Commit Graph
2726 Commits
Author SHA1 Message Date
ikelosandGitHub c75bef2b05 Merge pull request #477 from dadokkio/develop
enable support for compiled rules in Yara
2021-03-15 22:54:55 +00:00
Mike Auty 0a7a749667 Documentation: Add text about banners and isfinfo 2021-03-15 11:15:44 +00:00
Mike Auty 970d15a82e Documentation: Document volshell 2021-03-14 21:47:53 +00:00
Mike Auty 5d77a7ca6b PDB: Don't bump the version unnecessarily
The version field of the producer should be enough to determine the
difference
2021-03-13 18:50:29 +00:00
Mike Auty 638d73b822 PDB: Improve pdb parsing 2021-03-13 15:34:02 +00:00
Mike Auty cdf67cad2b Windows: Cache PDB files again
Unfortunately, opening the file as a layer will cause it to cache anyway
2021-03-13 01:50:11 +00:00
dadokkio cd3ad1e067 fix config 2021-03-12 13:09:38 +01:00
Arcuri DavideandGitHub 5c8bd3c9d9 enable support for compiled rules 2021-03-12 11:30:04 +01:00
Mike Auty 5eaa5ef7b2 CLI: Remove unnecessary urllib imports 2021-03-11 15:50:45 +00:00
Mike Auty a9e91ea19b Objects: Writing an object should return the re-read object 2021-03-07 16:08:36 +00:00
Mike Auty 5e01ab811b CLI: Improve URI handling error for windows 2021-03-07 13:08:48 +00:00
Mike Auty 6a6e2a0e5c CLI: Fix and refactor the URI handling code 2021-03-07 13:03:45 +00:00
Mike Auty 01025c88bb CLI: Fixes windows file path handling
Closes: #470
2021-03-07 12:44:15 +00:00
ikelosandGitHub 099042ec3d Merge pull request #471 from chop0/patch-1
Update copyright notice
2021-03-07 10:50:41 +00:00
Alec PetridisandGitHub 69d303da8c Update copyright notice 2021-03-06 22:44:19 -08:00
Mike Auty 1b57a899e8 Objects: Encode strings as bytes when writing 2021-03-05 01:16:14 +00:00
Mike Auty 62c1d1df35 Layers: Avoid writing to unwritable physical layers 2021-03-05 01:14:44 +00:00
Mike Auty 963b448d36 Objects: Revert setting attributes to write data 2021-03-05 01:13:34 +00:00
Mike Auty f251a1db15 Windows: Update PDB code to work without cache 2021-03-05 01:10:26 +00:00
Mike Auty bc47073903 CLI: Fix logging issue after root logger change 2021-03-05 00:17:09 +00:00
ikelosandGitHub 3fe8e2d4d9 Merge pull request #469 from volatilityfoundation/feature/improved-object-writing
Objects: Improve writing of objects
2021-03-04 23:45:14 +00:00
ikelosandGitHub 9ef972192d Merge pull request #468 from volatilityfoundation/feature/improved-typing
Core: Improve typing across codebase
2021-03-04 23:36:42 +00:00
Mike Auty a75ccd72b1 Layers: Restore a loss from a rebase/merge 2021-03-04 23:34:04 +00:00
Mike Auty f51b534792 Merge branch 'feature/better-nonexistant-file-handling' into develop 2021-03-04 23:26:07 +00:00
Mike Auty 2fe7e22bf8 CLI: Tidy up single_location handling 2021-03-04 23:25:53 +00:00
ikelosandGitHub 7613cd7a00 Merge pull request #467 from volatilityfoundation/feature/partial-cache-to-tmpfile-move
Layers: Allow manual cache control and disable for PDB
2021-03-04 23:15:56 +00:00
Mike Auty 0c8c52ba32 Layers: Allow manual cache control and disable for PDB 2021-03-04 23:13:44 +00:00
Mike Auty 0b4f49736c Volshell: Fix missing import 2021-03-04 18:48:58 +00:00
ikelosandGitHub 51c3818d71 Merge pull request #461 from volatilityfoundation/feature/regex-trie
Layers: Improve regex scanning for linux/mac
2021-03-02 15:54:37 +00:00
Mike Auty 2a41b1eee9 Linux: Make bang_addrs has something to search for 2021-03-02 15:50:21 +00:00
Mike Auty 1d35406ffe CLI: Improve file parameter handling 2021-03-02 15:45:21 +00:00
Mike Auty 9deb0c9d8a CLI: Fix early logging target 2021-03-02 11:15:16 +00:00
Mike Auty 681b68f252 Objects: Improve writing of objects 2021-02-28 02:44:41 +00:00
Mike Auty 77e406e408 Layers: Fix issue if leechcore not available 2021-02-25 18:07:28 +00:00
Mike Auty 70a94bf205 Automagic: Make sure Linux gets in the metadata too 2021-02-25 18:02:16 +00:00
ikelosandGitHub b180cc163a Merge pull request #459 from AsafEitani/match-pid-result-fields
changing PID field names
2021-02-25 01:29:54 +00:00
ikelosandGitHub 561058624c Merge pull request #460 from volatilityfoundation/feature/leechcore-support
Layers: Add in LeechCore physical file support
2021-02-24 17:43:12 +00:00
Mike Auty e27fc115dc Layers: Improve regex scanning for linux/mac 2021-02-24 17:39:43 +00:00
Mike Auty e18e9700f2 Core: Improve typing across codebase 2021-02-24 01:13:49 +00:00
Mike Auty 8131a9e817 Layers: Add in LeechCore physical file support 2021-02-23 14:46:43 +00:00
AsafEitani cf3ad1a6eb changing PID field names
Changing the pid name field of the result to match the PID of all other plugins
2021-02-23 12:28:17 +02:00
ikelosandGitHub 5144995a76 Merge pull request #458 from AsafEitani/cachedump-concat-bugfix
Fix bytes to str concat - resulting in error
2021-02-23 10:25:47 +00:00
AsafEitani b8c8e0f852 Update cachedump.py
fix bytes to str concat
2021-02-23 12:19:12 +02:00
Mike Auty 8b6c6b604d Layers: Allow handler to avoid caching 2021-02-19 01:17:34 +00:00
Mike Auty f562c3e864 Plugins: Layerwriter should not require an architecture 2021-02-17 02:01:36 +00:00
Mike Auty 00a4d5ea4f Layers: Fix circular import issue 2021-02-16 18:03:21 +00:00
ikelosandGitHub 9466c154e0 Merge pull request #455 from volatilityfoundation/issues/metadata-inheritance
Layers: Metadata inheritance wasn't per-instance
2021-02-16 17:59:55 +00:00
Mike Auty 2de3cfcce2 Layers: Metadata inheritance wasn't per-instance 2021-02-16 16:51:29 +00:00
ikelosandGitHub e0fb13284f Merge pull request #436 from volatilityfoundation/issues/more-efficient-scanning
Issues/more efficient scanning
2021-02-15 18:08:26 +00:00
ikelosandGitHub 51c8ad6263 Merge pull request #454 from volatilityfoundation/issues/out-of-bound-mapping
Layers: Don't map intel out-of-bounds addresses
2021-02-07 20:55:22 +00:00