Commit Graph
2738 Commits
Author SHA1 Message Date
x d86b9b34e4 Fix return types, change confusing use of continue, switch to get_absolute_symbol_address 2021-08-12 15:47:16 +00:00
Andrew Case f1d7d8610a Updates and bug fixes 2021-04-07 19:51:30 -05:00
Andrew Case 6f7d40f0cc Commit all requested changes except those related to array handling/creating 2021-04-07 12:06:31 -05:00
atcuno 68a6fd252f Fix typos and add more debug statements 2021-03-19 13:09:14 -05:00
atcuno 21b59e9458 Catch exceptions triggered during testing 2021-03-19 12:49:54 -05:00
Andrew Case d3b407515a Initial commit for mass testing 2021-03-19 11:29:19 -05:00
ikelosandGitHub 8e420dec41 Merge pull request #481 from volatilityfoundation/feature/version-pdbutility
Windows: Generalize symbol_table_from_pdb
2021-03-18 14:42:09 +00:00
Mike Auty 9c30ed19ef Windows: Deprecate netstat create_tcpip_symbol_table 2021-03-17 20:07:29 +00:00
Mike Auty 8d8b2ea2dd Windows: Fix up hardcoded filename in pdbutil 2021-03-17 15:31:58 +00:00
Mike Auty 180087e746 Windows: Update vadyarascan with compiled file option 2021-03-15 22:58:48 +00:00
Mike Auty 88bddbd596 Windows: Clarify separate yara compiled method 2021-03-15 22:56:40 +00:00
ikelosandGitHub c75bef2b05 Merge pull request #477 from dadokkio/develop
enable support for compiled rules in Yara
2021-03-15 22:54:55 +00:00
Mike Auty 0a7a749667 Documentation: Add text about banners and isfinfo 2021-03-15 11:15:44 +00:00
Mike Auty 95a9effbe3 Windows: Generalize symbol_table_from_pdb 2021-03-14 23:28:00 +00:00
Mike Auty 970d15a82e Documentation: Document volshell 2021-03-14 21:47:53 +00:00
Mike Auty 5d77a7ca6b PDB: Don't bump the version unnecessarily
The version field of the producer should be enough to determine the
difference
2021-03-13 18:50:29 +00:00
Mike Auty 638d73b822 PDB: Improve pdb parsing 2021-03-13 15:34:02 +00:00
Mike Auty cdf67cad2b Windows: Cache PDB files again
Unfortunately, opening the file as a layer will cause it to cache anyway
2021-03-13 01:50:11 +00:00
dadokkio cd3ad1e067 fix config 2021-03-12 13:09:38 +01:00
Arcuri DavideandGitHub 5c8bd3c9d9 enable support for compiled rules 2021-03-12 11:30:04 +01:00
Mike Auty 5eaa5ef7b2 CLI: Remove unnecessary urllib imports 2021-03-11 15:50:45 +00:00
Mike Auty a9e91ea19b Objects: Writing an object should return the re-read object 2021-03-07 16:08:36 +00:00
Mike Auty 5e01ab811b CLI: Improve URI handling error for windows 2021-03-07 13:08:48 +00:00
Mike Auty 6a6e2a0e5c CLI: Fix and refactor the URI handling code 2021-03-07 13:03:45 +00:00
Mike Auty 01025c88bb CLI: Fixes windows file path handling
Closes: #470
2021-03-07 12:44:15 +00:00
ikelosandGitHub 099042ec3d Merge pull request #471 from chop0/patch-1
Update copyright notice
2021-03-07 10:50:41 +00:00
Alec PetridisandGitHub 69d303da8c Update copyright notice 2021-03-06 22:44:19 -08:00
Mike Auty 1b57a899e8 Objects: Encode strings as bytes when writing 2021-03-05 01:16:14 +00:00
Mike Auty 62c1d1df35 Layers: Avoid writing to unwritable physical layers 2021-03-05 01:14:44 +00:00
Mike Auty 963b448d36 Objects: Revert setting attributes to write data 2021-03-05 01:13:34 +00:00
Mike Auty f251a1db15 Windows: Update PDB code to work without cache 2021-03-05 01:10:26 +00:00
Mike Auty bc47073903 CLI: Fix logging issue after root logger change 2021-03-05 00:17:09 +00:00
ikelosandGitHub 3fe8e2d4d9 Merge pull request #469 from volatilityfoundation/feature/improved-object-writing
Objects: Improve writing of objects
2021-03-04 23:45:14 +00:00
ikelosandGitHub 9ef972192d Merge pull request #468 from volatilityfoundation/feature/improved-typing
Core: Improve typing across codebase
2021-03-04 23:36:42 +00:00
Mike Auty a75ccd72b1 Layers: Restore a loss from a rebase/merge 2021-03-04 23:34:04 +00:00
Mike Auty f51b534792 Merge branch 'feature/better-nonexistant-file-handling' into develop 2021-03-04 23:26:07 +00:00
Mike Auty 2fe7e22bf8 CLI: Tidy up single_location handling 2021-03-04 23:25:53 +00:00
ikelosandGitHub 7613cd7a00 Merge pull request #467 from volatilityfoundation/feature/partial-cache-to-tmpfile-move
Layers: Allow manual cache control and disable for PDB
2021-03-04 23:15:56 +00:00
Mike Auty 0c8c52ba32 Layers: Allow manual cache control and disable for PDB 2021-03-04 23:13:44 +00:00
Mike Auty 0b4f49736c Volshell: Fix missing import 2021-03-04 18:48:58 +00:00
ikelosandGitHub 51c3818d71 Merge pull request #461 from volatilityfoundation/feature/regex-trie
Layers: Improve regex scanning for linux/mac
2021-03-02 15:54:37 +00:00
Mike Auty 2a41b1eee9 Linux: Make bang_addrs has something to search for 2021-03-02 15:50:21 +00:00
Mike Auty 1d35406ffe CLI: Improve file parameter handling 2021-03-02 15:45:21 +00:00
Mike Auty 9deb0c9d8a CLI: Fix early logging target 2021-03-02 11:15:16 +00:00
Mike Auty 681b68f252 Objects: Improve writing of objects 2021-02-28 02:44:41 +00:00
Mike Auty 77e406e408 Layers: Fix issue if leechcore not available 2021-02-25 18:07:28 +00:00
Mike Auty 70a94bf205 Automagic: Make sure Linux gets in the metadata too 2021-02-25 18:02:16 +00:00
ikelosandGitHub b180cc163a Merge pull request #459 from AsafEitani/match-pid-result-fields
changing PID field names
2021-02-25 01:29:54 +00:00
ikelosandGitHub 561058624c Merge pull request #460 from volatilityfoundation/feature/leechcore-support
Layers: Add in LeechCore physical file support
2021-02-24 17:43:12 +00:00
Mike Auty e27fc115dc Layers: Improve regex scanning for linux/mac 2021-02-24 17:39:43 +00:00