Commit Graph
4966 Commits
Author SHA1 Message Date
j-t-1andGitHub b9fa217d79 Add a required framework version
Added _required_framework_version and set it to the same value (2, 0, 0) as its plugin requirement of svcscan. Also tweaked one comment.
2024-12-21 18:48:12 +00:00
j-t-1andGitHub cc8fbd5b68 Tweak a comment 2024-12-20 17:34:52 +00:00
ikelosandGitHub 6262fcf315 Merge pull request #1459 from Abyss-W4tcher/malfind_incorrect_ref_fix
Windows malfind: fix unbound page variable access
2024-12-20 16:51:23 +00:00
ikelosandGitHub 812af0b4d7 Merge pull request #1455 from j-t-1/dlllist
Reorder requirements by type
2024-12-20 15:48:02 +00:00
ikelosandGitHub 83e32863c9 Merge pull request #1457 from gcmoreira/basic_volshell_testcases
testcases: Add basic volshell testcases for each OS image
2024-12-20 15:47:05 +00:00
ikelosandGitHub 2dee639d52 Merge pull request #1432 from TheMythologist/minor-improv
Minor typing improvements for `mypy`
2024-12-20 15:21:09 +00:00
Abyss Watcher 15eb80b600 fix unbound page variable access 2024-12-20 13:11:35 +01:00
j-t-1andGitHub 89564cca66 Revert one f-string
As part of the ruff linting we did recently all vollog messages should have explicitly been reverted back to %-formatting.
2024-12-20 05:48:42 +00:00
Gustavo Moreira ef977efe62 testcases: Improve volshell basic testcase calling ps() on each of them 2024-12-20 14:50:35 +11:00
Gustavo Moreira d546c983f3 testcases: Fix runvol* default list arguments 2024-12-20 14:33:36 +11:00
Gustavo Moreira c317a45eb5 testcases: Add missing operating system argument 2024-12-20 14:31:40 +11:00
TheMythologist e6e0754fa5 Remove mypy overrides section 2024-12-20 10:46:54 +08:00
Gustavo Moreira 90766f466f testcases: exclude volshell test from the volatility set 2024-12-20 13:21:24 +11:00
Gustavo Moreira 658d40335a testcases: Add basic volshell testcases for each OS image 2024-12-20 13:06:14 +11:00
ikelosandGitHub 29485d6738 Merge pull request #1453 from j-t-1/typo
Swap two letters in a typo
2024-12-20 01:20:11 +00:00
ikelosandGitHub da25629db4 Merge pull request #1452 from j-t-1/PESymbols
Tweak comment
2024-12-20 01:18:59 +00:00
ikelosandGitHub b3f4557ac0 Merge pull request #1451 from j-t-1/comment
Remove commented out import
2024-12-20 01:18:10 +00:00
ikelosandGitHub ba3ccf61d5 Merge pull request #1391 from j-t-1/doc
Slightly modify documentation
2024-12-20 01:16:07 +00:00
ikelosandGitHub f0328ec072 Merge pull request #1448 from dgmcdona/dgmcdona/pedump_contextmanager_revert
Windows PEDump: Revert overwritten changes
2024-12-20 01:15:14 +00:00
Mike Auty 8b35031d0f Volshell: Bump linux.pslist plugin requirement 2024-12-20 00:37:39 +00:00
ikelosandGitHub 435d68b0f3 Merge pull request #1440 from dgmcdona/dgmcdona/network_extensions_attributeerrors
Windows Extensions: Fix potential AttributeErrors
2024-12-20 00:11:29 +00:00
ikelosandGitHub 1b28b13ae9 Merge pull request #1450 from gcmoreira/xen_coredump_layer_fix_uninitialized_variable
xen_coredump_layer: fix potential uninitialized variable issue
2024-12-20 00:01:45 +00:00
j-t-1andGitHub 59a5e85b50 Reorder requirements by type 2024-12-19 17:36:42 +00:00
j-t-1andGitHub 4fe3db50df Reorder requirements by type 2024-12-19 16:32:30 +00:00
j-t-1andGitHub 0e0c959cd0 Swap two letters in a typo 2024-12-19 12:21:20 +00:00
j-t-1andGitHub c56d9334f8 Tweak comment 2024-12-19 12:00:27 +00:00
j-t-1andGitHub 95e103d9ea Remove commented out import 2024-12-19 10:35:34 +00:00
j-t-1andGitHub a180ae4072 Merge branch 'volatilityfoundation:develop' into doc 2024-12-19 06:08:42 +00:00
TheMythologist 35f72a088a Merge branch 'develop' into minor-improv 2024-12-19 12:17:29 +08:00
TheMythologist c82d432b10 Typing fix 2024-12-19 12:16:55 +08:00
Gustavo Moreira 3c26955e34 xen_layer: fix potential uninitialized variable issue #1434 2024-12-19 12:02:16 +11:00
ikelosandGitHub 62940c311c Merge pull request #1433 from j-t-1/colon
Change semi-colon to colon
2024-12-19 00:28:29 +00:00
ikelosandGitHub a52b21b336 Merge pull request #1429 from gcmoreira/linux_pslist_user_group_cred_ids
Linux pslist plugin - Add tasks real and effective user and group identifiers
2024-12-19 00:15:53 +00:00
ikelosandGitHub 11f51396e8 Merge pull request #1431 from j-t-1/floor
Use floor division
2024-12-19 00:15:37 +00:00
ikelosandGitHub 58858a8a87 Merge pull request #1430 from j-t-1/readability
Use generator expressions
2024-12-19 00:13:49 +00:00
ikelosandGitHub d9e157234a Merge branch 'develop' into linux_pslist_user_group_cred_ids 2024-12-19 00:04:33 +00:00
ikelosandGitHub 7410411e7a Merge pull request #1427 from gcmoreira/linux_envars_plugin_improvements
Linux - Envars plugin: Add function to retrieve environment variables for a specific task
2024-12-18 23:58:47 +00:00
j-t-1andGitHub a9417edd28 Slightly modify documentation 2024-12-18 17:49:56 +00:00
David McDonald 7eca407b6d Windows PEDump: Revert overwritten changes
When #1364 was merged, it may not have been rebased onto the changes
introduced in #1422, and they ended up overwritten to the old version.
This reverts those changes.
2024-12-18 11:44:56 -06:00
j-t-1andGitHub 2010dbd713 Merge branch 'volatilityfoundation:develop' into doc 2024-12-18 17:42:01 +00:00
j-t-1andGitHub 1e2900d587 Slightly modify documentation 2024-12-18 17:39:03 +00:00
j-t-1andGitHub c865f4892c Slightly modify documentation 2024-12-18 17:36:05 +00:00
David McDonald 7464a3b883 Windows Extensions: Fix potential AttributeErrors
If `self.get_owner()` returns `None`, and the chained call to
`is_valid()` is executed, an `AttributeError` will occur. This fixes two
instances of this bug by intializing a local variable with the result of
the `get_owner()` call, checking for `None`, and returning if that's the
case.

Also adds type-hints for these methods.
2024-12-18 11:00:24 -06:00
ikelosandGitHub 2383ea2b26 Merge pull request #1428 from gcmoreira/linux_fix_parent_tgid
Linux: task.get_parent_pid() fix to mimic getppid() syscall
2024-12-18 08:42:17 +00:00
j-t-1andGitHub cf7aabead4 Change semi-colon to colon 2024-12-18 08:12:49 +00:00
TheMythologist d7f678879d Minor improvements for mypy 2024-12-18 15:18:33 +08:00
j-t-1andGitHub 860a8146fb Use floor division 2024-12-18 06:44:23 +00:00
j-t-1andGitHub 3da14b3873 Use generator expressions
PEP 289 – Generator Expressions.
2024-12-18 06:40:19 +00:00
Gustavo Moreira ddb4db5eab linux: pslist: Handle cases where credential IDs are unavailable due to an invalid credential pointer 2024-12-18 16:22:27 +11:00
Gustavo Moreira e92b55ac86 linux: Update version requirements in all plugins dependent on pslist 2024-12-18 16:09:42 +11:00