Mike Auty
00dcddbeb8
Framework: Prep master for additional commits
2020-09-10 00:07:00 +01:00
Jan and ikelos
b82aadeddf
bumps version number due to api change, clarifies code
2020-08-24 19:03:28 +01:00
Mike Auty
3127c7a220
Intermed: Make extensions a reusable constant
2020-08-21 21:24:59 +01:00
Matt Tressler and ikelos
ddec0d482d
added kernel string to linux constants file; changed automagic methods so that they reconstruct the kernel object within the method for consistancy with other methods
2020-07-30 23:24:23 +01:00
Mike Auty
1cdcd8d811
Core: The has-valid-members interface bumps the version
2020-07-01 20:24:30 +01:00
Mike Auty
ac1d99677d
ISF: Support deprecating versions
2020-06-27 18:33:30 +01:00
Mike Auty
ce3f4fb134
CLI: Initial attempt to standardize exception output
2019-11-13 19:27:00 +00:00
Mike Auty
97e41e21e4
Volatility 3 1.0.0-beta.1 release
2019-10-13 11:28:09 +01:00
Mike Auty
48f2c78a7d
Update versioning to support appropriate version checks.
2019-10-13 11:12:28 +01:00
Mike Auty
e0b9d72c84
Update the license URL and LICENSE.txt
2019-09-25 21:44:05 +01:00
Mike Auty
dad88692b8
Minor improvements for pyinstaller packages.
2019-09-21 21:06:05 +01:00
Mike Auty
e922cef316
Improve docstrings for all plugins, and reformat all docstrings.
2019-09-07 22:59:54 +01:00
Mike Auty
9cde94bceb
Change the license blurb on all files.
2019-08-27 23:11:00 +01:00
Mike Auty
3d87b06c36
Add in documentation to all the constants.
2019-08-18 18:55:57 +01:00
Mike Auty
18283ab410
Move to an object_from_symbol model
...
Note: creation of enumerations can be done using Context.object, which
should allow reference of enumeration members by normal type objects.
If it turns out enumerations are never referenced from types, we can
easily remove the try/except in the Module.object method.
2019-08-14 20:50:42 +01:00
Mike Auty
5362e2094e
Initial attempt at cleaning up the API
...
Context.object accepts a template or a string name (and now a type
flag). Module.object only accepts a string (because a template already
has most of the stuff built in and might as well be passed to the
Context.object constructor).
The gotcha here is the absolute flag, which must now be set
appropriately in all cases *except* where the module is constructed
with an offset of 0 (whereby it will have no impact).
2019-08-14 20:50:42 +01:00
Mike Auty
0e1f491335
Turn off parallelism by default (seems to be faster?).
2019-03-02 19:02:34 +00:00
Mike Auty
33a9db6b9f
Make parallelism options more well defined.
2019-03-02 18:52:02 +00:00
Mike Auty
9fadee1a17
Add locking for threaded operation.
2019-03-02 18:07:48 +00:00
Mike Auty
c64ed6a8dd
Remove validity checking in favour of static-type checking.
...
This removes the assertions that checked plugin devs didn't do anything
overly bad in favour of using mypy to ensure appropriate type-checking.
It also moves the ProgressCallback typing information to constants in
order to avoid circular imports (since constants doesn't import
anything).
2019-01-20 02:35:49 +00:00
Mike Auty
fdc6efc4ad
Add in the LICENSE and the README.
2018-12-19 23:55:03 +00:00
Mike Auty
19572b6e1e
Reformat all python files using yapf with custom volatility style.
2018-12-16 16:50:17 +00:00
Andrew Case and ikelos
622c86f9ed
Add initial mac backend code, with broken DTB finding, along with the pslist plugin
2018-12-13 15:56:24 +00:00
Mike Auty
eb08fb9e96
Convert the pdb scanner to use the kernel module names constants.
2018-08-04 12:34:18 +01:00
Mike Auty
105816beeb
Add in Windows specific constants for kernel modules (whose symbol tables are loaded by automagic).
2018-08-02 10:59:14 +01:00
Mike Auty
19236199b1
Refactor stacking and move the automagic location to a constant.
2018-04-02 02:09:56 +01:00
Mike Auty
e23bb65162
Add in better logging.
2017-12-13 20:48:52 +00:00
ikelos and GitHub
8698328654
Merge pull request #10 from npetroni/linux-proc-maps
...
Linux proc maps (as reviewed in PR #9 ) 5:)
2017-08-16 21:39:15 +01:00
Mike Auty
59b9645b04
Import linux so we don't need to subimport it everywhere we need to use it.
2017-08-16 21:34:37 +01:00
Nick L. Petroni, Jr
5bb2aef9fc
Created linux.proc.Maps plugin.
...
Added object extensions for the key structures. Also added
constants.linux, which will contain Linux-specific constants
that can't be extracted via dwarf.
2017-08-16 16:14:33 -04:00
Mike Auty
efc2d75a86
Ensure that other constant modules are imported.
2017-08-16 14:28:43 +01:00
Mike Auty
91fdc2166e
Don't forget to fix up the path move.
2017-08-15 01:10:38 +01:00
Mike Auty
6b24dd1d03
Convert constants to a module in preparation for pull request #9 .
2017-08-15 01:07:01 +01:00
Mike Auty