WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-08-30 11:49:42 +02:00
Code Issues Packages Projects Releases Wiki Activity
3,957 Commits 80 Branches 17 Tags
c610497fa04de41042104fdefbfa243c0bcf76a9
Commit Graph
3957 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Eve c610497fa0 Windows: update vadyarascan to use generic yarascan requirements 2023-11-29 09:28:34 +00:00
ikelosandGitHub 4ce42fcac4 Merge pull request #1049 from volatilityfoundation/issues/improve-mftscan 
Simplify attribute object accesses
 2023-11-28 21:45:13 +00:00
Mike Auty 8d5877e904 Simplify attribute object accesses 
This is a very small percentage slower, for some reason, than the
previous mechanism, probably overhead from object creation/member
access.  However, it vastly simplifies the code and makes better use of
the volatility object model.
 2023-11-27 01:00:00 +00:00
ikelosandGitHub 9f9afbf90f Merge pull request #1048 from volatilityfoundation/issues/issue922 
Issues/issue922
 2023-11-26 12:53:49 +00:00
Mike Auty 8b6ab44310 Core: Fix array_of_pointers to act only on those pointers 2023-11-26 12:30:06 +00:00
Mike Auty 62506aece6 Core: Fix up github security issues 
This fixes an unused import, an improper use of self and lots and lots
of places where we implicitly return None.  This now explicitly returns
None to improve readability and prevent mixed implicit and explicit
return values.  This should also somewhat aid type checking by humans.
 2023-11-26 11:24:53 +00:00
ikelosandGitHub 7012edb815 Merge pull request #885 from eve-mem/vmayarascan 
add linux.vmayarascan
 2023-11-23 09:08:17 +00:00
ikelosandGitHub d56297c4b1 Merge pull request #1038 from eve-mem/linux_check_afinfo_member_checks 
Linux: add member presence checks to linux.checks_afinfo
 2023-11-15 23:00:25 +00:00
Eve 4f4e2efd99 Linux: update warning logic in linux.checks_afinfo so that only one warning is shown and debug logs are cleaner 2023-11-15 10:29:06 +00:00
ikelosandGitHub c616c0b35e Merge pull request #1011 from eve-mem/layer_debug_info 
Layer debug info to show file size
 2023-11-15 01:06:13 +00:00
ikelosandGitHub 2e4d6cde17 Merge pull request #1035 from eve-mem/linux_bash_get_sections_only_once 
Linux: update bash plugin to only get memory sections once
 2023-11-15 00:59:30 +00:00
ikelosandGitHub 19d40b1a7f Merge pull request #1027 from daddycocoaman/fix/pdbutility-signature 
fix guid and pdb_name for #1026
 2023-11-14 23:38:53 +00:00
Eve f7d5e722a2 Linux: add member presence checks to linux.checks_afinfo _check_afinfo function to stop crashes when none of the required members are present 2023-11-13 07:05:30 +00:00
Eve 9fe7d479f6 Linux: update bash plugin to only get memory sections once 2023-11-10 20:58:07 +00:00
ikelosandGitHub 82c5af76df Merge pull request #1024 from volatilityfoundation/feature/citation 
Documentation: Add in a CITATION.cff file
 2023-11-08 20:20:09 +00:00
Leron GrayandGitHub 40dcff16e9 Merge branch 'volatilityfoundation:develop' into fix/pdbutility-signature 2023-11-06 11:37:01 -06:00
ikelosandGitHub fda1db4695 Merge pull request #1023 from volatilityfoundation/feature/santitize-filenames 
Core: Add (optional) sanitization to the FileHandler class
 2023-11-06 08:24:19 +00:00
Leron Gray c2b008969c update pefile requirements 2023-11-05 16:25:43 -06:00
Leron Gray b9c4a1d8a7 fix guid and pdb_name for #1026 2023-10-31 13:52:26 -05:00
Mike Auty 3bb1285dbf Layers: Make removal of a layer more efficient, as noted in #809 2023-10-29 13:53:55 +00:00
ikelosandGitHub e5d3134508 Merge pull request #1025 from Abyss-W4tcher/remote_isf 
Core: Remote ISF - correct sql query and strip identifier
 2023-10-23 19:03:46 +01:00
Abyss Watcher c20baf9d1f black formatting 2023-10-23 17:49:03 +02:00
Abyss Watcher 2d3b3158dc correct sql query and strip identifier 2023-10-21 23:34:17 +02:00
ikelosandGitHub 11ddafde44 Merge pull request #999 from 616c696365/fix-issue-895 
Windows: Update pslist.py, add friendly option
 2023-10-19 10:29:42 +01:00
ikelosandGitHub 104623ede2 Merge pull request #1018 from volatilityfoundation/1017-printkey-breaks-when-encountering-invalid-root-node 
issue #1017 - check for valid root node type
 2023-10-19 10:18:55 +01:00
ikelosandGitHub 806801ea69 Merge pull request #1020 from volatilityfoundation/1019-printkey-timestamps-are-misleadingincorrect 
issue #1019 - for subkeys, return the modified time of the subkey its…
 2023-10-19 10:18:22 +01:00
Dave Lassalle a497216beb issue #1019 - black updates 2023-10-18 14:09:42 -05:00
Dave Lassalle fcaba2d95a issue #1017 - black updates 2023-10-18 14:08:50 -05:00
616c696365 7323bd3a59 windows.pslist process name added to dumped file by default 2023-10-18 19:16:10 +01:00
Mike Autyand616c696365 5d43071f57 Core: Add (optional) sanitization to the FileHandler class 2023-10-18 19:16:10 +01:00
616c696365andGitHub f2f412d555 Merge branch 'volatilityfoundation:develop' into fix-issue-895 2023-10-18 18:44:24 +01:00
Mike Auty 14fa5ad771 Documentation: Add in a CITATION.cff file 
Initial addition of a CITATION file, no version information was included
because keeping it up to date with the version in the repo automatically
would be tricky and not doing so would lead it to becoming out of sync.

Fixes #1013.
 2023-10-17 16:27:29 +01:00
Mike Auty 63ace60995 Core: Add (optional) sanitization to the FileHandler class 2023-10-17 15:54:10 +01:00
ikelosandGitHub 57924c5da1 Merge pull request #1001 from xabrouck/oldkernel 
Making cred optional as it didn't exist in old 2.6 kernels
 2023-10-17 15:34:10 +01:00
ikelosandGitHub 15ad1db01b Merge pull request #1016 from eve-mem/vmem_warnings 
vmware: Add warning when no metadata file is found for a vmem file.
 2023-10-17 15:02:11 +01:00
Eve e45380f4f5 Update vmware layer metadata file warning to be less doom and gloom. 2023-10-13 09:29:46 +01:00
Dave Lassalle 95c468c4f8 issue #1019 - for subkeys, return the modified time of the subkey itself, not its parent key 2023-10-12 10:16:56 -05:00
Dave Lassalle 9cc73b6a03 issue #1017 - check for valid root node type 2023-10-12 09:57:24 -05:00
Eve 310b6508db vmware: Add warning when no metadata file is found for a vmem file. 2023-10-11 09:09:15 +01:00
EveandGitHub faa8b2eaa9 Merge branch 'volatilityfoundation:develop' into vmayarascan 2023-10-09 17:16:56 +01:00
Mike Auty 93b2972832 Renderers: Allow nodes to be turned into dictionaries 2023-10-08 22:19:17 +01:00
EveandGitHub 40d993b1a0 Merge branch 'volatilityfoundation:develop' into layer_debug_info 2023-10-03 07:43:13 +01:00
ikelosandGitHub 87cdf87100 Merge pull request #1004 from ShutdownRepo/test-workflow 
Adding test install workflow for GitHub Actions pipelines
 2023-09-28 17:17:48 +01:00
Shutdown 370b6774ea Remove macOS from matrix hosts 2023-09-17 23:21:56 +02:00
Mike Auty 47ddf5d0e5 Core: Bump the version after 2.5.0 release branch 2023-09-06 20:34:13 +01:00
ikelosandGitHub b5b9c8ac41 Merge pull request #1003 from volatilityfoundation/issues/issue1002 
Core: Fix missing packages in setup.py
 2023-09-06 00:54:04 +01:00
ikelosandGitHub 5e8dfc0af2 Merge branch 'develop' into issues/issue1002 2023-09-06 00:50:32 +01:00
Mike Auty 803c56e3c4 Core: include the volatility3 package and all volatility3 subpackages 2023-09-05 23:51:17 +01:00
Mike Auty 9d2fd40517 Revert "Core: Include only volatility3 in distributions packages" 
This reverts commit b4c6b661f0.
 2023-09-05 23:07:57 +01:00
Shutdown ef341d54d6 Fixing fail-fast strategy 2023-09-05 22:37:45 +02:00