b86e54e427
|
extra checks and debug messages
|
2025-02-15 15:25:26 +01:00 |
|
|
Abyss Watcher
|
c2f8697cc5
|
normalize symlinks by relying on purepath
|
2025-02-15 15:24:53 +01:00 |
|
|
Abyss Watcher
|
51b66f7573
|
add symlink details in description
|
2025-02-15 14:14:02 +01:00 |
|
|
Abyss Watcher
|
9484430036
|
convert private classmethods to simple methods
|
2025-02-15 13:16:58 +01:00 |
|
|
Abyss Watcher
|
1530e62a86
|
typo
|
2025-02-11 17:59:19 +01:00 |
|
|
Abyss Watcher
|
de42e58bfa
|
require framework v2.21.0 for recoverfs
|
2025-02-11 17:54:19 +01:00 |
|
|
Abyss Watcher
|
999f3d0d2c
|
add superblock or device numbers path prepending
|
2025-02-11 17:48:34 +01:00 |
|
|
Abyss Watcher
|
64d8a675a7
|
initial linux.pagecache.recoverfs
|
2025-02-10 11:49:23 +01:00 |
|
|
Abyss Watcher
|
f1b34df26b
|
2.0.2 -> 3.0.0 InodePages bump
|
2025-02-09 13:49:24 +01:00 |
|
|
Abyss Watcher
|
826281b3b9
|
add and use write_inode_content_to_stream
|
2025-02-09 13:48:59 +01:00 |
|
|
Abyss Watcher
|
223f2d69bb
|
switch to context and layer_name calling convention
|
2025-02-09 13:47:37 +01:00 |
|
|
Abyss Watcher
|
03f6fa9533
|
1.0.3 -> 1.1.0 Files bump
|
2025-02-09 13:45:46 +01:00 |
|
|
Abyss Watcher
|
8d9d0f5689
|
add and use follow_symlinks parameter
|
2025-02-09 13:45:23 +01:00 |
|
|
Abyss Watcher
|
b9d4605b8a
|
switch to InodeUser.format_symlink
|
2025-02-09 13:44:16 +01:00 |
|
|
Abyss Watcher
|
cd9ba823a1
|
add inode_size and format_symlink to InodeUser
|
2025-02-09 13:42:47 +01:00 |
|
|
Abyss Watcher
|
8d23d5b808
|
use architectures.LINUX_ARCHS
|
2025-02-09 13:41:46 +01:00 |
|
|
Mike Auty
|
1ac2dbc49c
|
Shift exposed staticmethods to classmethods
|
2025-01-26 13:44:33 +00:00 |
|
|
Gustavo Moreira
|
ec7a101eb9
|
linux: page_cache.InodePages plugin: Remove unnecesary casting
|
2025-01-20 11:05:51 +11:00 |
|
|
Gustavo Moreira
|
bf76aad1e2
|
linux: page_cache.Files plugin: Ensure the inode's i_link pointer is readable
|
2025-01-20 11:05:46 +11:00 |
|
|
Gustavo Moreira
|
5502a54198
|
linux: page_cache plugin: Refactor to make _generator more readable
|
2025-01-16 19:50:21 +11:00 |
|
|
Gustavo Moreira
|
c1497410b4
|
linux: page_cache plugin: lazy file initialization and avoid redundant inode page cache walk during dumps not showing output with dumping to file.
|
2025-01-16 19:50:14 +11:00 |
|
|
Gustavo Moreira
|
6608487862
|
Linux: pagecache: Fix issue with incosistent inode page caches
|
2025-01-15 15:09:37 +11:00 |
|
|
Gustavo Moreira
|
529b67fc96
|
Linux: pagecache: Fix issue reported in #1527
|
2025-01-14 13:30:10 +11:00 |
|
|
Gustavo Moreira
|
d21fdb4211
|
Linux: pagecache: Harden Page Cache API to consistently yield valid entries
|
2025-01-14 13:30:04 +11:00 |
|
|
Arthur Deierlein
|
ad7daafc50
|
linted with ruff (ruff check . --fix)
|
2024-12-17 22:55:38 +01:00 |
|
|
TheMythologist
|
0255151ef5
|
Fix: Error early if no inodes are found in linux.pagecache.InodePages plugin
|
2024-12-17 12:15:46 +08:00 |
|
|
Gustavo Moreira
|
267c5a60c3
|
Linux: PageCache: Remove unused variable
|
2024-12-17 10:05:38 +11:00 |
|
|
Gustavo Moreira
|
9d0cd4b4c9
|
Linux: PageCache: Update inode plugin to conform to framework dumping convention
|
2024-12-12 11:17:15 +11:00 |
|
|
Gustavo Moreira
|
106b3b3dd0
|
Linux: PageCache: Fix inode offset when logging an error
|
2024-11-12 16:01:04 +11:00 |
|
|
Gustavo Moreira
|
7b2e259c6d
|
fix wrong variable names
|
2024-09-12 17:06:29 +10:00 |
|
|
Gustavo Moreira
|
ebb9f0c201
|
Fix typo in timeliner function
|
2024-09-12 17:05:45 +10:00 |
|
|
Gustavo Moreira
|
c86d973329
|
Linux page cache plugins pointer verification improvements
|
2024-09-11 15:54:17 +10:00 |
|
|
Gustavo Moreira
|
3bf9f8cec0
|
PR review fixes: Add typing info to pagecache.Files._follow_symlink()
|
2024-08-24 12:03:10 +10:00 |
|
|
Gustavo Moreira
|
90b327e632
|
PR review fixes: Make mountinfo.get_superblocks() a classmethod and adapt the code using it.
|
2024-08-24 11:45:29 +10:00 |
|
|
Gustavo Moreira
|
d627f243e2
|
PR review fixes: Add typing info to the get_inodes() class method.
|
2024-08-24 10:55:01 +10:00 |
|
|
Gustavo Moreira
|
feae6a9aa0
|
PR review fixes: Use plugin's open method instead of the builtin open()
|
2024-08-24 00:42:52 +10:00 |
|
|
Gustavo Moreira
|
8f9d565f63
|
PR review fixes: Fix minor typo to match verb form from other docstrings
|
2024-08-10 00:49:18 -07:00 |
|
|
Gustavo Moreira
|
805b3514c3
|
PR review fixes: Fix page flags list method name, this was introduced earlier in another commit of this PR.
|
2024-08-07 00:23:19 -07:00 |
|
|
Gustavo Moreira
|
f737b88d03
|
PR review fixes: Improve _walk_dentry() and get_inodes() variable names, arguments and return values
|
2024-08-06 23:12:01 -07:00 |
|
|
Gustavo Moreira
|
cc04f665e3
|
Fix inode type
|
2024-08-03 23:47:28 +10:00 |
|
|
Gustavo Moreira
|
ac27d6663a
|
Linux: Add two page cache plugins, linux.pagecache.Files and linux.pagecache.InodePages
|
2024-08-03 21:26:29 +10:00 |
|