ikelos and GitHub
d53d94da2d
Merge pull request #1679 from Abyss-W4tcher/improve_lsadump_rendering
...
windows.lsadump: Improve secret readability
2025-03-08 13:17:51 +00:00
ikelos and GitHub
0f5e5697ef
Merge pull request #1689 from j-t-1/complex
...
Tweak complex plugin documentation
2025-03-08 13:17:07 +00:00
j-t-1 and GitHub
475c1e163c
Tweak complex plugin documentation
2025-03-08 12:58:25 +00:00
Abyss Watcher
603ecbb486
render secret with HexBytes
2025-03-08 12:29:34 +01:00
j-t-1 and GitHub
0dbd8c0ec1
Tweak complex plugin documentation
2025-03-08 08:30:41 +00:00
j-t-1 and GitHub
7f87f8eee0
Tweak complex plugin documentation
2025-03-08 08:27:01 +00:00
ikelos and GitHub
5347bb8168
Merge pull request #1634 from volatilityfoundation/issues/issue1480
...
Symbols: Restore previous protection for non-native missing types
2025-03-08 00:57:16 +00:00
ikelos and GitHub
d13cf7ae22
Merge pull request #1681 from volatilityfoundation/fix_dos_reconstruct_calls
...
Fix error handling and reporting around PE reconstruction calls
2025-03-08 00:55:57 +00:00
Andrew Case
0d3b155766
Change debug to warning to always notify user
2025-03-08 00:50:51 +00:00
Andrew Case
3b7317971d
Fix error handling and reporting around PE reconstruction calls
2025-03-08 00:49:02 +00:00
ikelos and GitHub
5a71511577
Merge pull request #1675 from volatilityfoundation/fix_list_threads_api
...
Update the list_threads API to current standards and update current c…
2025-03-08 00:38:06 +00:00
ikelos and GitHub
7ac9d025d1
Merge pull request #1682 from volatilityfoundation/fix_secrets_dumping_plugins
...
Bring hash dumping plugins up to current coding standards and error c…
2025-03-08 00:31:07 +00:00
Andrew Case
3800ef37c7
Fix versioning again
2025-03-08 00:32:47 +00:00
Andrew Case
f85c3a2d97
Fix versioning again
2025-03-08 00:31:57 +00:00
Andrew Case
9e7ac650de
Fix versioning again
2025-03-08 00:30:53 +00:00
Andrew Case
bcf038bfd5
Fix versioning again
2025-03-08 00:30:06 +00:00
7342f1e27e
Apply suggestions from code review
...
convert from static back to classmethod
Co-authored-by: ikelos <ikelos@users.noreply.github.com >
2025-03-07 18:25:35 -06:00
Andrew Case
9fe4092e9f
Update the list_threads API to current standards and update current callers to new form
2025-03-08 00:34:40 +00:00
ikelos and GitHub
237ff925e2
Merge pull request #1684 from volatilityfoundation/fix_truecrypt_backtraces
...
Prevent truecrypt from throwing a backtrace when the module isn't fou…
2025-03-08 00:23:10 +00:00
Andrew Case
24a53b4f68
Prevent truecrypt from throwing a backtrace when the module isn't found and print a warning
2025-03-08 00:22:07 +00:00
Andrew Case
74df8dc1ee
Fix version changes
2025-03-07 23:36:45 +00:00
Andrew Case
4f94615644
Bring hash dumping plugins up to current coding standards and error checking patterns. Fix bugs and typing
2025-03-07 22:42:58 +00:00
ikelos and GitHub
0b6203cf7a
Merge pull request #1678 from volatilityfoundation/fix_unloaded_modules
...
Fix unloaded modules bugs. Change API to fit current formats
2025-03-07 21:50:18 +00:00
ikelos and GitHub
0e236fda10
Merge pull request #1680 from volatilityfoundation/fix_timers_kpcr
...
Fix timers and kpcrs bugs, missing smear checks, and API. Closes #1642
2025-03-07 21:47:40 +00:00
ikelos and GitHub
21bcdf9f50
Merge pull request #1652 from volatilityfoundation/fix_pstree_infinite_loop
...
Add complete smear protection to linux.pstree
2025-03-07 21:32:32 +00:00
ikelos and GitHub
0a4e1827da
Merge pull request #1661 from Abyss-W4tcher/bulk_out_windows_testing
...
Testing: enhance general design
2025-03-07 21:31:18 +00:00
ikelos and GitHub
551f09c30e
Merge pull request #1677 from volatilityfoundation/add_tmpfs_only_extraction
...
Add --tmpfs-only flag to RecoverFs to replace tmpfs plugin of Volatil…
2025-03-07 21:22:42 +00:00
ikelos and GitHub
8db9d7e925
Merge pull request #1676 from volatilityfoundation/fix_getsids
...
Fix how the task name is reported in getsids error path
2025-03-07 21:21:12 +00:00
Andrew Case
9e01666319
Fix timers and kpcrs bugs, missing smear checks, and API. Closes #1642
2025-03-07 18:24:53 +00:00
Andrew Case
1daf62ab4e
Add debug statement when a process is skipped
2025-03-07 17:18:45 +00:00
Andrew Case
e8db2f03bb
Add complete smear protection to linux.pstree
2025-03-07 17:14:28 +00:00
Abyss Watcher
f0235279a9
Bump: 1.0.0->1.0.1
2025-03-07 16:44:07 +01:00
Abyss Watcher
460f1307ac
improve secret readability
2025-03-07 16:43:44 +01:00
Andrew Case
45fe8f69dd
Fix unloaded modules bugs. Change API to fit current formats
2025-03-07 05:05:23 +00:00
Andrew Case
f6aa6d87e8
Add --tmpfs-only flag to RecoverFs to replace tmpfs plugin of Volatility 2
2025-03-07 04:19:28 +00:00
Andrew Case
bb3b0ada5c
Fix how the task name is reported in getsids error path
2025-03-07 03:42:32 +00:00
ikelos and GitHub
043c64cf53
Merge pull request #1672 from volatilityfoundation/refactor/symbol_server_url_constant
...
Pdbconv: Make symbol server URL constant
2025-03-07 00:58:16 +00:00
David McDonald
134a3bc686
Pdbconv: Make symbol server URL constant
...
This removes the hard-coded symbol server URL from
`PdbRetreiver.retrieve_pdb` and defines it as a constant within the
`constants` module.
2025-03-06 15:20:38 -06:00
ikelos and GitHub
9b0ca1977b
Merge pull request #1671 from volatilityfoundation/fix_tracing_plugins
...
Fix several bugs found in the tracing plugins during mass testing
2025-03-06 18:11:17 +00:00
Andrew Case
14778cdf5c
Address feedback
2025-03-06 18:10:38 +00:00
Andrew Case
557b200f07
Fix several bugs found in the tracing plugins during mass testing
2025-03-06 17:36:24 +00:00
ikelos and GitHub
e935254e8b
Merge pull request #1640 from volatilityfoundation/plugin/windows_gui
...
Add APIs and initial plugins for GUI support and fit Windows major APIs to current design flow
2025-03-06 00:46:02 +00:00
David McDonald
7e00f2c4c4
Windows Versions: Fix broken OSDistinguisher
...
Something happened when picking _EPROCESS members before that caused
this to not function properly. This one relies on a more stable type
removal instead of _EPROCESS members.
2025-03-05 17:59:49 -06:00
David McDonald
dc53afb217
Code Review: Don't use to-be-deprecated static natives
...
This was originally done to solve a problem where `f32` wasn't available
in the native types from every kernel version. However, it ended up not
being necessary - we can just omit `native_types` from the method call,
and it will construct the types as-needed using the definition for
`float` in `base_types` from the JSON files.
2025-03-05 17:59:49 -06:00
David McDonald
e8ec7b1bf7
Code Review: Remove unneeded kernel module reconstruction
2025-03-05 17:59:49 -06:00
David McDonald
77d6bf25b0
Code Review: Remove redundant kernel module reconstruction
2025-03-05 17:59:49 -06:00
David McDonald
76cceb93cb
Code Review: Get rid of 'kvo' in favor of kernel.offset
2025-03-05 17:59:49 -06:00
David McDonald
a192546eb0
Framework: Minor version bump
...
There are a lot of things going into this so we're doing a minor
framework version bump.
2025-03-05 17:59:49 -06:00
David McDonald
456d7b7db5
CodeQL Fix: Unused variable
...
Also underscores an unused unpacked tuple value
2025-03-05 17:59:49 -06:00
David McDonald
7964ca07e4
Code Review: PluginRequirement -> VersionRequirement
...
Code Review: PluginRequirement -> Version Requirement
2025-03-05 17:59:49 -06:00
