Mike Auty
dcc558717c
Shift around the object_factory and add the symbol rebaser.
...
The object_factory is now a separate function, but to ease the
transition the object_factory method in Context has been left.
I'll most likely deprecate it before the full release, but I'm open the
idea of leaving it if someone can convince me it's a better decision.
2017-03-24 01:50:16 +00:00
Mike Auty
1db4922033
Ensure we mimic python's errors as closely as possible.
2017-03-24 01:01:52 +00:00
Mike Auty
5d3677a0b9
Add an open method to IntermediateSymbolTable to load relative paths.
2017-03-24 00:47:26 +00:00
Mike Auty
b1c561b655
Ensure standard name for JSON files is used throughout the code (ISF).
2017-03-24 00:32:29 +00:00
Mike Auty
00f3b4fb44
Remove the error checking in dlllist, we need to be throwing exceptions and handling them.
2017-02-21 23:25:02 +00:00
ikelos and GitHub
5c9a77128d
Merge pull request #4 from volatilityfoundation/dlllist
...
Add windows dlllist plugin and accompanying extensions
2017-02-21 22:35:40 +00:00
iMHLv2
7096f1853f
refer to self's symbol table when constructing objects inside an extension
2017-02-21 18:07:51 +00:00
iMHLv2
efd2468639
import modules rather than classes
2017-02-21 18:06:52 +00:00
iMHLv2
3cc70c1f1c
add windows dlllist plugin and accompanying extensions
2017-02-16 14:44:55 +00:00
Mike Auty
08eb2bce96
Add in schema 2.1.0 and supporting code changes.
2017-02-13 22:39:20 +00:00
Mike Auty
c0dfe48c05
Remove configurability of architecture, the translation layer should define the architecture internally.
2017-02-13 22:36:40 +00:00
Mike Auty
0d1dd2d2cd
Fix silly typo.
2017-02-13 21:30:23 +00:00
Mike Auty
d6728fc2b4
Add in attributes and appropriate validation of TranslationLayers based on those attributes.
2017-02-10 13:57:44 +00:00
Mike Auty
6603e503c5
Rework enumeration access in symbol tables.
2017-02-04 14:46:46 +00:00
Mike Auty
cd2eaeab06
Rename the imported context interface to match other examples in the code.
2017-01-23 01:12:44 +00:00
Mike Auty
371aca2808
Fix up development code with previous changes to the ContextInterface.
2017-01-23 01:05:05 +00:00
Mike Auty
c3ab678c5b
Make the vol.py CLI stub executable.
2017-01-22 23:53:58 +00:00
Mike Auty
96c414fb5f
Refactor TextRenderer to QuickTextRenderer to ensure we don't forget that the output is speedy not nicely formatted.
2017-01-22 14:17:19 +00:00
Mike Auty
a2eb60ed39
Add support for HexBytes to the text renderer.
2017-01-22 14:16:13 +00:00
Mike Auty
9f4ea6da1f
Split the useful code out into a subfunction for reuse.
2017-01-19 16:20:11 +00:00
Mike Auty
49009ec458
Parameterize the plugin calling, with run as the default.
2017-01-19 16:19:10 +00:00
Mike Auty
5d3ff13a6e
Ensure LayerStacker's default doesn't get accepted blindly.
2017-01-08 18:08:13 +00:00
Mike Auty
3a648d75b0
Don't double wrap unsatisifed requirements, each should return its full config path of the requirement checked.
2017-01-08 17:59:04 +00:00
Mike Auty
149e57afee
Change the requirement validation system to return all unsatisfied requirements, to provide more feedback.
2017-01-08 17:26:09 +00:00
Mike Auty
cafc09a6d3
Add dynmically generated command line parameters for the CLI.
...
Note this now requires the file to be specified with single-location,
it also requires a specific ordering of parameters.
2017-01-08 02:31:31 +00:00
Mike Auty
282af4db99
Make automagic config_path a requirement rather than optional.
2017-01-08 02:23:14 +00:00
Mike Auty
b7b0d9720d
Make choices a public property.
2017-01-08 02:07:44 +00:00
Mike Auty
7b252d8b73
Refactor InstanceRequriement into the interfaces file.
...
This also fixes a minor bug where a property was used in the
initializer, which can't be read before initialization.
2017-01-08 02:04:55 +00:00
Mike Auty
2ccc62f921
Introduce format hints for renderers.
2017-01-05 00:39:03 +00:00
Mike Auty
3a2cc24e2a
Add in plugin function capability (and make plugin validation centralized on plugin construction).
2017-01-04 22:58:54 +00:00
Mike Auty
b4c36bcd15
Make the config_prefix parameter optional.
2017-01-04 22:29:47 +00:00
Mike Auty
547a3d94bb
Fix up the documentation and leave a note about cast accepting short type names.
2017-01-04 22:10:27 +00:00
Mike Auty
f7fa45bc5c
Merge branch 'master' of github.com:volatilityfoundation/volatility3
2017-01-03 23:06:58 +00:00
Mike Auty
e596c6a1b7
Further documentation updates.
2017-01-03 23:06:39 +00:00
Mike Auty
31da74c797
Remove cruft (including pydev files and a data file from the testrig script).
2017-01-02 22:38:12 +00:00
Mike Auty
3da5512fbd
Ensure we instantiate on the physical layer, not the existing kernel layer.
2017-01-02 22:21:39 +00:00
Mike Auty
1437e24b53
Add a note about _maxphyaddr.
2017-01-02 22:17:35 +00:00
Mike Auty
24aecb49b7
Ensure we set the correct page_map_offset by masking it to the size of the physical register maximum.
2017-01-02 22:12:52 +00:00
Mike Auty
1af85d628f
Remove the pointless class/instance variable.
2017-01-01 02:14:53 +00:00
Mike Auty
a7ea6e2210
Improve the object/template documentation.
2017-01-01 01:43:08 +00:00
Mike Auty
f0bc4ea59b
Improve the symbol interface documentation, but it needs more work.
2016-12-30 02:46:40 +00:00
Mike Auty
ba05632efd
Improve plugin and renderer interface documentation.
2016-12-30 02:44:01 +00:00
Mike Auty
8f6f5f6403
Update object interface documentation.
2016-12-30 02:36:06 +00:00
Mike Auty
d75c1fc808
Update layer interface documentation.
2016-12-30 02:29:22 +00:00
Mike Auty
8b5ed7ea88
Improve the context documentation.
2016-12-30 02:19:44 +00:00
Mike Auty
0f811fbe34
Refactor the code to make it easier to find classes, and update documentation.
2016-12-30 02:13:23 +00:00
Mike Auty
b938f61228
Update the favicon with white backgrounding to improve visibility.
2016-12-30 02:12:36 +00:00
Mike Auty
f0ce27f0a7
Improve the documentation for automagic.
2016-12-30 01:10:05 +00:00
Mike Auty
87b259ab54
Make the documentation a little more like the official python docs, with a favicon and a small icon on the navigation bar.
2016-12-30 01:09:27 +00:00
Mike Auty
7f887414cb
Clean up an unnecessary 'as' import.
2016-12-29 15:23:35 +00:00
Mike Auty