 Mike Auty
|
2d23c93def
|
Completely refactor constants and structures to symbols and types.
|
2016-05-22 11:51:06 +01:00 |
|
|
Mike Auty
|
7a62e74996
|
Refactor the translation method out of the TranslationLayer, since it's not always applicable/useful. Contemplate a rename of the TranslationLayer now it doesn't actually translate. 5;)
|
2016-04-10 11:54:32 +01:00 |
|
|
Mike Auty
|
a1f127940d
|
Fix up the test_rig to work with a previous API change.
|
2016-02-13 17:17:45 +00:00 |
|
|
Mike Auty
|
34b8671ce3
|
Refactor basic to extensions for windows additions.
|
2016-02-13 17:17:10 +00:00 |
|
|
Mike Auty
|
a8d6fd5647
|
Refactor windows code to windows basic to avoid import loops.
|
2016-01-16 20:09:18 +00:00 |
|
|
Mike Auty
|
16ffc3e237
|
Refactor the location of xp_sp2_x86_vtypes.
|
2016-01-16 13:21:06 +00:00 |
|
|
Mike Auty
|
ee42751055
|
Fix up test_rig.
|
2015-12-30 23:21:41 +00:00 |
|
|
Mike Auty
|
d258c56991
|
Rerun pylint with pycharm-5 and fix pep8 issues as well.
|
2015-11-21 13:12:00 +00:00 |
|
|
Mike Auty
|
860fc416c0
|
Fix up process test_rig for use with xp-laptop-2005-06-25.img
|
2015-10-11 19:21:46 +01:00 |
|
|
Mike Auty
|
0384a6cc67
|
Update test_rig to work without the use of a command line.
|
2015-10-11 18:45:43 +01:00 |
|
|
Mike Auty
|
9e801c428b
|
Rename ContextModifier.__call__ to ContextModifier.modify_context.
|
2015-10-11 18:19:45 +01:00 |
|
|
Mike Auty
|
e817b48083
|
Save the translationlayer requirement, so we can populate it based on the modifier requirements.
|
2015-09-28 01:34:42 +01:00 |
|
|
Mike Auty
|
897d8bd574
|
Initial imlementation of a mapping from volatility config trees to Argparse arguments.
|
2015-09-28 00:57:06 +01:00 |
|
|
Mike Auty
|
4157c1c493
|
Refine the config system, realize that ContextFactories are in fact LayerFactories?
|
2015-04-10 17:38:56 -05:00 |
|
|
Mike Auty
|
35506bb7d3
|
Allow SymbolSpaces to be uninitialized, and move context from framework to framework.contexts.
|
2015-04-09 16:22:25 -05:00 |
|
|
Mike Auty
|
3a28d7ae41
|
Refactor the context work, to use composable objects rather than inheritable classes.
|
2015-01-19 23:57:49 +00:00 |
|
|
Mike Auty
|
f04122f640
|
Add in initial implementation of ContextFactories as classes. This is probably not the right way to do things, so I'll be trying out making them as objects with a function chain for applying modifications in a little while.
|
2015-01-16 11:29:12 +00:00 |
|
|
Mike Auty
|
548d90f325
|
Add in some basic offset checks to the translation section of the test_rig.
|
2015-01-05 18:41:38 +00:00 |
|
|
Mike Auty
|
87967853f7
|
Convert volinfo namespace to vol namespace.
|
2015-01-05 15:04:40 +00:00 |
|
|
Mike Auty
|
b8474b659e
|
Convert the test_rig over to print process IDs (excluding the current one, and including the sentinal but that's because we're not going from the KDBG structure.
|
2015-01-05 00:00:56 +00:00 |
|
|
Mike Auty
|
2d98b94605
|
Fix up PsList since classes should start with capital letters.
|
2015-01-04 21:19:02 +00:00 |
|
|
Mike Auty
|
73bd451759
|
Minor pylinting across the whole project.
|
2015-01-04 21:14:17 +00:00 |
|
|
Mike Auty
|
01182031a5
|
Update the test_rig to reflect the recent changes.
|
2015-01-04 04:33:36 +00:00 |
|
|
Mike Auty
|
bdb0c1488a
|
Update test_rig code to play around with code fragments.
|
2014-12-31 03:20:32 +00:00 |
|
|
Mike Auty
|
43211a621c
|
Add in plugni testing code.
|
2014-12-30 03:52:20 +00:00 |
|
|
Mike Auty
|
7ca450fd19
|
Turn on logging.
|
2014-12-30 03:47:54 +00:00 |
|
|
Mike Auty
|
38b0791233
|
General code refactor.
|
2014-12-30 03:43:36 +00:00 |
|
|
Mike Auty
|
d6b131980b
|
Add in skeleton plugin to check the API.
|
2014-07-07 23:33:08 +01:00 |
|
|
Mike Auty
|
c29028dd30
|
Initial attempt at plugin importing.
|
2014-07-05 22:33:40 +01:00 |
|
|
Mike Auty
|
39c0b38f09
|
Add additional docstrings and refactor/rearrange the entire codebase.
|
2014-06-11 01:35:50 +01:00 |
|
|
Mike Auty
|
8e7ad364c7
|
Alter type/class checking structure so that it can be optimized out (either throws an exception or does nothing).
|
2014-04-08 00:59:08 +01:00 |
|
|
Mike Auty
|
5b23325447
|
Change symbol_names to structure_names.
|
2014-03-22 13:46:22 +00:00 |
|
|
Mike Auty
|
26f8d0f7cc
|
Add in write support, and change symbols to be both structures and constants.
|
2013-12-28 05:30:54 +00:00 |
|
|
Mike Auty
|
cea4969b49
|
Add in first attempt at intel mapping code.
|
2013-05-20 00:10:02 +01:00 |
|
|
Mike Auty
|
dff1c167b2
|
Fix up Intel support with test cases for 32, PAE and 32e modes.
|
2013-05-19 13:24:19 +01:00 |
|
|
Mike Auty
|
3790ca03e1
|
Add in some TODOs, and swap to the File layer for testing.
|
2013-05-07 23:44:40 +01:00 |
|
|
Mike Auty
|
9c2e486356
|
Refactor code locations, tidy up object initializers and add in File Layer.
|
2013-05-06 17:45:15 +01:00 |
|
|
Mike Auty
|
86c57972b7
|
Fix up pointer issues (including typo).
|
2013-05-05 23:11:26 +01:00 |
|
|
Mike Auty
|
e351958413
|
Move context, tidy up object model and add memory to test_rig.
|
2013-05-05 22:06:38 +01:00 |
|
|
Mike Auty
|
e654391e86
|
Fix up the top-level symbol resolution mechanism.
|
2013-04-21 23:03:36 +01:00 |
|
|
Mike Auty
|
9b91bfa88c
|
Rework templates so that they're created referentially, and that attributes are generated by the underlying class and arguments.
|
2013-04-21 18:22:38 +01:00 |
|
|
Mike Auty
|
b0345ce9ab
|
Flesh out symbol system, reworking several parts. Still requires on-demand resolving of symbols.
|
2013-04-14 20:17:15 +01:00 |
|
|
Mike Auty
|
3dab0a3418
|
Add in initial attempt at parsing vtypes into ObjectTemplates.
|
2013-03-23 20:45:06 +00:00 |
|
|
Mike Auty
|
6105a2e4bc
|
Enhance symbol listing and templates, add in gitignore and test rig.
|
2013-03-11 01:36:56 +00:00 |
|