 Mike Auty
|
a802ecab86
|
Provide a more user friendly filename.
|
2019-09-13 11:45:58 +01:00 |
|
|
superponible
|
eaea90dd43
|
add hive_offset to crt filenames
|
2019-09-12 22:17:02 -05:00 |
|
|
superponible
|
95d3dbea99
|
fix typo in comment
|
2019-09-12 22:13:21 -05:00 |
|
|
superponible
|
cf8871b1bc
|
catch InvalidAddressException when creating RegistryHive
|
2019-09-12 15:37:40 -05:00 |
|
|
superponible
|
f7dec8de86
|
add user level hives for certificates
|
2019-09-12 15:36:50 -05:00 |
|
|
superponible
|
645fe73426
|
update docstring copied from printkey
|
2019-09-12 15:29:18 -05:00 |
|
|
superponible
|
dfec4a1405
|
fix up docstrings to match yield values
|
2019-09-12 15:26:14 -05:00 |
|
|
Mike Auty
|
1604747f21
|
Move the hive_iterator to HiveList, since it's more intuitively where it should live.
|
2019-09-10 15:17:02 +01:00 |
|
|
Mike Auty
|
ea0b2489df
|
Update userassist to use the new printkey API.
|
2019-09-10 14:49:42 +01:00 |
|
|
Mike Auty
|
a82d00b1cf
|
Update API slightly to return objects not strings.
|
2019-09-10 14:36:38 +01:00 |
|
|
Mike Auty
|
7e40141b02
|
Add in initial attempt at certificate plugin.
|
2019-09-10 14:30:32 +01:00 |
|
|
Mike Auty
|
c6744120aa
|
Refactor printkey to be more usable from other plugins.
|
2019-09-10 14:30:13 +01:00 |
|
|
Mike Auty
|
10cf65fb60
|
Add in better documentation for callbacks.
|
2019-09-10 00:43:44 +01:00 |
|
|
Michael Lighandikelos
|
4e3db7a3de
|
add PluginRequirements for ssdt and svcscan. add missing _version to svcscan
|
2019-09-08 16:08:48 +01:00 |
|
|
Michael Lighandikelos
|
1d7f2a9582
|
use ntkrnlmp.object() instead of context.object(). remove config_path argument to list* functions
|
2019-09-08 16:08:48 +01:00 |
|
|
Michael Lighandikelos
|
50548bac73
|
reformat with yapf
|
2019-09-08 16:08:48 +01:00 |
|
|
Michael Lighandikelos
|
e71b72b3a7
|
add the windows callbacks plugin
|
2019-09-08 16:08:48 +01:00 |
|
|
Mike Auty
|
421af88c29
|
Classmethod make_subconfig so other classmethods can use it.
|
2019-09-08 14:50:48 +01:00 |
|
|
Mike Auty
|
10ea65a236
|
Remove unnecessary imports.
|
2019-09-08 14:19:58 +01:00 |
|
|
Mike Auty
|
ffc7682d61
|
Ensure that layers are automatically imported when needed.
|
2019-09-08 14:13:28 +01:00 |
|
|
Mike Auty
|
03bc3d927d
|
Improve the name of a handles exposed function.
|
2019-09-08 13:22:42 +01:00 |
|
|
Mike Auty
|
3318e9c4a5
|
Fix a typo introduced in 5362e2094e.
|
2019-09-08 01:58:46 +01:00 |
|
|
Mike Auty
|
189b8c4d69
|
Update the windows info plugin with classmethods.
|
2019-09-07 23:00:41 +01:00 |
|
|
Mike Auty
|
e922cef316
|
Improve docstrings for all plugins, and reformat all docstrings.
|
2019-09-07 22:59:54 +01:00 |
|
|
Mike Auty
|
dc0a809729
|
Printkey: Don't offer two options for the same value.
|
2019-09-07 22:05:09 +01:00 |
|
|
Mike Auty
|
959e1617fd
|
Shift one-time checks out of loops.
|
2019-09-07 12:40:32 +01:00 |
|
|
Mike Auty
|
fa58722848
|
Slight documentation fixes.
|
2019-09-04 23:53:18 +01:00 |
|
|
Mike Auty
|
c88044db5b
|
Update more API documentation.
|
2019-09-04 00:34:55 +01:00 |
|
|
Mike Auty
|
a362dc109a
|
Update API documentation.
|
2019-09-03 21:28:19 +01:00 |
|
|
Mike Auty
|
b158c58310
|
Ensure non-found keys mimic found key output a little closer.
|
2019-09-01 22:44:42 +01:00 |
|
|
Mike Auty
|
952a1b9d69
|
Move printkey recursion around to get proper tree depth.
|
2019-09-01 16:17:26 +01:00 |
|
|
Mike Auty
|
f040ceed96
|
Ensure keys and values are at the same level.
|
2019-09-01 16:10:58 +01:00 |
|
|
Mike Auty
|
3d7b2a520b
|
Ensure the tree output for printkey doesn't jump into deep layers.
|
2019-09-01 16:05:51 +01:00 |
|
|
Mike Auty
|
c2feba6651
|
Remove debugging calls from layerwriter plugin.
|
2019-09-01 15:50:29 +01:00 |
|
|
Mike Auty
|
5d75d617b3
|
Add in better support for sorting BaseAbsentValues.
|
2019-08-31 22:01:01 +01:00 |
|
|
Mike Auty
|
39c4d061a1
|
Convert registry.printkey hive_walker to a class method.
|
2019-08-31 14:32:35 +01:00 |
|
|
Mike Auty
|
0cb5ca995c
|
Correctly fix the intermediate file format versions.
|
2019-08-31 14:24:22 +01:00 |
|
|
Mike Auty
|
c47ead41b1
|
Move to the SemVer versioning scheme.
|
2019-08-31 13:03:51 +01:00 |
|
|
Mike Auty
|
a3caf39097
|
Use a mapping to determine kind to class.
|
2019-08-31 12:57:53 +01:00 |
|
|
Mike Auty
|
87d0970e72
|
Remove column indicies.
They didn't look useful, and given the values were ordered by their
position in the list, it seemed appropriate to do the same with column
names.
|
2019-08-30 11:30:58 +01:00 |
|
|
Mike Auty
|
30bf820a98
|
Ensure ordering of columns in pretty printer.
|
2019-08-29 22:54:34 +01:00 |
|
|
Mike Auty
|
ae1f6f898c
|
Another small license fix for the README.txt
|
2019-08-27 23:40:00 +01:00 |
|
|
Mike Auty
|
35dbdfc69d
|
Add in PluginRequirement for proc_maps plugin.
|
2019-08-27 23:35:19 +01:00 |
|
|
Mike Auty
|
a9853eca50
|
Fix the copyright headers (and yapf) in the mac plugins.
|
2019-08-27 23:34:06 +01:00 |
|
|
Andrew Caseandikelos
|
6b4c13089d
|
add mac_proc_maps
|
2019-08-27 23:31:01 +01:00 |
|
|
Andrew Caseandikelos
|
07ece011a3
|
Add mac_tasks
|
2019-08-27 23:28:51 +01:00 |
|
|
Mike Auty
|
6d5408e2f5
|
Make changes to the README and remove the old LICENSE file.
|
2019-08-27 23:11:43 +01:00 |
|
|
Mike Auty
|
9cde94bceb
|
Change the license blurb on all files.
|
2019-08-27 23:11:00 +01:00 |
|
|
Mike Auty
|
387024fe96
|
Don't forget to return a default encoded blob.
|
2019-08-27 21:09:13 +01:00 |
|
|
Mike Auty
|
a5f0c7f1b9
|
Don't forget the linear layer.
|
2019-08-27 21:09:13 +01:00 |
|