Mike Auty
c163101e17
Correctly pass constructor arguments through the template's vol dictionary.
2015-01-05 18:39:59 +00:00
Mike Auty
cadb761f67
Fix documentation typo.
2015-01-05 16:01:14 +00:00
Mike Auty
49fa45cda1
Clean-up the namespace even more by putting the template proxy code into its own subclass.
2015-01-05 15:57:35 +00:00
Mike Auty
465bf03ad1
Fix casting.
2015-01-05 15:05:26 +00:00
Mike Auty
87967853f7
Convert volinfo namespace to vol namespace.
2015-01-05 15:04:40 +00:00
Mike Auty
7c53ae31bb
Fix up all the necessary components in the _LIST_ENTRY code.
2015-01-05 00:00:16 +00:00
Mike Auty
125510b21f
Fix quite a critical structure naming issue.
2015-01-04 23:59:05 +00:00
Mike Auty
f64b232f5a
Add in the iter function now that we finally have the member_name stored.
2015-01-04 23:10:48 +00:00
Mike Auty
6770aa1adb
Tidy up templates and template interfaces.
2015-01-04 23:09:30 +00:00
Mike Auty
44a375e720
Match the abstract property of the interface.
2015-01-04 21:21:34 +00:00
Mike Auty
0af0a5b21f
Avoid built-in shadowing.
2015-01-04 21:16:54 +00:00
Mike Auty
73bd451759
Minor pylinting across the whole project.
2015-01-04 21:14:17 +00:00
Mike Auty
ea3ba27a04
Refactor template_* functions.
2015-01-04 20:52:34 +00:00
Mike Auty
62e46c194d
Eliminate the *args, **kwargs from the intel translation layer code.
2015-01-04 04:59:14 +00:00
Mike Auty
21109c8eca
Revert "Remove the need for **magic from the intel translation layer."
...
This reverts commit c8dee9f827
2015-01-04 04:57:30 +00:00
Mike Auty
c8dee9f827
Remove the need for **magic from the intel translation layer.
2015-01-04 04:56:02 +00:00
Mike Auty
0046ffc0d7
Fix critical typo in intel translation layer.
2015-01-04 04:55:39 +00:00
Mike Auty
95238f7f01
Eradicate **magic where possible and rename where appropriate.
2015-01-04 04:55:17 +00:00
Mike Auty
e9e7f396ed
Refactor ReadOnlyInformation to the more appropriate ReadOnlyMapping.
2015-01-04 04:54:02 +00:00
Mike Auty
8560aa8a55
Tidy up the Object calling interface.
2015-01-04 04:38:34 +00:00
Mike Auty
446536d789
Remove the concept of template_info and revert to structure_name alone.
2015-01-04 04:27:52 +00:00
Mike Auty
15b2f6f717
Initial introduction of ObjectInformation class.
2015-01-04 03:41:37 +00:00
Mike Auty
88afd32158
Create an initial divide between object_information and template_information.
2015-01-02 01:52:00 +00:00
Mike Auty
09ee972e7e
Add in initial version of _LIST_ENTRY.
2015-01-02 00:12:28 +00:00
Mike Auty
85f639fd83
Remove attempt at type checking through annotations.
2015-01-02 00:10:22 +00:00
Mike Auty
d12bcf0666
Minor formatting change.
2014-12-31 21:04:55 +00:00
Mike Auty
932662e453
Fix up refactoring of the get_structure method.
2014-12-31 21:04:39 +00:00
Mike Auty
9c919a3d91
Fill in a few more of the missing abstract methods.
2014-12-31 21:03:52 +00:00
Mike Auty
811858aba8
Fix metaclass usage in python 3, and fill in some missing requirements.
2014-12-31 04:25:11 +00:00
Mike Auty
5655548d3f
Allow owning_process to be called without parameters.
2014-12-31 03:46:34 +00:00
Mike Auty
4a4deebda5
Fix up refactoring error in pointer dereference caching.
2014-12-31 03:45:56 +00:00
Mike Auty
bdb0c1488a
Update test_rig code to play around with code fragments.
2014-12-31 03:20:32 +00:00
Mike Auty
bc3ea39e97
Refactor the structure code to accomodate constant finding.
2014-12-31 03:12:28 +00:00
Mike Auty
47a1390bb9
Allow explicit dereferencing at a layer within memory.
...
This is in contrast to volatility-2.x where object were automatically
instantiated with a native_vm (or native_layer in 3.x parlance) and then
any dereferences occurred in the correct layer.
The space savings are now minimal since each object carries around only
a layer name, and not a reference to the entire space. However, given
situations such as kernel structures containing pointers into
process spaces, where the native_vm is useless, this decision is
designed to make working on a particular layer explicit and therefore
more obvious. It may mean exposing that up through levels of functions,
but hopefully it will make all the code more obvious and less
automagical.
2014-12-31 03:03:31 +00:00
Mike Auty
ed5d047dc9
Clean-up member/attribute selection.
2014-12-30 22:49:02 +00:00
Mike Auty
3c54065cdc
Add array type validity checking.
2014-12-30 04:19:34 +00:00
Mike Auty
04720d5ab9
Fix two important typo errors in Arrays.
2014-12-30 04:08:59 +00:00
Mike Auty
5d5522d04c
Catch a few errors during plugin importing.
2014-12-30 03:51:49 +00:00
Mike Auty
77417b2785
Add in relative_child_offset and refactor to reuse the checking code.
2014-12-30 03:51:02 +00:00
Mike Auty
595ec89db1
Fix up some fairly critical core typos.
2014-12-30 03:50:22 +00:00
Mike Auty
c1d054df10
Rename functions in validity to avoid future member name collisions.
2014-12-30 03:49:31 +00:00
Mike Auty
38b0791233
General code refactor.
2014-12-30 03:43:36 +00:00
Mike Auty
3395ade2fa
Rethink the plugin intialization process.
2014-07-08 23:21:08 +01:00
Mike Auty
bcc1df08bc
Correct mis-ordered decorators.
2014-07-08 22:02:53 +01:00
Mike Auty
58e2365788
Add in initial requirements for plugins to state their inputs.
2014-07-08 11:17:39 +01:00
Mike Auty
d6b131980b
Add in skeleton plugin to check the API.
2014-07-07 23:33:08 +01:00
Mike Auty
c29028dd30
Initial attempt at plugin importing.
2014-07-05 22:33:40 +01:00
Mike Auty
39c0b38f09
Add additional docstrings and refactor/rearrange the entire codebase.
2014-06-11 01:35:50 +01:00
Mike Auty
a97bd19988
Reformat and optimize code, including trailing whitespace and end of file newline.
2014-06-10 15:40:50 +01:00
Mike Auty
2222dd546a
Change my mind on deep copying returned lists, we might want to change the values of an arbitrary row later on.
2014-04-14 02:24:48 +01:00
Mike Auty