 Abyss Watcher
|
cd2d396c9e
|
tmp commit to resolve pstree case sensitive filename
|
2025-03-12 16:54:49 +01:00 |
|
|
Abyss Watcher
|
c4054b4122
|
correct pstree json name
|
2025-03-12 16:51:14 +01:00 |
|
|
Abyss Watcher
|
489265e86c
|
make modules test specific
|
2025-03-12 16:28:19 +01:00 |
|
|
Abyss Watcher
|
ff55a0ea6c
|
use win10 generic sample as main testing
|
2025-03-12 16:25:47 +01:00 |
|
|
Abyss Watcher
|
d37f7b98f5
|
first windows testing enhancement iteration
|
2025-03-12 16:22:54 +01:00 |
|
|
Abyss Watcher
|
a539047516
|
correctly order volshell args
|
2025-03-12 16:19:08 +01:00 |
|
|
Abyss Watcher
|
ca20b6e979
|
enhance and extend testing helper functions
|
2025-03-12 16:10:12 +01:00 |
|
|
Abyss Watcher
|
2d5a6eeb8e
|
add windows10 sample abstraction
|
2025-03-12 16:09:13 +01:00 |
|
|
Abyss Watcher
|
d6362e010f
|
add testing data constants
|
2025-03-12 16:08:52 +01:00 |
|
|
Abyss Watcher
|
7b0628d9c1
|
windows testing data
|
2025-03-12 15:59:07 +01:00 |
|
|
ikelosandGitHub
|
e2d48b8018
|
Merge pull request #1701 from volatilityfoundation/1476-all-calls-to-get_name-on-registry-keys-need-auditing
1476 all calls to get name on registry keys need auditing
|
2025-03-11 22:53:13 +00:00 |
|
|
Dave Lassalle
|
95aee9a664
|
#1476 - introduce RegistryException for simpler exception handling
|
2025-03-11 16:04:06 -05:00 |
|
|
ikelosandGitHub
|
aff84858ca
|
Merge pull request #1706 from volatilityfoundation/1446-pstreepy-has-broken-types-and-pid-handling
#1446 - pid is objects.Pointer, not int
|
2025-03-11 20:49:40 +00:00 |
|
|
Dave Lassalle
|
d9c9e11127
|
#1446 - uses ints instead of objects.Pointer
|
2025-03-11 13:41:01 -05:00 |
|
|
ikelosandGitHub
|
27142bec4c
|
Merge pull request #1702 from volatilityfoundation/1645-change-registry-processing-to-not-walk-the-process-list-in-the-registry-layer
#1645 - duplicate list_processes code
|
2025-03-11 16:30:24 +00:00 |
|
|
Dave Lassalle
|
7f7295cdb7
|
#1476 - remove unfinished prefetch plugin
|
2025-03-11 09:52:24 -05:00 |
|
|
Dave Lassalle
|
d32f3e76d4
|
#1645 - remove quoutes around type
|
2025-03-11 09:47:47 -05:00 |
|
|
|
ac74de694a
|
Update volatility3/framework/layers/registry.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-03-11 09:46:10 -05:00 |
|
|
Dave Lassalle
|
d148d8f9d8
|
#1446 - black fixes
|
2025-03-11 09:31:54 -05:00 |
|
|
Dave Lassalle
|
cbab1d1f49
|
#1446 - pid is objects.Pointer, not int
|
2025-03-11 09:30:38 -05:00 |
|
|
ikelosandGitHub
|
1639ae2396
|
Merge pull request #1704 from volatilityfoundation/remove_module_creation_at_offset_zero
No longer allocate session modules in support of the GUI objects at o…
|
2025-03-10 23:30:36 +00:00 |
|
|
ikelosandGitHub
|
398578aff6
|
Merge pull request #1703 from volatilityfoundation/update_gui_pool_types
Allow desktops and window stations to come from the paged or non-page…
|
2025-03-10 22:39:56 +00:00 |
|
|
Andrew Case
|
740ce520d6
|
retrigger checks
|
2025-03-10 22:13:09 +00:00 |
|
|
Andrew Case
|
c1b4866ba7
|
retrigger checks
|
2025-03-10 21:36:54 +00:00 |
|
|
Andrew Case
|
f17907200d
|
No longer allocate session modules in support of the GUI objects at offset 0. Instantiate objects at the absolute address explicility.
|
2025-03-10 21:26:58 +00:00 |
|
|
Andrew Case
|
7d5d379144
|
Allow desktops and window stations to come from the paged or non-paged pool
|
2025-03-10 21:24:55 +00:00 |
|
|
Dave Lassalle
|
4b74de4104
|
#1645 - duplicate list_processes code
|
2025-03-10 15:32:13 -05:00 |
|
|
ikelosandGitHub
|
f69bdfad07
|
Merge pull request #1686 from volatilityfoundation/fix_fbdev
Update fbdev plugin to gracefully handle old/broken symbol tables
|
2025-03-10 19:47:13 +00:00 |
|
|
ikelosandGitHub
|
6ac7c1edb1
|
Merge pull request #1656 from volatilityfoundation/fix_linux_networking_paths
Fix broken code and APIs in Linux networking paths
|
2025-03-10 19:44:39 +00:00 |
|
|
ikelosandGitHub
|
831eea5daa
|
Merge pull request #1696 from volatilityfoundation/fix_symbol_table_api
Fix symbol table PDB API that mixes returns, None values, and exceptions
|
2025-03-10 19:37:50 +00:00 |
|
|
ikelosandGitHub
|
1c5fdccf1e
|
Merge pull request #1673 from volatilityfoundation/linux_kernel_api_overhaul
Merge two Linux APIs for mapping kernel modules to pointers. Fix bugs…
|
2025-03-10 19:36:56 +00:00 |
|
|
Dave Lassalle
|
9b23feef2b
|
#1476 - ruff fixes
|
2025-03-10 14:17:24 -05:00 |
|
|
Dave Lassalle
|
f52a857aa0
|
#1476 - code cleanup
|
2025-03-10 14:10:59 -05:00 |
|
|
|
e0168c7bec
|
Potential fix for code scanning alert no. 374: Testing equality to None
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
|
2025-03-10 14:03:45 -05:00 |
|
|
|
6061270816
|
Potential fix for code scanning alert no. 381: Unused import
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
|
2025-03-10 14:03:34 -05:00 |
|
|
Dave Lassalle
|
e1c88f065b
|
#1476 - black fixes
|
2025-03-10 13:57:14 -05:00 |
|
|
Dave Lassalle
|
a41721277d
|
#1476 - merge develop
|
2025-03-10 13:56:08 -05:00 |
|
|
Dave Lassalle
|
8b302ff7fc
|
#1476 - additional exception handling for registry plugins
|
2025-03-10 13:39:00 -05:00 |
|
|
Andrew Case
|
6c96ffacdd
|
Update fbdev plugin to gracefully handle old/broken symbol tables
|
2025-03-10 16:38:30 +00:00 |
|
|
Andrew Case
|
2d4e0f66d8
|
Update fbdev plugin to gracefully handle old/broken symbol tables
|
2025-03-10 16:38:30 +00:00 |
|
|
Andrew Case
|
f7f8cf24cd
|
Address feedback
|
2025-03-10 16:36:53 +00:00 |
|
|
Andrew Case
|
dad88965e9
|
Fix broken code and APIs in Linux networking paths
|
2025-03-10 16:30:16 +00:00 |
|
|
Andrew Case
|
897069c6d0
|
Throw more specific exception
|
2025-03-10 16:27:49 +00:00 |
|
|
Andrew Case
|
2a99a53784
|
Make exception throwing consistent in the PDB gathering API. Avoid returning an empty symbol_table name when the PDB cannot be downloaded.
|
2025-03-10 16:23:00 +00:00 |
|
|
Andrew Case
|
a4bbdfdded
|
Make exception throwing consistent in the PDB gathering API. Avoid returning an empty symbol_table name when the PDB cannot be downloaded.
|
2025-03-10 16:23:00 +00:00 |
|
|
Andrew Case
|
9e4fdbf8ef
|
Address feedback
|
2025-03-10 16:21:56 +00:00 |
|
|
ikelosandGitHub
|
d3799022ef
|
Merge pull request #1698 from DT9/patch-1
README: Modern shell / Python3 Fix for local installation
|
2025-03-10 10:15:06 +00:00 |
|
|
ikelosandGitHub
|
083974d755
|
Merge pull request #1697 from volatilityfoundation/stabilize_poolscanning_symbol_tables
Ensure that new symbol tables are only created when needed. Avoid nam…
|
2025-03-10 09:26:17 +00:00 |
|
|
DandGitHub
|
66df9f2066
|
Modern shell / Python3 Fix
|
2025-03-10 15:57:29 +09:00 |
|
|
Andrew Case
|
b8c0b1eaa8
|
Add missing files
|
2025-03-10 03:39:57 +00:00 |
|