Elad Levi and GitHub
cb3e18ec9e
Update hashdump.py
...
calling `<reg_key>.Name` returns array, changed to `<reg_key>.get_name()` which returns a string (the if statement in the code didn't work before this change)
2025-05-19 13:24:58 +03:00
ikelos and GitHub
a413c44b00
Merge pull request #1810 from j-t-1/align
...
Align SeCreateTokenPrivilege with the other privileges
2025-05-16 22:29:00 +01:00
j-t-1 and GitHub
f79d0cb5ef
Align SeCreateTokenPrivilege with the other privileges
2025-05-16 20:10:50 +01:00
ikelos and GitHub
1a71b03b8d
Merge pull request #1791 from volatilityfoundation/feature/code-coverage
...
Add in coverage recording to the test process
2025-05-11 13:55:45 +01:00
ikelos and GitHub
28a72b8dd8
Merge pull request #1802 from eve-mem/linux_lsof_smear_comment
...
Linux: Add comment for explaining the behaviour with smear
2025-05-10 15:10:25 +01:00
eve
92eae9c50f
Linux: Add comment for explaining the behaviour with smear
2025-05-09 09:06:43 +01:00
ikelos and GitHub
ff6de6eab4
Merge pull request #1795 from Abyss-W4tcher/dentry_names_forward_slashes
...
Linux: prevent "forward slashes only" dentry names
2025-05-08 23:12:11 +01:00
ikelos and GitHub
686057d806
Merge pull request #1800 from SolitudePy/develop
...
add functions to etwpatch
2025-05-07 22:03:37 +01:00
SolitudePy and GitHub
f719efb9ec
dupe
2025-05-07 20:39:46 +03:00
SolitudePy
9ddf2d9abb
refs
2025-05-07 19:55:30 +03:00
SolitudePy
fc7e13f6f8
black
2025-05-07 19:30:58 +03:00
SolitudePy
94a0292328
add functions to etwpatch
2025-05-07 19:05:05 +03:00
ikelos and GitHub
57b28e5fa2
Merge pull request #1798 from volatilityfoundation/issues/fix-exe-build
...
Reformat and install volatility package deps before build
2025-05-06 23:06:43 +01:00
ikelos and GitHub
142add17a5
Merge pull request #1799 from volatilityfoundation/stable
...
Stable
2025-05-06 22:41:52 +01:00
ikelos and GitHub
606fecf5f8
Update volatility3/framework/plugins/windows/vadyarascan.py
2025-05-06 22:41:33 +01:00
ikelos and GitHub
c0c7119c38
Update volatility3/framework/plugins/windows/thrdscan.py
2025-05-06 22:41:27 +01:00
ikelos and GitHub
718f8ca2b5
Update volatility3/framework/plugins/linux/vmayarascan.py
2025-05-06 22:41:21 +01:00
ikelos and GitHub
65d3ff63bc
Merge branch 'develop' into stable
2025-05-06 22:37:47 +01:00
Mike Auty
ee445d9746
Add in workflow_dispatch for pyinstaller action
2025-05-06 22:27:03 +01:00
Mike Auty
92673be42c
Reformat and install volatility package deps before build
2025-05-06 22:15:38 +01:00
ikelos and GitHub
a7d64ad39d
Merge pull request #1796 from volatilityfoundation/release/v2.26.0
...
Release/v2.26.0
2025-05-06 21:27:58 +01:00
ikelos and GitHub
bb65fa31a6
Merge branch 'stable' into release/v2.26.0
2025-05-06 21:09:27 +01:00
Abyss Watcher
2759df89db
tag potentially smeared dentry names
2025-05-06 00:31:09 +02:00
Abyss Watcher
140a16d1dd
prevent forward slashes only dentry names
2025-05-05 21:44:05 +02:00
ikelos and GitHub
51f0a3081d
Merge pull request #1786 from volatilityfoundation/dgmcdona/handles_interface
...
Windows Handles: Refactor plugin
2025-05-01 17:49:58 +01:00
ikelos and GitHub
e22e82dcc2
Merge pull request #1787 from JakePeralta7/develop
...
Detect ETW Patching
2025-04-29 12:42:24 +01:00
Elad Levi and GitHub
19b094acf6
Fix lint errors
2025-04-29 14:20:42 +03:00
4738efefa3
Update volatility3/framework/plugins/windows/etwpatch.py
...
Co-authored-by: ikelos <ikelos@users.noreply.github.com >
2025-04-29 13:11:58 +03:00
cc1df7b461
Update volatility3/framework/plugins/windows/etwpatch.py
...
Co-authored-by: ikelos <ikelos@users.noreply.github.com >
2025-04-29 13:11:47 +03:00
39b35a3a80
Update volatility3/framework/plugins/windows/etwpatch.py
...
Co-authored-by: ikelos <ikelos@users.noreply.github.com >
2025-04-29 13:11:35 +03:00
Elad Levi
281a237e03
black and ruff fixes
2025-04-28 16:03:45 +00:00
Elad Levi
c5a4b34bfa
Fixed plugin docs
2025-04-28 15:18:53 +00:00
Elad Levi
817bd5ce7f
additional fixes
2025-04-28 15:07:03 +00:00
Elad Levi
c938678272
Fixed according to atcuno comments
2025-04-28 14:21:24 +00:00
Elad Levi
d449104d8b
removed unnecessary imports
2025-04-28 13:26:14 +00:00
Elad Levi
02634d0e30
oops
2025-04-28 12:54:46 +00:00
Elad Levi
533f96ec03
Added extended usage of pe_symbols
2025-04-28 12:53:46 +00:00
ikelos and GitHub
0c08b94547
Merge pull request #1793 from eve-mem/issue_1685
...
cli: add debug log of plugin version when the plugin is successfully constructed
2025-04-28 09:10:57 +01:00
eve
41142ef621
cli: add debug log of plugin version when the plugin is successfully constructed
2025-04-28 07:18:47 +01:00
ikelos and GitHub
8807e35cab
Merge pull request #1792 from volatilityfoundation/issues/update-codeql
...
Update codeql action from v2 to v3
2025-04-27 18:29:41 +01:00
Mike Auty
d3da34ce10
Update codeql action from v2 to v3
2025-04-27 16:18:47 +01:00
Mike Auty
f4a2c7aec2
Drop pycov requirement by 1 since github can't seem to find the most recent version
2025-04-27 15:02:12 +01:00
Mike Auty
bc265edcdc
Try to slightly loosen the pytest-cov requirement
2025-04-27 15:00:09 +01:00
Mike Auty
9c7655a635
Add in coverage recording to the test process
2025-04-27 14:56:17 +01:00
ikelos and GitHub
c6e8c0d4e8
Merge pull request #1783 from volatilityfoundation/bugfix/shimcache_tracebacks
...
Windows Shimcachemem: Fix tracebacks
2025-04-26 21:33:39 +01:00
ikelos and GitHub
577747f22c
Merge pull request #1789 from eve-mem/linux_issue_1603
...
Linux: update extensions used by kallsyms plugin to use utility.pointer_to_string fix issue #1603
2025-04-26 20:30:34 +01:00
eve
2d80f4680e
Linux: update kernel_symbol extensions _do_get_name and _do_get_namespace to use errors='ignore' to match previous implimentation
2025-04-25 16:52:48 +01:00
eve
2d1acaca51
Linux: update extensions used by kallsyms plugin to use utility.pointer_to_string
2025-04-25 16:40:06 +01:00
Mike Auty
b5c98a080a
Fix a default value being mutable
2025-04-25 11:31:45 +01:00
Elad Levi and GitHub
a167ddc04d
Update etwpatch.py
2025-04-24 20:51:02 +03:00
