 Abyss Watcher
|
a68a482632
|
fix #509 and simplify logic in _load_segments
|
2024-06-20 04:00:20 +02:00 |
|
|
ikelosandGitHub
|
b187dd9686
|
Merge pull request #1165 from volatilityfoundation/notes_bleed_through
The notes variable is not reset for each VAD, allowing bleed through …
|
2024-06-15 10:51:46 +01:00 |
|
|
atcuno
|
59f6a05068
|
The notes variable is not reset for each VAD, allowing bleed through of a previously set note value to VADs enumerated afterwards
|
2024-06-14 16:45:54 -05:00 |
|
|
ikelosandGitHub
|
07794c7b29
|
Merge pull request #1164 from volatilityfoundation/fix_ads_rendering
Prevent backtrace in ADS scanning when contents cannot be recovered. …
|
2024-06-14 00:11:36 +01:00 |
|
|
atcuno
|
04ca0214eb
|
Prevent backtrace in ADS scanning when contents cannot be recovered. Fix missing parantheses as well as format_hints call on bad value
|
2024-06-13 15:24:32 -05:00 |
|
|
Mike Auty
|
0ee3573be2
|
Revert "Intel layer: Fix. This if statement will never be executed unless "minimum_address > maximum_address" which doesn't make sense to me."
This reverts commit e5a5b89577.
|
2024-06-12 23:14:45 +01:00 |
|
|
ikelosandGitHub
|
0808e873fa
|
Merge pull request #1141 from gcmoreira/layers_several_fixes
Layers - Several fixes around maximum_address and chunk sizes
|
2024-06-11 23:15:18 +01:00 |
|
|
ikelosandGitHub
|
05ba1f9f8f
|
Merge pull request #1160 from eve-mem/windows_ldrmodules_issue_1158
Windows: ldrmodules update exception handling to InvalidAddressException
|
2024-06-11 23:02:42 +01:00 |
|
|
Eve
|
e4aac0c976
|
Windows: ldrmodules update exception handling to InvalidAddressException
|
2024-06-10 11:30:15 +01:00 |
|
|
Gustavo Moreira
|
77fb0b7b26
|
Update the output filename (preferred_filename) so that we can notify it correctly to the user
|
2024-06-10 18:37:38 +10:00 |
|
|
Gustavo Moreira
|
ab84070df3
|
Revert "Store the real/final output filename so that we can notify it correctly to the user"
This reverts commit d7aae3a982.
|
2024-06-10 17:25:05 +10:00 |
|
|
Gustavo Moreira
|
a72062f288
|
Revert "LayerWriter plugin: Fix --output argument. It's referenced in the code but never mentioned as a requirement"
This reverts commit 6d22347ce6.
|
2024-06-10 17:20:47 +10:00 |
|
|
ikelosandGitHub
|
543a39485b
|
Merge pull request #1149 from volatilityfoundation/getcellroutine
Add a new getcellroutine plugin that reports hooked GetCellRoutine ha…
|
2024-06-09 23:21:35 +01:00 |
|
|
ikelosandGitHub
|
faadfab481
|
Merge pull request #1151 from volatilityfoundation/feature/linux-replace-intunsignedlong
Linux: Replace uses of specific types with the more generic pointer
|
2024-06-09 23:20:04 +01:00 |
|
|
ikelosandGitHub
|
7c2eca4932
|
Merge pull request #1150 from volatilityfoundation/feature/vmscan
Generic: Add vmscan plugin
|
2024-06-09 23:17:57 +01:00 |
|
|
Mike Auty
|
771ed10b44
|
Core: Bump to 2.7.1
|
2024-05-29 20:44:04 +01:00 |
|
|
Mike Auty
|
35122df27d
|
Infra: Upgrade deprecated githubs actions 2
|
2024-05-29 20:42:25 +01:00 |
|
|
Mike Auty
|
57b3a99a1e
|
Infra: Upgrade deprecated githubs actions
|
2024-05-29 20:40:44 +01:00 |
|
|
Mike Auty
|
08493e9c3a
|
Automagic: Do some slight gymnastics to get the true value of the pointer
|
2024-05-21 23:13:31 +01:00 |
|
|
Mike Auty
|
c6d207d170
|
Generic: Fix code scanning issue with vmscan
|
2024-05-21 09:06:01 +01:00 |
|
|
Mike Auty
|
c5a45f91fc
|
Linux: Replace uses of specific types with the more generic pointer
|
2024-05-20 21:09:00 +01:00 |
|
|
Mike Auty
|
3eab0671b4
|
Generic: Add vmscan plugin
|
2024-05-20 20:47:12 +01:00 |
|
|
atcuno
|
901b0fd6ba
|
Fix year in header
|
2024-05-19 15:11:06 -05:00 |
|
|
atcuno
|
bc8666b64a
|
Fixes for black
|
2024-05-19 14:24:53 -05:00 |
|
|
atcuno
|
4ed7d40ecb
|
Fixes for black
|
2024-05-19 14:23:21 -05:00 |
|
|
atcuno
|
47eb42204e
|
Fixes for black
|
2024-05-19 14:21:03 -05:00 |
|
|
atcuno
|
c2b2321622
|
Add a new getcellroutine plugin that reports hooked GetCellRoutine handlers of memory mapped Windows registry hives
|
2024-05-19 14:09:14 -05:00 |
|
|
ikelosandGitHub
|
dc7a3878fa
|
Merge pull request #1147 from eve-mem/windows_handles_debug_logging
Windows: add extra debugging messages to handles plugin
|
2024-05-16 23:09:24 +01:00 |
|
|
Eve
|
5d5fa96e36
|
Windows: add extra debugging messages to handles plugin, ref #1146
|
2024-05-16 09:19:59 +01:00 |
|
|
ikelosandGitHub
|
1b3ba6ab2e
|
Merge pull request #1145 from volatilityfoundation/handles_bad_read_check
Correctly check for a failed read
|
2024-05-09 22:37:15 +01:00 |
|
|
atcuno
|
2b165a56be
|
Fix pre-existing formatting issue from black checks
|
2024-05-09 14:53:24 -05:00 |
|
|
atcuno
|
4c937a922d
|
Correctly check for a failed read
|
2024-05-09 14:47:56 -05:00 |
|
|
ikelosandGitHub
|
1c4fd269d0
|
Merge pull request #1144 from volatilityfoundation/timerliner_missing_macb_times_fix
Add a default 0 value to macb columns to avoid mactime not reporting …
|
2024-05-09 16:35:40 +01:00 |
|
|
atcuno
|
3933061551
|
Add a default 0 value to macb columns to avoid mactime not reporting timeline entries
|
2024-05-09 09:17:32 -05:00 |
|
|
ikelosandGitHub
|
a66aa02050
|
Merge pull request #1143 from volatilityfoundation/dumpfiles_dump_only_once_per_file_object
Prevent duplicate processing of the same file object
|
2024-05-08 21:26:45 +01:00 |
|
|
atcuno
|
3f3f1a9c0d
|
Prevent duplicate processing of the same file object
|
2024-05-08 11:23:01 -05:00 |
|
|
Gustavo Moreira
|
85052b6238
|
LayerWriter: Fix missing optional flag for the --output argument
|
2024-05-07 08:12:31 +10:00 |
|
|
Gustavo Moreira
|
d7aae3a982
|
Store the real/final output filename so that we can notify it correctly to the user
|
2024-05-06 13:11:52 +10:00 |
|
|
Gustavo Moreira
|
a6c77c4884
|
LayerWriter: Fix - Last chunk size is wrongly calculated
|
2024-05-06 13:09:45 +10:00 |
|
|
Gustavo Moreira
|
f116c08a7e
|
NonLinearlySegmentedLayer: Fix maximum addresses in segmented layers
|
2024-05-06 13:07:23 +10:00 |
|
|
Gustavo Moreira
|
e5a5b89577
|
Intel layer: Fix. This if statement will never be executed unless "minimum_address > maximum_address" which doesn't make sense to me.
|
2024-05-06 13:06:02 +10:00 |
|
|
Gustavo Moreira
|
6d22347ce6
|
LayerWriter plugin: Fix --output argument. It's referenced in the code but never mentioned as a requirement
|
2024-05-06 11:27:15 +10:00 |
|
|
Gustavo Moreira
|
1246b20b65
|
LayerWriter plugin: Code improvements
|
2024-05-06 11:25:45 +10:00 |
|
|
Gustavo Moreira
|
32a5f131fd
|
LayerWriter plugin: Fix log wrong (non-existent) variable
|
2024-05-06 11:17:51 +10:00 |
|
|
Gustavo Moreira
|
c7f29936dc
|
CommandLine: Fix issue when --output filename doesn't contain an extension.
If the argument is i.e. "--output aaa" ... it returned ".aaa" (hidden filename in linux) then "-1.aaa", "-2.aaa", etc.
|
2024-05-06 11:15:45 +10:00 |
|
|
ikelosandGitHub
|
1c5c57e155
|
Merge pull request #1140 from digitalisx/develop
Fix: typo for `CITATION.cff`
|
2024-04-30 20:34:45 +01:00 |
|
|
Donghyun KimandGitHub
|
314725f0c5
|
Fix: typo for CITATION.cff
|
2024-05-01 04:30:36 +09:00 |
|
|
Mike Auty
|
35c5837218
|
Core: Default to completely clearing the cache when requested
|
2024-04-30 12:34:46 +01:00 |
|
|
Mike Auty
|
8f0d1b37cc
|
Core: Improve error handling for proxy authentication issue
|
2024-04-28 20:53:22 +01:00 |
|
|
Mike Auty
|
974e6a4107
|
Core: When clearing the cache, actually clear cached files
|
2024-04-21 18:28:13 +01:00 |
|