 ikelosandGitHub
|
dfd6282f17
|
Update volatility3/framework/plugins/linux/malware/hidden_modules.py
|
2025-11-19 16:35:15 +00:00 |
|
|
ikelosandGitHub
|
393abb2a2f
|
Update volatility3/framework/plugins/linux/malware/hidden_modules.py
|
2025-11-19 16:35:08 +00:00 |
|
|
ikelosandGitHub
|
9454fe1f27
|
Update volatility3/framework/symbols/linux/utilities/modules.py
|
2025-11-19 16:35:01 +00:00 |
|
|
ikelosandGitHub
|
5c9c763f64
|
Update volatility3/framework/plugins/linux/lsmod.py
|
2025-11-19 16:34:53 +00:00 |
|
|
Mike Auty
|
81f135f315
|
Linux: Rework module calls to parameterize rather than pull in methods
|
2025-11-19 16:26:54 +00:00 |
|
|
ikelosandGitHub
|
3e2d831be3
|
Merge pull request #1890 from volatilityfoundation/issues/registry-plugin-expiry-date
Update Registry plugin expiry date
|
2025-11-09 17:56:53 +00:00 |
|
|
Mike Auty
|
f13ad125d7
|
Update the expiry dates of various functions to at least a year's notice
|
2025-10-16 20:33:28 +01:00 |
|
|
Mike Auty
|
46c508fff2
|
Bump removal of plugins by a year to ensure suitable time for transition
|
2025-10-16 20:29:02 +01:00 |
|
|
ikelosandGitHub
|
e8a23cc39b
|
Merge pull request #1884 from volatilityfoundation/issues/ruff-formatter
Apply changes that ruff formatter would make which black doesn't mind
|
2025-10-16 20:15:17 +01:00 |
|
|
ikelosandGitHub
|
4541a6e987
|
Merge pull request #1877 from volatilityfoundation/issues/issue1874
Convert ObjectInfo form NamedTuple to Dataclass to attempt to work better with pypy3
|
2025-10-16 20:15:00 +01:00 |
|
|
Mike Auty
|
7536e9dd14
|
Start to support uv installation of volatility
|
2025-09-30 19:08:10 +01:00 |
|
|
Mike Auty
|
841b2b6435
|
Ruff fixes that black agrees with
|
2025-09-29 23:04:01 +01:00 |
|
|
ikelosandGitHub
|
1718dc77e3
|
Merge pull request #1853 from tvanegro/dump_dirty_pages
Add dumping dirty pages to Linux Malfind
|
2025-09-28 23:05:56 +01:00 |
|
|
ikelosandGitHub
|
0dd8d3a8e9
|
Merge pull request #1827 from SolitudePy/lsof_deleted
Lsof improvements (show deleted as in lsof output) + files_only argument
|
2025-09-28 22:19:10 +01:00 |
|
|
ikelosandGitHub
|
f72b8ee21d
|
Update volatility3/framework/plugins/linux/malware/malfind.py
|
2025-09-28 22:11:48 +01:00 |
|
|
ikelosandGitHub
|
d41afc444e
|
Update volatility3/framework/plugins/linux/malware/malfind.py
|
2025-09-28 22:11:40 +01:00 |
|
|
ikelosandGitHub
|
16412537c0
|
Update volatility3/framework/plugins/linux/malware/malfind.py
|
2025-09-28 22:11:33 +01:00 |
|
|
ikelosandGitHub
|
438acddab6
|
Update volatility3/framework/plugins/linux/malware/malfind.py
|
2025-09-28 22:11:26 +01:00 |
|
|
ikelosandGitHub
|
2dbc06f995
|
Merge pull request #1825 from SolitudePy/pebmasq
pebmasquerade plugin
|
2025-09-23 20:18:38 +01:00 |
|
|
SolitudePy
|
0e17057b0b
|
Plugins - pebmasq required framework version
|
2025-09-23 21:16:47 +03:00 |
|
|
SolitudePy
|
a6d1b34d36
|
Plugins: pebmasq fix classmethod
|
2025-09-17 13:46:34 +03:00 |
|
|
SolitudePy
|
2dd0bec927
|
Plugins: pebmasq - change staticmethod to classmethod
|
2025-09-17 02:03:48 +03:00 |
|
|
SolitudePy
|
035b608633
|
Plugins: pebmasquerade remove unused code
|
2025-09-17 02:02:14 +03:00 |
|
|
SolitudePy
|
32def71eb5
|
remove notes
|
2025-09-17 02:02:14 +03:00 |
|
|
SolitudePy
|
4adc3305a3
|
remove error truncate
|
2025-09-17 02:02:14 +03:00 |
|
|
SolitudePy
|
bcc6ce68c5
|
PEBMASQ: parameterize _generator v2
|
2025-09-17 02:02:14 +03:00 |
|
|
SolitudePy
|
f79a6d6643
|
PEBMASQ: parameterize _generator
|
2025-09-17 02:02:14 +03:00 |
|
|
SolitudePy
|
36ce047ec0
|
PEBMASQ: return None instead of empty string
|
2025-09-17 02:02:14 +03:00 |
|
|
SolitudePy
|
156ca005de
|
changed staticmethods to classmethods
|
2025-09-17 02:02:14 +03:00 |
|
|
SolitudePy
|
22ea3d5542
|
moved to malware category
|
2025-09-17 02:02:14 +03:00 |
|
|
SolitudePy
|
231033428d
|
replace to utility function
|
2025-09-17 02:02:14 +03:00 |
|
|
SolitudePy
|
72f0bd1bba
|
UNICODE_STRING length checks to further detect spoofing
|
2025-09-17 02:02:14 +03:00 |
|
|
SolitudePy
|
207941759d
|
pebmasquerade plugin
|
2025-09-17 02:02:14 +03:00 |
|
|
Mike Auty
|
2a2f27a399
|
Fix ruff issue
|
2025-09-15 20:00:09 +01:00 |
|
|
Mike Auty
|
1a1f3be633
|
Swap ObjectInformation from namedtuple to dataclass
|
2025-09-15 20:00:09 +01:00 |
|
|
ikelosandGitHub
|
78e05f9c8f
|
Merge pull request #1861 from kyrre/feature/parquet-arrow-renderer
Feature/parquet arrow renderer
|
2025-09-15 10:00:03 +01:00 |
|
|
ikelosandGitHub
|
81f2e7376a
|
Update test/renderers/test_parquet_renderers.py
|
2025-09-15 08:58:04 +01:00 |
|
|
ikelosandGitHub
|
50b3c22b7d
|
Merge pull request #1871 from blitztide/develop
Feature: vadyarascan enrichment
|
2025-09-15 08:54:38 +01:00 |
|
|
|
8090d72149
|
Update volatility3/framework/plugins/renderers/parquet_renderer.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-09-15 09:32:10 +02:00 |
|
|
|
4af48ae3b0
|
Update volatility3/framework/plugins/renderers/parquet_renderer.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-09-15 09:31:34 +02:00 |
|
|
|
4c7a9b517f
|
Update volatility3/framework/plugins/renderers/parquet_renderer.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-09-15 09:31:28 +02:00 |
|
|
|
86fe4485f0
|
Update volatility3/framework/plugins/renderers/parquet_renderer.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-09-15 09:31:20 +02:00 |
|
|
ikelosandGitHub
|
2b092bf32f
|
Merge pull request #1873 from j-t-1/README
Add newlines to README.md
|
2025-09-14 22:33:49 +01:00 |
|
|
j-t-1andGitHub
|
bec2fb4c7f
|
Add newlines to README.md
Purely for readability.
|
2025-09-06 10:09:28 +01:00 |
|
|
ikelosandGitHub
|
9ad82876e0
|
Merge pull request #1781 from volatilityfoundation/1780-dlllist-loadcount-missing
1780 dlllist loadcount missing
|
2025-09-06 00:52:12 +01:00 |
|
|
Dave Lassalle
|
88c8bfe1ad
|
#1780 - bump versions
|
2025-09-05 13:19:51 -05:00 |
|
|
Kyrre-Wahl-Kongsgard
|
d21a81d8c3
|
fix: update type hints to support Python 3.8
|
2025-09-05 06:55:00 +02:00 |
|
|
blitztide
|
d6a791cb67
|
VadYaraScan: Increment version
|
2025-09-04 22:39:46 +01:00 |
|
|
Dave Lassalle
|
4012887e75
|
#1780 - cast LoadCount
|
2025-09-04 14:50:30 -05:00 |
|
|
blitztide
|
47219aad67
|
Feature: vadyarascan enrichment
This add contextual data to each hit with vadyarascan, saves running pslist after processing.
Original didn't have imagename or PPID
|
2025-08-29 03:06:23 +01:00 |
|