 ikelosandGitHub
|
c65c2ef43a
|
Merge pull request #1929 from volatilityfoundation/issues/windows11-dtb
Improve windows intel detection for Windows 11
|
2026-02-19 20:08:42 +00:00 |
|
|
ikelosandGitHub
|
e8ffe1ddb0
|
Merge pull request #1937 from volatilityfoundation/issues/issue1373-add-windows-support-to-banners
Issues/issue1373 add windows support to banners
|
2026-02-05 16:07:14 +00:00 |
|
|
Mike Auty
|
48a5000f78
|
Make the output of banners match the identifier in isfinfo
|
2026-01-31 18:03:55 +00:00 |
|
|
Mike Auty
|
743927d6a2
|
Make black happy
|
2026-01-31 18:00:07 +00:00 |
|
|
Mike Auty
|
1b58e7e25b
|
Add version to pdb signature scanner and require it for the banners plugin
|
2026-01-31 17:58:45 +00:00 |
|
|
Mike Auty
|
881d4e85e8
|
Add in intial support for locating windows 'banners'
|
2026-01-31 17:53:30 +00:00 |
|
|
Mike Auty
|
a52b26e15c
|
Merge branch 'stable' into develop
|
2026-01-29 21:54:34 +00:00 |
|
|
ikelosandGitHub
|
f54c4db6ef
|
Merge pull request #1935 from volatilityfoundation/release/v2.27.0
Release/v2.27.0
|
2026-01-29 21:28:51 +00:00 |
|
|
Mike Auty
|
d8485fe460
|
Add arrow support to pyinstaller build
v2.27.0
|
2026-01-29 21:04:51 +00:00 |
|
|
Mike Auty
|
6b9a6f84c3
|
Bump year for copyrights to 2026
|
2026-01-29 20:39:09 +00:00 |
|
|
ikelosandGitHub
|
0f95d6e44c
|
Merge pull request #1932 from kyrre/feature/multitypedata-repr
Fix format_hints.MultiTypeData representation in Parquet/Arrow renderers
|
2026-01-25 14:01:45 +00:00 |
|
|
kyrre
|
9949565bd8
|
use pa.bytes instead of pa.utf8 for format_hints.MultiTypeData
|
2026-01-14 19:55:43 +01:00 |
|
|
Mike Auty
|
d0ed42456c
|
Increment the size of the amount scanned, not just the start location
|
2026-01-08 22:34:32 +00:00 |
|
|
Mike Auty
|
1abd67746f
|
Appease black
|
2026-01-08 22:04:18 +00:00 |
|
|
Mike Auty
|
9d67420d0e
|
Improve windows intel detection for Windows 11
|
2026-01-08 21:59:03 +00:00 |
|
|
ikelosandGitHub
|
ad1da577e0
|
Merge pull request #1926 from volatilityfoundation/issues/issue1309
Avoid trying to lookup child nodes that have been filtered
|
2026-01-03 13:52:09 +00:00 |
|
|
ikelosandGitHub
|
ade1cf27d8
|
Merge pull request #1826 from SolitudePy/linux_procspoof
process_spoofing plugin
|
2025-12-31 21:11:27 +00:00 |
|
|
SolitudePy
|
e8087dd68d
|
Plugins: process_spoofing put reference in docstring
|
2025-12-31 20:23:05 +02:00 |
|
|
SolitudePy
|
088a64379c
|
black
|
2025-12-31 20:13:01 +02:00 |
|
|
SolitudePy
|
2478c1398e
|
Plugins: get first argument using utility.address_to_string in process_spoofing
|
2025-12-31 20:06:50 +02:00 |
|
|
ikelosandGitHub
|
590b5abe89
|
Merge pull request #1120 from eve-mem/linux_sockscan
Add linux sockscan plugin
|
2025-12-31 15:54:39 +00:00 |
|
|
eve
|
94f989be7a
|
Linux: update sockscan to add docstring to _find_file_ops_needles
|
2025-12-31 12:54:41 +00:00 |
|
|
eve
|
66ec4f4372
|
Linux: update sockstat docstring for _walk_file_ops_needles. Rename physical_memory_layer_name for clarity
|
2025-12-31 12:49:45 +00:00 |
|
|
eve
|
6aa552cd03
|
Fix black formatting in sockscan
|
2025-12-31 12:25:22 +00:00 |
|
|
|
f11347739b
|
Apply suggestions from code review
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-12-31 12:22:48 +00:00 |
|
|
|
c47ab6ba11
|
Apply suggestion from @ikelos
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-12-31 12:21:47 +00:00 |
|
|
|
55c0b9b0a8
|
Apply suggestion from @ikelos
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-12-31 12:21:32 +00:00 |
|
|
|
4369935be4
|
Apply suggestion from @ikelos
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-12-31 12:21:19 +00:00 |
|
|
|
da6a1e5444
|
Update volatility3/framework/plugins/linux/sockscan.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-12-31 12:20:57 +00:00 |
|
|
|
13aa0dd2dc
|
Update volatility3/framework/plugins/linux/sockscan.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-12-31 12:20:44 +00:00 |
|
|
|
35d24d8d17
|
Update volatility3/framework/plugins/linux/sockscan.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-12-31 12:20:30 +00:00 |
|
|
|
4fbd54361a
|
Update volatility3/framework/plugins/linux/sockscan.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-12-31 12:20:20 +00:00 |
|
|
|
3872133f5d
|
Update volatility3/framework/plugins/linux/sockscan.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-12-31 12:20:09 +00:00 |
|
|
|
7ba46943bb
|
Update volatility3/framework/plugins/linux/sockscan.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-12-31 12:19:59 +00:00 |
|
|
|
be11441ef0
|
Update volatility3/framework/plugins/linux/sockscan.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-12-31 12:19:50 +00:00 |
|
|
|
c7510f7e00
|
Update volatility3/framework/plugins/linux/sockscan.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-12-31 12:19:37 +00:00 |
|
|
|
5205d2cee0
|
Update volatility3/framework/plugins/linux/sockscan.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-12-31 12:19:08 +00:00 |
|
|
|
a2e033dfc8
|
Update volatility3/framework/plugins/linux/sockscan.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-12-31 12:18:48 +00:00 |
|
|
EveandGitHub
|
aabca91e4b
|
Merge branch 'volatilityfoundation:develop' into linux_sockscan
|
2025-12-31 11:19:29 +00:00 |
|
|
ikelosandGitHub
|
a7f96b4b25
|
Merge pull request #1814 from Abyss-W4tcher/vma_enumeration_smearing_protection
Linux: enhance VMA enumeration smearing protection
|
2025-12-31 01:54:38 +00:00 |
|
|
SolitudePy
|
d13de25b46
|
Constants: add MAX_ARG_STRLEN linux constant
|
2025-12-31 00:26:09 +02:00 |
|
|
SolitudePy
|
9c5950e595
|
Plugins: process_spoofing bump required_framework_version
|
2025-12-29 19:00:30 +02:00 |
|
|
SolitudePy
|
4cb326fb6e
|
black and ruff
|
2025-12-29 19:00:30 +02:00 |
|
|
SolitudePy
|
c3ddc094cb
|
Plugins: process spoofing handle none values and set more classmethods
|
2025-12-29 19:00:30 +02:00 |
|
|
SolitudePy
|
cbe5b46b8e
|
Plugins: process_spoofing change extract_process_names to classmethod
|
2025-12-29 19:00:30 +02:00 |
|
|
SolitudePy
|
1359a11f24
|
Plugins: truncate deleted to check spoofing in process_spoofing
|
2025-12-29 19:00:30 +02:00 |
|
|
SolitudePy
|
9686b5ae8b
|
Plugins: utilize linuxutilities.path_for_file (deleted) logic solely
|
2025-12-29 19:00:30 +02:00 |
|
|
SolitudePy
|
d384f62721
|
Plugins: make get_executable_path more accurate in process_spoofing
|
2025-12-29 19:00:30 +02:00 |
|
|
SolitudePy
|
41f964cfe1
|
Plugins: determine process exe deletion structurally
|
2025-12-29 19:00:30 +02:00 |
|
|
SolitudePy
|
5c7cf11152
|
black
|
2025-12-29 19:00:30 +02:00 |
|