 ikelosandGitHub
|
a77a1ae301
|
Merge pull request #920 from volatilityfoundation/issues/issue886
Windows: Memoize part of the pool handling code
|
2023-03-19 19:29:41 +00:00 |
|
|
Mike Auty
|
d9a365d96f
|
Linux: Rename linux.envars to linux.envvars
|
2023-03-11 17:33:20 +00:00 |
|
|
Mike Auty
|
9216bab61b
|
Core: Improve import exception reporting
|
2023-03-11 17:32:46 +00:00 |
|
|
Mike Auty
|
46f56770af
|
Core: Pointer is_readable should check the native layer
|
2023-03-11 15:18:58 +00:00 |
|
|
Mike Auty
|
36ec516470
|
Linux: Fix psscan task native_layer
|
2023-03-11 15:17:24 +00:00 |
|
|
Mike Auty
|
99417cdfcc
|
Linux: Psscan check parent pointer is valid
|
2023-03-11 14:17:37 +00:00 |
|
|
Mike Auty
|
b8755ac574
|
Linux: fix black lint issues
|
2023-03-08 20:42:24 +00:00 |
|
|
Mike Auty
|
a35afd4f34
|
Core: Bump framwork version after release branch
|
2023-03-08 20:40:04 +00:00 |
|
|
ikelosandGitHub
|
97347efff3
|
Merge pull request #915 from 0xThiebaut/pstree
Add PID filtering to `windows.pstree`
|
2023-03-08 19:51:48 +00:00 |
|
|
ikelosandGitHub
|
cd2e07da27
|
Merge pull request #881 from eve-mem/linux_envars
add linux envars
|
2023-03-08 18:59:05 +00:00 |
|
|
ikelosandGitHub
|
f028b0a4dc
|
Merge pull request #894 from eve-mem/linux_iomem
add linux.iomem plugin based on vol2 plugin by atcuno
|
2023-03-08 18:58:35 +00:00 |
|
|
ikelosandGitHub
|
fff64b6071
|
Merge pull request #921 from eve-mem/linux_psscan
Fix Linux psscan
|
2023-03-08 18:56:16 +00:00 |
|
|
Eve
|
32db4c0e5f
|
Fix black linting for linux.psscan.
|
2023-03-08 14:08:44 +00:00 |
|
|
Eve
|
abfe104eb9
|
Fix linux.pscan to find memory layer to scan using kernel layers dependencies rather than hard coded value.
|
2023-03-08 14:02:13 +00:00 |
|
|
Eve
|
bdf57f0716
|
Add extra debug messages to linux.psscan when finding symbol locations
|
2023-03-08 13:44:08 +00:00 |
|
|
Eve
|
a34fb84976
|
Fix linux.psscan to use kernel offset when finding symbol location
|
2023-03-08 13:39:00 +00:00 |
|
|
Mike Auty
|
21e34ec605
|
Windows: Fix up double adding the symbol from context.module
|
2023-03-06 00:43:45 +00:00 |
|
|
Mike Auty
|
f3dea3619c
|
Windows: Memoize part of the pool handling code
|
2023-03-06 00:14:03 +00:00 |
|
|
Mike Auty
|
3791b21695
|
Layers: Fix new snappy implementation error
|
2023-03-06 00:13:47 +00:00 |
|
|
ikelosandGitHub
|
56b899e738
|
Merge pull request #913 from volatilityfoundation/feature/snappy-ctypes
Feature/snappy ctypes
|
2023-03-05 11:35:45 +00:00 |
|
|
Maxime THIEBAUT
|
588b096254
|
Add PID filtering to windows.pstree
|
2023-02-25 20:52:13 +01:00 |
|
|
Mike Auty
|
1770edf6fa
|
Automagic: Fix typo in cache stats
|
2023-02-22 17:24:12 +00:00 |
|
|
Mike Auty
|
ad3773d898
|
Automagic: Improve identified AVML CodeQL issues
|
2023-02-19 10:23:04 +00:00 |
|
|
Mike Auty
|
c7252e9707
|
Automagic: Handle snappy for windows.
|
2023-02-19 10:03:23 +00:00 |
|
|
Mike Auty
|
471b19b037
|
Layers: Use ctypes for snappy support
|
2023-02-18 21:15:43 +00:00 |
|
|
Mike Auty
|
4734a3d1f8
|
Automagic: Fix cache issue with missing files
|
2023-02-18 21:14:02 +00:00 |
|
|
ikelosandGitHub
|
4f028416a3
|
Merge pull request #907 from agearhe/patch-1
Update simple-plugin.rst
|
2023-02-10 08:03:05 +00:00 |
|
|
AshleyandGitHub
|
d6ebad8235
|
Update simple-plugin.rst
Very minor typo fix.
|
2023-02-09 21:19:11 -07:00 |
|
|
ikelosandGitHub
|
0245988fab
|
Merge pull request #882 from eve-mem/linux_psscan
add linux.psscan
|
2023-02-03 10:51:47 +00:00 |
|
|
Eve
|
9e5a98ca40
|
Update linux.psscan with black linting and version
|
2023-02-03 10:51:18 +00:00 |
|
|
Eve
|
e81935869a
|
Update linux.psscan to find kernel layer name correctly
|
2023-02-03 10:37:29 +00:00 |
|
|
Eve
|
4bb6d93e12
|
Update linux.psscan
|
2023-02-03 10:18:06 +00:00 |
|
|
ikelosandGitHub
|
78d75a7b33
|
Merge pull request #904 from paulkermann/bugfix/csv-escape
Add escapechar to csvwriter
|
2023-02-03 09:46:40 +00:00 |
|
|
Mike Auty
|
aac4c73528
|
Actions: Bump black checkout to Node16/wqv3
|
2023-02-03 09:22:30 +00:00 |
|
|
Mike Auty
|
43a17384c3
|
Core: Update to black 23.1.0 which removes many blank lines and parentheses
|
2023-02-03 00:35:49 +00:00 |
|
|
ikelosandGitHub
|
2a459266ba
|
Merge pull request #905 from volatilityfoundation/feature/canonical-helper
Add in the canonical helper functions for translating between volatility address ranges and intel canonical addresses
|
2023-02-03 00:29:07 +00:00 |
|
|
Eve
|
b375c6f71d
|
Update linux.iomem
|
2023-02-01 09:43:02 +00:00 |
|
|
Mike Auty
|
3297ba02e7
|
Core: Rather than scheduling it daily, only do it on commits
|
2023-01-29 12:46:06 +00:00 |
|
|
Mike Auty
|
c2a1afb0ba
|
Core: Update codeql action to only run once a week
|
2023-01-29 12:42:17 +00:00 |
|
|
Eve
|
1d4aa72c85
|
update linux.iomem with basic smear protection
|
2023-01-27 11:07:05 +00:00 |
|
|
Paul Kermann
|
728e8b608a
|
black reformat
|
2023-01-17 16:11:08 +02:00 |
|
|
Paul Kermann
|
e16887414e
|
add escapechar
|
2023-01-17 10:15:03 +02:00 |
|
|
ikelosandGitHub
|
91ec909b3c
|
Merge pull request #903 from paulkermann/fix/missing-import
Fix missing import
|
2023-01-16 11:08:05 +00:00 |
|
|
Paul Kermann
|
f036acdeb8
|
missing import
|
2023-01-16 13:02:20 +02:00 |
|
|
Mike Auty
|
4cafc982f4
|
Windows: Fix up callbacks typos and typing info
|
2023-01-16 10:47:09 +00:00 |
|
|
ikelosandGitHub
|
9f607d6903
|
Merge pull request #902 from paulkermann/bugfix/cmregisterscallbacks_smearing
Handle smearing in volatility callbacks plugin
|
2023-01-16 10:42:40 +00:00 |
|
|
Paul Kermann
|
5e33a98481
|
change default value to None
|
2023-01-16 12:39:08 +02:00 |
|
|
ikelosandGitHub
|
648fa78c95
|
Merge pull request #900 from paulkermann/improv/extra_logging_symbol_table_from_offset
Add debug message for symbol_table_from_offset
|
2023-01-16 10:18:19 +00:00 |
|
|
Paul Kermann
|
5aca49388e
|
fix smearing
|
2023-01-16 12:01:45 +02:00 |
|
|
Paul Kermann
|
bd291c43d5
|
added debug message
|
2023-01-16 10:15:36 +02:00 |
|