 Andrew Caseandikelos
|
e58e55b433
|
Update code for better variable names and minor version bump
|
2020-09-16 17:35:49 +01:00 |
|
 Andrew Caseandikelos
|
afe39eee1b
|
Add new method for safe walking of generic list heads. Convert pslist to use it.
|
2020-09-16 17:35:49 +01:00 |
|
Mike Auty
|
9b57d7a58c
|
Plugins: Version Mac/LinuxUtilities classes
|
2020-08-18 09:07:32 +01:00 |
|
Mike Auty
|
8e420cbe62
|
Core: Multiple typing fixes across the tree
|
2020-08-16 22:22:24 +01:00 |
|
Mike Auty
|
61563350b3
|
Linux/Mac: Refactor *nix Utilities classes
|
2020-07-28 11:15:16 +01:00 |
|
 Andrew Caseandikelos
|
ef97c672e3
|
Check for invalid vnode pointers before processing path
|
2020-07-18 17:06:50 +01:00 |
|
Mike Auty
|
a173f12fce
|
Plugins: Normalize InvalidAddress exception handling
|
2020-07-18 16:38:49 +01:00 |
|
Mike Auty
|
d6741435ef
|
SymbolTables: Clear out the clone method and tidy up inheritance
|
2020-06-10 19:39:20 +01:00 |
|
Mike Auty
|
0c43beb42d
|
Core: Apply yapf across all files again.
|
2020-05-05 22:14:33 +01:00 |
|
 Andrew Caseandikelos
|
7b21e83b07
|
Mac - convert socket gathering to class method and clean up associated code
|
2020-03-12 19:47:15 +00:00 |
|
 Andrew Caseandikelos
|
a60bef3283
|
Mac - update queue walking code
|
2020-02-12 21:04:23 +00:00 |
|
 Andrew Caseandikelos
|
ab42f0941c
|
Add sysctl docstrings and return types
|
2020-02-12 19:17:19 +00:00 |
|
 Andrew Caseandikelos
|
29cc435b5e
|
update sysctl v2
|
2020-02-12 19:17:19 +00:00 |
|
Mike Auty
|
6e38727ffe
|
Mac: Refactor/optimize repeated code.
|
2020-01-28 01:37:21 +00:00 |
|
Mike Auty
|
f111e9e051
|
Mac: Ensure queues error check all entries, not just the first.
|
2020-01-28 01:37:21 +00:00 |
|
Mike Auty
|
3f5b96f3c7
|
Yapf: Clean-up the whole codebase.
|
2020-01-14 15:44:07 +00:00 |
|
 Andrew Caseandikelos
|
a4a918ea58
|
Suggested changes from ikelos
|
2019-09-27 20:50:21 +01:00 |
|
 Andrew Caseandikelos
|
bf29e23e1c
|
add updated mac ifconfig support
|
2019-09-27 20:50:21 +01:00 |
|
Mike Auty
|
c00b820f74
|
Fix up recent Mac PagedInvalidAddress additions.
|
2019-09-27 11:21:49 +01:00 |
|
Mike Auty
|
153b3b7d39
|
Make sure we catch the most general exception for what we mean.
|
2019-09-27 11:19:53 +01:00 |
|
Andrew Case
|
eeb04655e6
|
Mac - smear protection in network address enumeration
|
2019-09-26 22:08:47 -05:00 |
|
Mike Auty
|
e0b9d72c84
|
Update the license URL and LICENSE.txt
|
2019-09-25 21:44:05 +01:00 |
|
Mike Auty
|
926288a7ac
|
Ensure process layer name contains the process ID.
|
2019-09-25 01:15:58 +01:00 |
|
Mike Auty
|
72567e1c50
|
Yapf-0.28.0 rerun across the whole codebase.
|
2019-09-21 21:08:23 +01:00 |
|
Mike Auty
|
76a1bb972c
|
Restore the mac queue_event class override.
For some reason, this went missing in commit
a3caf39097, which looks to have been an
error.
|
2019-09-16 12:04:50 +01:00 |
|
Mike Auty
|
e922cef316
|
Improve docstrings for all plugins, and reformat all docstrings.
|
2019-09-07 22:59:54 +01:00 |
|
Mike Auty
|
a3caf39097
|
Use a mapping to determine kind to class.
|
2019-08-31 12:57:53 +01:00 |
|
 Andrew Caseandikelos
|
07ece011a3
|
Add mac_tasks
|
2019-08-27 23:28:51 +01:00 |
|
Mike Auty
|
9cde94bceb
|
Change the license blurb on all files.
|
2019-08-27 23:11:00 +01:00 |
|
Mike Auty
|
272224a1b0
|
Refactor all references to Context.memory to Context.layers.
|
2019-07-07 17:42:51 +01:00 |
|
Mike Auty
|
2b001fad4d
|
Make sure we get 4 ints, not 8 shorts.
|
2019-02-26 23:02:34 +00:00 |
|
Mike Auty
|
72c4deaf66
|
Revamp the ip address conversion code and reformat mac files.
|
2019-02-26 22:59:21 +00:00 |
|
 Andrew Caseandikelos
|
451f73bfe2
|
change generic.GenericIntelProcess -> objects.Struct
|
2019-02-26 22:20:33 +00:00 |
|
 Andrew Caseandikelos
|
c9adc6a0fa
|
remove usage of old string methods
|
2019-02-26 22:20:33 +00:00 |
|
 Andrew Caseandikelos
|
6d2a5fbfaa
|
add mac_netstat and supporting networking code
|
2019-02-26 22:20:33 +00:00 |
|
Mike Auty
|
b13fcb186c
|
Improve typing issues.
|
2019-01-03 01:13:53 +00:00 |
|
Mike Auty
|
fdc6efc4ad
|
Add in the LICENSE and the README.
|
2018-12-19 23:55:03 +00:00 |
|
Mike Auty
|
2a3b7348be
|
Add in minor changes and remove the duplicate plugins for mac.
|
2018-12-19 01:01:53 +00:00 |
|
 Andrew Caseandikelos
|
6d582a8a68
|
remove while 1 and broad exception catching
|
2018-12-19 00:54:51 +00:00 |
|
 Andrew Caseandikelos
|
19d39e53ff
|
add docstrings for malfind
|
2018-12-19 00:54:51 +00:00 |
|
 Andrew Caseandikelos
|
a98995aa4e
|
remove unnecesary calls to int()
|
2018-12-19 00:54:51 +00:00 |
|
 Andrew Caseandikelos
|
1dba08c005
|
remove try/except block that should have been removed originally
|
2018-12-19 00:54:51 +00:00 |
|
Mike Auty
|
857c970125
|
Update typing to match master.
|
2018-12-19 00:54:51 +00:00 |
|
Mike Auty
|
3a2d3c604f
|
Tidying. Renaming variables to avoid shadowing of classes, etc.
|
2018-12-19 00:54:51 +00:00 |
|
Mike Auty
|
c5ebf91915
|
Yapf reformat of the patches.
|
2018-12-19 00:54:51 +00:00 |
|
 Andrew Caseandikelos
|
12e470ab55
|
add malfind plugin part 2 (extension update)
|
2018-12-19 00:54:51 +00:00 |
|
Mike Auty
|
f4544fec05
|
Yapf reformat and change map_iter property to get_map_iter function.
|
2018-12-19 00:54:51 +00:00 |
|
 Andrew Caseandikelos
|
c0581eeeea
|
newest updates
|
2018-12-19 00:54:51 +00:00 |
|
Mike Auty
|
e65a00894a
|
Minor style tweaks and mass changes across the codebase because of it.
|
2018-12-17 12:46:14 +00:00 |
|
Mike Auty
|
19572b6e1e
|
Reformat all python files using yapf with custom volatility style.
|
2018-12-16 16:50:17 +00:00 |
|