 Mike Auty
|
dd3e09f1e2
|
frameworkinfo: Make this a core plugin, not an optional extra.
|
2019-10-31 22:14:43 +00:00 |
|
|
Mike Auty
|
4457bcaee0
|
vadyarascan: Ensure we scan the right layer
This patch ensures we scan the vad segments within the correct layer
(the process layer, not the kernel layer) and lists the pid in the
output.
|
2019-10-31 19:15:02 +00:00 |
|
|
Mike Auty
|
27a291cf61
|
Remove the erronious print statement, which should be a vollog message if needed.
|
2019-10-18 08:39:56 -04:00 |
|
|
Mike Auty
|
0be9061989
|
Tidy up commit e0097ac.
|
2019-10-18 08:38:17 -04:00 |
|
|
atcuno
|
545376d725
|
Mac - update trustedbsd
|
2019-10-17 15:30:13 -04:00 |
|
|
atcuno
|
3df5e9957e
|
Windows - add missing add_process_layer exception handling in a few plugins
|
2019-10-17 11:47:19 -04:00 |
|
|
atcuno
|
e0097ac9c1
|
Windows - protect handles from smear
|
2019-10-17 11:03:48 -04:00 |
|
|
atcuno
|
2e329d1106
|
Windows - add exception handling around is_valid in callbacks
|
2019-10-17 10:22:06 -04:00 |
|
|
Mike Auty
|
3784c9aff6
|
Fix up missing/inaccurate plugin description strings.
|
2019-10-03 01:05:57 +01:00 |
|
|
Mike Auty
|
3b656e337a
|
Update windows extensions to ensure they're documented.
|
2019-10-02 20:25:54 +01:00 |
|
|
Mike Auty
|
10a379b0ee
|
Make 'import as' consistent and ensure proper plugin dependencies.
|
2019-10-02 01:25:03 +01:00 |
|
|
Mike Auty
|
9a17beb77f
|
Ensure consistency of importing interfaces.
|
2019-10-02 01:18:46 +01:00 |
|
|
Mike Auty
|
8e10f4e3d1
|
Clarify handles error message.
|
2019-10-02 00:06:25 +01:00 |
|
|
Mike Auty
|
9ac622afa0
|
Fix up import style to be consistent.
|
2019-10-01 23:46:02 +01:00 |
|
|
Andrew Caseandikelos
|
a4a918ea58
|
Suggested changes from ikelos
|
2019-09-27 20:50:21 +01:00 |
|
|
Andrew Caseandikelos
|
bf29e23e1c
|
add updated mac ifconfig support
|
2019-09-27 20:50:21 +01:00 |
|
|
Mike Auty
|
c00b820f74
|
Fix up recent Mac PagedInvalidAddress additions.
|
2019-09-27 11:21:49 +01:00 |
|
|
Mike Auty
|
153b3b7d39
|
Make sure we catch the most general exception for what we mean.
|
2019-09-27 11:19:53 +01:00 |
|
|
Andrew Case
|
2a98227306
|
Mac - have pstree inherit from tasks
|
2019-09-26 23:11:26 -05:00 |
|
|
Andrew Case
|
b1d07396a0
|
Mac - have psaux inherit from tasks
|
2019-09-26 23:08:33 -05:00 |
|
|
Andrew Case
|
49c4ae2aa4
|
Mac - have bash inherit from tasks
|
2019-09-26 23:05:49 -05:00 |
|
|
Andrew Case
|
a6e7c7a919
|
Mac - have malfind inherit from tasks
|
2019-09-26 23:01:37 -05:00 |
|
|
Andrew Case
|
7339c12eaa
|
Mac - have proc maps inherit from tasks
|
2019-09-26 22:52:45 -05:00 |
|
|
Andrew Case
|
3af593c16a
|
Mac - switch netstat to inherit from tasks
|
2019-09-26 22:07:41 -05:00 |
|
|
Andrew Case
|
2d7bc99d6a
|
Mac - make pslist smear resistant
|
2019-09-26 21:57:48 -05:00 |
|
|
Andrew Case
|
b4ad15c226
|
Mac - update lsof to inherit from tasks and be more smear resistant
|
2019-09-26 21:56:38 -05:00 |
|
|
Mike Auty
|
679a0eabc2
|
Tidy Exceptions and ensure LayerExceptions are passed a layer name.
|
2019-09-26 15:44:36 +01:00 |
|
|
Mike Auty
|
e0b9d72c84
|
Update the license URL and LICENSE.txt
|
2019-09-25 21:44:05 +01:00 |
|
|
Mike Auty
|
72567e1c50
|
Yapf-0.28.0 rerun across the whole codebase.
|
2019-09-21 21:08:23 +01:00 |
|
|
Mike Auty
|
d2b892cf94
|
Fix up docstring errors in documentation build
|
2019-09-19 23:00:37 +01:00 |
|
|
Mike Auty
|
1f9605abf7
|
Revert "Fix warnings when generated documentation."
This actually broke autodoc generation and wasn't accurate. The
documentation warnings may have to stay for now.
This reverts commit 37e13321f9.
|
2019-09-17 18:32:44 +01:00 |
|
|
Mike Auty
|
7efe19224e
|
Make several small typing information fixes.
|
2019-09-17 18:01:11 +01:00 |
|
|
Mike Auty
|
33451967b2
|
Typing fixes for virtmap and remove extranious exception.
|
2019-09-17 17:58:47 +01:00 |
|
|
superponibleandikelos
|
ae8822dddf
|
check if hive offset is valid before yielding
|
2019-09-17 16:59:50 +01:00 |
|
|
superponibleandikelos
|
2fa9e6b84d
|
fix typo in comment
|
2019-09-17 16:59:50 +01:00 |
|
|
superponibleandikelos
|
508a9148ed
|
catch InvalidAddressException when creating RegistryHive
|
2019-09-17 16:59:50 +01:00 |
|
|
superponibleandikelos
|
36f5e47d5b
|
fix up docstrings to match yield values
|
2019-09-17 16:59:50 +01:00 |
|
|
Mike Auty
|
c6cdbc7342
|
Move the hive_iterator to HiveList, since it's more intuitively where it should live.
|
2019-09-17 16:59:50 +01:00 |
|
|
Mike Auty
|
b292188319
|
Update userassist to use the new printkey API.
|
2019-09-17 16:59:50 +01:00 |
|
|
Mike Auty
|
46c047b7b3
|
Update API slightly to return objects not strings.
|
2019-09-17 16:59:50 +01:00 |
|
|
Mike Auty
|
b413e4a13d
|
Refactor printkey to be more usable from other plugins.
|
2019-09-17 16:59:50 +01:00 |
|
|
Mike Auty
|
10cf65fb60
|
Add in better documentation for callbacks.
|
2019-09-10 00:43:44 +01:00 |
|
|
Michael Lighandikelos
|
4e3db7a3de
|
add PluginRequirements for ssdt and svcscan. add missing _version to svcscan
|
2019-09-08 16:08:48 +01:00 |
|
|
Michael Lighandikelos
|
1d7f2a9582
|
use ntkrnlmp.object() instead of context.object(). remove config_path argument to list* functions
|
2019-09-08 16:08:48 +01:00 |
|
|
Michael Lighandikelos
|
50548bac73
|
reformat with yapf
|
2019-09-08 16:08:48 +01:00 |
|
|
Michael Lighandikelos
|
e71b72b3a7
|
add the windows callbacks plugin
|
2019-09-08 16:08:48 +01:00 |
|
|
Mike Auty
|
421af88c29
|
Classmethod make_subconfig so other classmethods can use it.
|
2019-09-08 14:50:48 +01:00 |
|
|
Mike Auty
|
03bc3d927d
|
Improve the name of a handles exposed function.
|
2019-09-08 13:22:42 +01:00 |
|
|
Mike Auty
|
3318e9c4a5
|
Fix a typo introduced in 5362e2094e.
|
2019-09-08 01:58:46 +01:00 |
|
|
Mike Auty
|
189b8c4d69
|
Update the windows info plugin with classmethods.
|
2019-09-07 23:00:41 +01:00 |
|