 Mike Auty
|
4457bcaee0
|
vadyarascan: Ensure we scan the right layer
This patch ensures we scan the vad segments within the correct layer
(the process layer, not the kernel layer) and lists the pid in the
output.
|
2019-10-31 19:15:02 +00:00 |
|
|
Mike Auty
|
27a291cf61
|
Remove the erronious print statement, which should be a vollog message if needed.
|
2019-10-18 08:39:56 -04:00 |
|
|
Mike Auty
|
0be9061989
|
Tidy up commit e0097ac.
|
2019-10-18 08:38:17 -04:00 |
|
|
atcuno
|
3df5e9957e
|
Windows - add missing add_process_layer exception handling in a few plugins
|
2019-10-17 11:47:19 -04:00 |
|
|
atcuno
|
e0097ac9c1
|
Windows - protect handles from smear
|
2019-10-17 11:03:48 -04:00 |
|
|
atcuno
|
2e329d1106
|
Windows - add exception handling around is_valid in callbacks
|
2019-10-17 10:22:06 -04:00 |
|
|
Mike Auty
|
3784c9aff6
|
Fix up missing/inaccurate plugin description strings.
|
2019-10-03 01:05:57 +01:00 |
|
|
Mike Auty
|
3b656e337a
|
Update windows extensions to ensure they're documented.
|
2019-10-02 20:25:54 +01:00 |
|
|
Mike Auty
|
10a379b0ee
|
Make 'import as' consistent and ensure proper plugin dependencies.
|
2019-10-02 01:25:03 +01:00 |
|
|
Mike Auty
|
9a17beb77f
|
Ensure consistency of importing interfaces.
|
2019-10-02 01:18:46 +01:00 |
|
|
Mike Auty
|
8e10f4e3d1
|
Clarify handles error message.
|
2019-10-02 00:06:25 +01:00 |
|
|
Mike Auty
|
9ac622afa0
|
Fix up import style to be consistent.
|
2019-10-01 23:46:02 +01:00 |
|
|
Mike Auty
|
153b3b7d39
|
Make sure we catch the most general exception for what we mean.
|
2019-09-27 11:19:53 +01:00 |
|
|
Mike Auty
|
679a0eabc2
|
Tidy Exceptions and ensure LayerExceptions are passed a layer name.
|
2019-09-26 15:44:36 +01:00 |
|
|
Mike Auty
|
e0b9d72c84
|
Update the license URL and LICENSE.txt
|
2019-09-25 21:44:05 +01:00 |
|
|
Mike Auty
|
72567e1c50
|
Yapf-0.28.0 rerun across the whole codebase.
|
2019-09-21 21:08:23 +01:00 |
|
|
Mike Auty
|
d2b892cf94
|
Fix up docstring errors in documentation build
|
2019-09-19 23:00:37 +01:00 |
|
|
Mike Auty
|
1f9605abf7
|
Revert "Fix warnings when generated documentation."
This actually broke autodoc generation and wasn't accurate. The
documentation warnings may have to stay for now.
This reverts commit 37e13321f9.
|
2019-09-17 18:32:44 +01:00 |
|
|
Mike Auty
|
7efe19224e
|
Make several small typing information fixes.
|
2019-09-17 18:01:11 +01:00 |
|
|
Mike Auty
|
33451967b2
|
Typing fixes for virtmap and remove extranious exception.
|
2019-09-17 17:58:47 +01:00 |
|
|
superponibleandikelos
|
ae8822dddf
|
check if hive offset is valid before yielding
|
2019-09-17 16:59:50 +01:00 |
|
|
superponibleandikelos
|
2fa9e6b84d
|
fix typo in comment
|
2019-09-17 16:59:50 +01:00 |
|
|
superponibleandikelos
|
508a9148ed
|
catch InvalidAddressException when creating RegistryHive
|
2019-09-17 16:59:50 +01:00 |
|
|
superponibleandikelos
|
36f5e47d5b
|
fix up docstrings to match yield values
|
2019-09-17 16:59:50 +01:00 |
|
|
Mike Auty
|
c6cdbc7342
|
Move the hive_iterator to HiveList, since it's more intuitively where it should live.
|
2019-09-17 16:59:50 +01:00 |
|
|
Mike Auty
|
b292188319
|
Update userassist to use the new printkey API.
|
2019-09-17 16:59:50 +01:00 |
|
|
Mike Auty
|
46c047b7b3
|
Update API slightly to return objects not strings.
|
2019-09-17 16:59:50 +01:00 |
|
|
Mike Auty
|
b413e4a13d
|
Refactor printkey to be more usable from other plugins.
|
2019-09-17 16:59:50 +01:00 |
|
|
Mike Auty
|
10cf65fb60
|
Add in better documentation for callbacks.
|
2019-09-10 00:43:44 +01:00 |
|
|
Michael Lighandikelos
|
4e3db7a3de
|
add PluginRequirements for ssdt and svcscan. add missing _version to svcscan
|
2019-09-08 16:08:48 +01:00 |
|
|
Michael Lighandikelos
|
1d7f2a9582
|
use ntkrnlmp.object() instead of context.object(). remove config_path argument to list* functions
|
2019-09-08 16:08:48 +01:00 |
|
|
Michael Lighandikelos
|
50548bac73
|
reformat with yapf
|
2019-09-08 16:08:48 +01:00 |
|
|
Michael Lighandikelos
|
e71b72b3a7
|
add the windows callbacks plugin
|
2019-09-08 16:08:48 +01:00 |
|
|
Mike Auty
|
421af88c29
|
Classmethod make_subconfig so other classmethods can use it.
|
2019-09-08 14:50:48 +01:00 |
|
|
Mike Auty
|
03bc3d927d
|
Improve the name of a handles exposed function.
|
2019-09-08 13:22:42 +01:00 |
|
|
Mike Auty
|
3318e9c4a5
|
Fix a typo introduced in 5362e2094e.
|
2019-09-08 01:58:46 +01:00 |
|
|
Mike Auty
|
189b8c4d69
|
Update the windows info plugin with classmethods.
|
2019-09-07 23:00:41 +01:00 |
|
|
Mike Auty
|
e922cef316
|
Improve docstrings for all plugins, and reformat all docstrings.
|
2019-09-07 22:59:54 +01:00 |
|
|
Mike Auty
|
dc0a809729
|
Printkey: Don't offer two options for the same value.
|
2019-09-07 22:05:09 +01:00 |
|
|
Mike Auty
|
959e1617fd
|
Shift one-time checks out of loops.
|
2019-09-07 12:40:32 +01:00 |
|
|
Mike Auty
|
b158c58310
|
Ensure non-found keys mimic found key output a little closer.
|
2019-09-01 22:44:42 +01:00 |
|
|
Mike Auty
|
952a1b9d69
|
Move printkey recursion around to get proper tree depth.
|
2019-09-01 16:17:26 +01:00 |
|
|
Mike Auty
|
f040ceed96
|
Ensure keys and values are at the same level.
|
2019-09-01 16:10:58 +01:00 |
|
|
Mike Auty
|
3d7b2a520b
|
Ensure the tree output for printkey doesn't jump into deep layers.
|
2019-09-01 16:05:51 +01:00 |
|
|
Mike Auty
|
39c4d061a1
|
Convert registry.printkey hive_walker to a class method.
|
2019-08-31 14:32:35 +01:00 |
|
|
Mike Auty
|
a3caf39097
|
Use a mapping to determine kind to class.
|
2019-08-31 12:57:53 +01:00 |
|
|
Mike Auty
|
9cde94bceb
|
Change the license blurb on all files.
|
2019-08-27 23:11:00 +01:00 |
|
|
Mike Auty
|
42b2fb120a
|
Swap TranslationLayerInterface decendents over to LinearMappedLayers
|
2019-08-27 21:09:13 +01:00 |
|
|
Mike Auty
|
71bb54379b
|
Refactor the plugin versioning to be simpler to define.
|
2019-08-27 21:08:29 +01:00 |
|
|
Mike Auty
|
47c349e240
|
Add plugin requirements for all plugins.
|
2019-08-27 21:08:29 +01:00 |
|