Mike Auty
272224a1b0
Refactor all references to Context.memory to Context.layers.
2019-07-07 17:42:51 +01:00
Mike Auty
040da46deb
Fix up the descriptions for non-simple requirements.
2019-01-03 00:39:53 +00:00
Mike Auty
fdc6efc4ad
Add in the LICENSE and the README.
2018-12-19 23:55:03 +00:00
Andrew Case and ikelos
ab877b3907
move plugins into proper directory
2018-12-19 19:43:56 +00:00
Mike Auty
2a3b7348be
Add in minor changes and remove the duplicate plugins for mac.
2018-12-19 01:01:53 +00:00
Andrew Case and ikelos
7b3420f5b7
updated mac_psaux to report requirements correctly and remove stale debug print
2018-12-19 00:54:51 +00:00
Mike Auty
857c970125
Update typing to match master.
2018-12-19 00:54:51 +00:00
Mike Auty
1322ebd44f
More minor cleanup.
2018-12-19 00:54:51 +00:00
Mike Auty
c5ebf91915
Yapf reformat of the patches.
2018-12-19 00:54:51 +00:00
Andrew Case and ikelos
5ab483a0c3
add malfind plugin
2018-12-19 00:54:51 +00:00
Andrew Case and ikelos
002ced1b5d
add mac_pslist
2018-12-19 00:54:51 +00:00
Andrew Case and ikelos
e9ae7c45ce
add mac_psaux plugin
2018-12-19 00:54:51 +00:00
Andrew Case and ikelos
e2e2bf9758
Fix call to find_aslr
2018-12-19 00:54:51 +00:00
Mike Auty
e65a00894a
Minor style tweaks and mass changes across the codebase because of it.
2018-12-17 12:46:14 +00:00
Mike Auty
19572b6e1e
Reformat all python files using yapf with custom volatility style.
2018-12-16 16:50:17 +00:00
Mike Auty
4bf995059b
Improve documentation for __init__ files.
2018-12-16 14:06:47 +00:00
Mike Auty
35ad2325a8
Move all core plugins over to framework/plugins.
...
This should have no impact functionality-wise.
The statistics plugin was left out a) as an example and b) because it
was committed by mistake in the first place and was never meant to be a
real plugin.
2018-12-16 13:40:15 +00:00
Mike Auty
9824538bd9
Numerous pycharm warnings resolved
...
This includes:
* Better ways of checking empty lists
* Not shadowing builtin functions like filter
* Preventing invalid slash warnings by marking strings as regexps
* Removing unnecessary brackets
* Lowercase variable names
* Adding/updating parameters in docstrings
* Removing unused code (lines not chunks)
* Change in not a member tests
* Changing some methods to static
* Shorting range membership checks
* Missing parameters
* Make some exception handlers more specific
* Don't define a lambda to a variable
* A few more instance checks to help type checkers
2018-12-16 13:21:06 +00:00
Mike Auty
29d41470a4
Mass reformat of typing imports
...
Relented on the strict import of direct objects/classes for the typing
module only. Typing module components can be directly imported because
it makes the code really painful to read and write otherwise.
This is still in-line with the python style guide adopted from Google at
http://google.github.io/styleguide/pyguide.html section 2.2.
2018-12-16 13:04:22 +00:00
Mike Auty
8c7cab163b
Minor fixes from the monkeytype run.
2018-12-13 23:49:24 +00:00
Mike Auty
dfe2f86fe2
Lots and lots of typing additions found by an initial monkeytype run.
2018-12-13 23:46:37 +00:00
Mike Auty
04c5007fbb
Fix minor issue with the conversion change.
2018-12-13 21:38:20 +00:00
Mike Auty
c0fcd15d4f
Minor changes to various checks to be more pythonic.
2018-12-13 21:07:25 +00:00
Mike Auty
a534ef216e
Pycharm reformatting.
2018-12-13 21:07:25 +00:00
Andrew Case and ikelos
03d41c3f79
Add mac psaux plugin
2018-12-13 21:07:25 +00:00
Andrew Case and ikelos
622c86f9ed
Add initial mac backend code, with broken DTB finding, along with the pslist plugin
2018-12-13 15:56:24 +00:00
Mike Auty
a16fb3bf7d
Don't break on validity tests.
2018-12-13 01:16:05 +00:00
Mike Auty
76264cee34
Catch invalid _OBJECT_HEADER objects.
2018-12-13 01:16:05 +00:00
Michael Ligh and ikelos
650a188d51
updates for win8/win10 poolscanning
2018-12-13 01:16:05 +00:00
Mike Auty
fa033b8ab7
Back out the symbol_table_name parameter, and provide full symbol names in the constraints.
2018-12-13 01:16:05 +00:00
Mike Auty
eacc45dab6
Ensure POOL_HEADER finds the right object in the right symbol table.
2018-12-13 01:16:05 +00:00
Michael Ligh and ikelos
4c68da8b06
move the functionality for getting an object's type into the _OBJECT_HEADER extension
2018-12-13 01:16:05 +00:00
Michael Ligh and ikelos
4b0e7e5309
remove the Path column from poolscanner. add File scanning
2018-12-13 01:16:05 +00:00
Michael Ligh and ikelos
d653839359
switch Handles.find_cookie() to a classmethod so it can be called from the poolscanner. add typing
2018-12-13 01:16:05 +00:00
Michael Ligh and ikelos
d667a68f97
switch Handles.list_objects() to a classmethod so it can be called from the poolscanner. pass the type_map into get_object()
2018-12-13 01:16:05 +00:00
Michael Ligh and ikelos
a76d71a7dc
move the functionality for getting an object's type into the _OBJECT_HEADER extension
2018-12-13 01:16:05 +00:00
Mike Auty
8acbe8bba3
Refactor conversion code from objects.utility to a conversion module in renderers.
2018-12-12 23:39:10 +00:00
Mike Auty
1a5c9d3af8
Roll symbols.utility into symbols file until we get enough functions we need to split them out again.
2018-12-12 23:38:01 +00:00
Mike Auty
f57bfa5738
Prepare core plugins for moving into the framework namespace.
2018-12-09 13:32:32 +00:00
Mike Auty
323ea0f348
Add in the timeliner interface to the linux bash plugin.
2018-12-08 18:26:45 +00:00
Mike Auty
b5d532555c
Convert the adhoc scanner into a layer scanner using sections.
2018-12-08 18:21:39 +00:00
Mike Auty
649a39a13d
Change time_as_integer from a property to get_time_as_integer method.
2018-12-08 18:00:44 +00:00
Mike Auty
918653e398
Convert aslr_mask_symbol_table to more parameterized form.
2018-12-08 17:55:13 +00:00
Mike Auty
378820bf23
More 'inheritance' fixes.
2018-12-08 17:45:28 +00:00
Mike Auty
780c5d2646
Avoid 'inheritance' issues with requirements.
2018-12-08 17:43:28 +00:00
Mike Auty
f1780bc547
Use constants.BANG (plus pycharm autoreformat).
2018-12-08 17:34:48 +00:00
Andrew Case and ikelos
dc91a16a2f
update check syscall
2018-12-08 17:34:48 +00:00
Andrew Case and ikelos
ade6aa1e74
update check_afinfo for write member
2018-12-08 17:34:48 +00:00
Andrew Case and ikelos
9d9b68eaa3
have check_afinfo not inherit from lsmod
2018-12-08 17:34:48 +00:00
Andrew Case and ikelos
8705fb3047
update time_object to get_time_object
2018-12-08 17:34:48 +00:00
Mike Auty