WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-08-29 03:09:48 +02:00
Code Issues Packages Projects Releases Wiki Activity
3,921 Commits 80 Branches 17 Tags
b9c4a1d8a76bd40b7a0ee40ea91c0e32da99000e
Commit Graph
3921 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Leron Gray b9c4a1d8a7 fix guid and pdb_name for #1026 2023-10-31 13:52:26 -05:00
Mike Auty 3bb1285dbf Layers: Make removal of a layer more efficient, as noted in #809 2023-10-29 13:53:55 +00:00
ikelosandGitHub e5d3134508 Merge pull request #1025 from Abyss-W4tcher/remote_isf 
Core: Remote ISF - correct sql query and strip identifier
 2023-10-23 19:03:46 +01:00
Abyss Watcher c20baf9d1f black formatting 2023-10-23 17:49:03 +02:00
Abyss Watcher 2d3b3158dc correct sql query and strip identifier 2023-10-21 23:34:17 +02:00
ikelosandGitHub 11ddafde44 Merge pull request #999 from 616c696365/fix-issue-895 
Windows: Update pslist.py, add friendly option
 2023-10-19 10:29:42 +01:00
ikelosandGitHub 104623ede2 Merge pull request #1018 from volatilityfoundation/1017-printkey-breaks-when-encountering-invalid-root-node 
issue #1017 - check for valid root node type
 2023-10-19 10:18:55 +01:00
ikelosandGitHub 806801ea69 Merge pull request #1020 from volatilityfoundation/1019-printkey-timestamps-are-misleadingincorrect 
issue #1019 - for subkeys, return the modified time of the subkey its…
 2023-10-19 10:18:22 +01:00
Dave Lassalle a497216beb issue #1019 - black updates 2023-10-18 14:09:42 -05:00
Dave Lassalle fcaba2d95a issue #1017 - black updates 2023-10-18 14:08:50 -05:00
616c696365 7323bd3a59 windows.pslist process name added to dumped file by default 2023-10-18 19:16:10 +01:00
Mike Autyand616c696365 5d43071f57 Core: Add (optional) sanitization to the FileHandler class 2023-10-18 19:16:10 +01:00
616c696365andGitHub f2f412d555 Merge branch 'volatilityfoundation:develop' into fix-issue-895 2023-10-18 18:44:24 +01:00
ikelosandGitHub 57924c5da1 Merge pull request #1001 from xabrouck/oldkernel 
Making cred optional as it didn't exist in old 2.6 kernels
 2023-10-17 15:34:10 +01:00
ikelosandGitHub 15ad1db01b Merge pull request #1016 from eve-mem/vmem_warnings 
vmware: Add warning when no metadata file is found for a vmem file.
 2023-10-17 15:02:11 +01:00
Eve e45380f4f5 Update vmware layer metadata file warning to be less doom and gloom. 2023-10-13 09:29:46 +01:00
Dave Lassalle 95c468c4f8 issue #1019 - for subkeys, return the modified time of the subkey itself, not its parent key 2023-10-12 10:16:56 -05:00
Dave Lassalle 9cc73b6a03 issue #1017 - check for valid root node type 2023-10-12 09:57:24 -05:00
Eve 310b6508db vmware: Add warning when no metadata file is found for a vmem file. 2023-10-11 09:09:15 +01:00
Mike Auty 93b2972832 Renderers: Allow nodes to be turned into dictionaries 2023-10-08 22:19:17 +01:00
ikelosandGitHub 87cdf87100 Merge pull request #1004 from ShutdownRepo/test-workflow 
Adding test install workflow for GitHub Actions pipelines
 2023-09-28 17:17:48 +01:00
Shutdown 370b6774ea Remove macOS from matrix hosts 2023-09-17 23:21:56 +02:00
Mike Auty 47ddf5d0e5 Core: Bump the version after 2.5.0 release branch 2023-09-06 20:34:13 +01:00
ikelosandGitHub b5b9c8ac41 Merge pull request #1003 from volatilityfoundation/issues/issue1002 
Core: Fix missing packages in setup.py
 2023-09-06 00:54:04 +01:00
ikelosandGitHub 5e8dfc0af2 Merge branch 'develop' into issues/issue1002 2023-09-06 00:50:32 +01:00
Mike Auty 803c56e3c4 Core: include the volatility3 package and all volatility3 subpackages 2023-09-05 23:51:17 +01:00
Mike Auty 9d2fd40517 Revert "Core: Include only volatility3 in distributions packages" 
This reverts commit b4c6b661f0.
 2023-09-05 23:07:57 +01:00
Shutdown ef341d54d6 Fixing fail-fast strategy 2023-09-05 22:37:45 +02:00
Shutdown 9982a44131 Adding matrix strategy for hosts and python version 2023-09-05 22:36:40 +02:00
Shutdown 2a67aa639a Removing Python version 2023-09-05 22:29:25 +02:00
Shutdown 627e2fbab9 Adding install.yml workflow 2023-09-05 22:27:53 +02:00
Mike Auty 05df365936 Core: Fix missing packages in setup.py 
Fixes #1002.
 2023-09-05 18:23:54 +01:00
xabrouck 455487dbb6 Making cred optional as it didn't exist in old 2.6 kernels 2023-09-05 16:20:46 +02:00
Mike Auty da203f7d68 Documentation: Improve library documentation 
Fixes #993.
 2023-09-03 22:07:20 +01:00
ikelosandGitHub 3ff4f015c4 Merge pull request #899 from cstation/feature/linux_elf_dump 
Dump ELFs to file
 2023-09-03 21:59:36 +01:00
ikelosandGitHub c8a85e11b2 Merge pull request #995 from xabrouck/dirty 
Check IoC of dirty bit in PTEs from executable VMAs.
 2023-09-03 21:56:25 +01:00
ikelosandGitHub c72129203b Merge pull request #996 from eve-mem/Linux-Change-get_process_memory_sections-to-use-get_vma_iter 
Linux: fix bug where get_process_memory_sections fails with 6.1+ kernels
 2023-09-03 21:41:43 +01:00
Mike Auty b4c6b661f0 Core: Include only volatility3 in distributions packages 
Fixes #951
 2023-09-03 21:13:37 +01:00
616c696365 5c80a66d6d Windows: Update pslist.py, add friendly option 2023-08-30 20:12:12 +01:00
xabrouck 6f7f1284ad Fix bug with PAGE_SHIFT that wasn't shifted, also greatly increases performance 
Use black
Better logging
 2023-08-18 11:37:04 +02:00
EveandGitHub 804d68d94d Linux: fix bug where get_process_memory_sections fails with 6.1+ kernels 2023-08-17 13:38:23 +01:00
Mike Auty 581c493f4f Add in action to make old tickets stale. 2023-08-16 21:35:11 +01:00
xabrouck 7c82da4f50 check IoC of dirty bit in PTEs from executable VMAs. 
this can for example detect code injected using ptrace().
this can also detect injected code that was reset to the original code (malware uninstalled before memory dump happened).
 2023-08-14 11:53:14 +02:00
Mike Auty 5d4c70d517 Documentation: Fix requirements -> get_requirements #993 2023-08-03 15:16:36 +01:00
ikelosandGitHub b050b108e4 Merge pull request #988 from xabrouck/avml-fix2 
fix bug in snappy lib loading and make it work on macOS.
 2023-07-27 14:08:35 +01:00
xabrouck a226b90b4d previous commit would break linux snappy support 2023-07-27 09:37:57 +02:00
xabrouck d872abaf30 fix bug in snappy lib loading and make it work on macOS. 2023-07-27 09:28:53 +02:00
cstationandGitHub d53714fac8 Fix linting 2023-07-22 17:03:57 +00:00
cstationandGitHub fca4c5db4b Merge branch 'develop' into feature/linux_elf_dump 2023-07-22 17:00:12 +00:00
cstation 8373b5ed5a Push ELF export limit to a constant 2023-07-22 18:56:51 +02:00