ikelos and GitHub
e06910c763
Merge pull request #1843 from SolitudePy/check_modules_malware
...
Malware categorization: linux.check_modules
2025-06-10 21:00:02 +01:00
ikelos and GitHub
c62d77e4e2
Merge pull request #1842 from SolitudePy/check_idt_malware
...
Malware categorization: linux.check_idt
2025-06-10 20:58:04 +01:00
ikelos and GitHub
f2f83f5ce1
Merge pull request #1838 from SolitudePy/unhooked_syscalls_malware
...
Malware categorization: windows.unhooked_system_calls
2025-06-10 20:54:33 +01:00
SolitudePy
f9941b5b6e
black
2025-06-07 22:00:03 +03:00
SolitudePy
c71fd30c8a
shortcut class name
2025-06-07 21:58:43 +03:00
SolitudePy
21d66839fe
use class name with module name?
2025-06-07 21:56:36 +03:00
SolitudePy
35c4e9f50b
Plugins: change class name to original
2025-06-07 21:52:22 +03:00
ikelos and GitHub
ebd6c8719a
Merge pull request #1840 from SolitudePy/drivermodule_malware
...
Malware categorization: windows.drivermodule
2025-06-07 18:09:57 +01:00
SolitudePy
4b279f9633
linux.malware.check_modules - fix test
2025-06-07 19:30:04 +03:00
SolitudePy
832c997e20
Plugins: categorize linux.check_modules as a malware plugin
2025-06-07 19:29:55 +03:00
SolitudePy
4bc1bb818d
linux.malware.check_idt - fix doc & test deps
2025-06-07 19:23:13 +03:00
SolitudePy
c36fdd69f6
Plugins: categorize linux.check_idt as a malware plugin
2025-06-07 19:22:58 +03:00
SolitudePy
ef07b07659
Plugins: categorize windows.drivermodule as a malware plugin
2025-06-07 18:25:53 +03:00
SolitudePy
f97bc920bb
Plugins: changed class name due to incorrect resolution
2025-06-07 18:09:26 +03:00
SolitudePy
66473ac644
categorize windows.unhooked_system_calls as a malware plugin
2025-06-07 18:00:36 +03:00
ikelos and GitHub
2fbb872c9a
Merge pull request #1834 from SolitudePy/skel_key_malware
...
Malware categorization: windows.skeleton_key_check
2025-06-07 15:12:37 +01:00
ikelos and GitHub
84c33916df
Merge pull request #1835 from SolitudePy/suspicious_threads_malware
...
Malware categorization: windows.suspicious_threads
2025-06-07 15:10:02 +01:00
ikelos and GitHub
9c84152eea
Merge pull request #1832 from SolitudePy/processghosting_malware
...
Malware categorization: windows.processghosting
2025-06-07 15:07:36 +01:00
ikelos and GitHub
2bd9a0e710
Merge pull request #1831 from SolitudePy/hollowprocesses_malware
...
Malware categorization: windows.hollowprocesses
2025-06-07 15:05:59 +01:00
ikelos and GitHub
3f9794b3dc
Merge pull request #1830 from SolitudePy/malfind_malware
...
Malware categorization: windows.malfind
2025-06-07 15:04:23 +01:00
SolitudePy
48a97166ea
categorize windows.skeleton_key_check as malware plugin
2025-06-07 16:30:49 +03:00
Mike Auty
520e2cfcdd
Core: Fix up warning message
2025-06-07 14:21:22 +01:00
Mike Auty
c85026ee91
Core: Ensure people running renamed plugins know that the plugins are deprecated
2025-06-07 14:20:37 +01:00
SolitudePy
a95ebfe3fd
categorize windows.suspicious_threads as malware plugin
2025-06-07 16:06:32 +03:00
SolitudePy
21da9002d7
categorize windows.processghosting as a malware plugin
2025-06-07 13:31:26 +03:00
SolitudePy
1498926dec
categorize windows.hollowprocesses as malware
2025-06-07 13:22:29 +03:00
SolitudePy
fd1e5510bb
categorize malfind as malware plugin
2025-06-07 12:27:27 +03:00
Mike Auty
fb76bf6b6c
Linux: Minor linting fixes to fbdev plugin
2025-06-07 10:22:53 +01:00
Mike Auty
0d7f985ef6
Plugins: Add in __init__ files to create submodules for OS plugins
2025-06-07 10:16:22 +01:00
Mike Auty
8924776698
Plugins: Remove deprecated PluginRequirement in favour of VersionRequirement
2025-06-07 09:41:19 +01:00
ikelos and GitHub
1571e65ad8
Merge pull request #1821 from eve-mem/deprecation_warning_for_PluginRequirement
...
Add a deprecation warning for PluginRequirement
2025-05-29 19:48:50 +01:00
ikelos and GitHub
9fd734762b
Merge pull request #1823 from j-t-1/malfind
...
Tweak comments
2025-05-29 19:48:37 +01:00
eve
3ce515bc01
Add return for matches_required in VersionRequirement
2025-05-29 16:53:35 +01:00
ikelos and GitHub
8e9e2d6f08
Merge pull request #1822 from eve-mem/linux_perf_events_VersionRequirement
...
Linux: update PerfEvents plugin to use VersionRequirement for pslist
2025-05-29 09:47:05 +01:00
ikelos and GitHub
1206b69abd
Update volatility3/framework/plugins/windows/malfind.py
2025-05-29 09:45:26 +01:00
eve
a4bc02e41f
Move version checking logic into versionutils module
2025-05-29 07:26:53 +01:00
j-t-1 and GitHub
bb4cee7071
Tweak comments
...
Also remove zeroes starting a slice.
2025-05-29 06:47:03 +01:00
eve
0be4d809c1
Linux: update PerfEvents plugin to use VersionRequirement for pslist
2025-05-28 21:16:04 +01:00
eve
83cfc84f36
Add a deprecation warning for PluginRequirement
2025-05-28 20:05:03 +01:00
Mike Auty
40a3d23e2d
Infra: Update checkout actions
2025-05-26 10:19:28 +01:00
ikelos and GitHub
c9e25a3f86
Merge pull request #1815 from ddogfoodd/fix-typos
...
fix: typos
2025-05-26 10:00:50 +01:00
Jost Alemann
4f11586ef1
fix: typos
2025-05-23 10:52:33 +02:00
ikelos and GitHub
a8f9c9449d
Merge pull request #1813 from geekscrapy/enablenocase
...
Make nocase accessible in yarascan.YaraScan yara_string
2025-05-19 14:14:13 +01:00
ikelos and GitHub
b3c53fde26
Merge pull request #1812 from JakePeralta7/develop
...
Minor fix to Hashdump.get_user_keys()
2025-05-19 12:42:46 +01:00
ikelos and GitHub
b414ee3ba2
Merge pull request #1794 from volatilityfoundation/feature/volshell-breakpoints
...
Volshell breakpointing
2025-05-19 12:41:26 +01:00
geekscrapy and GitHub
2180c07c03
Make nocase accessible
2025-05-19 14:47:29 +04:00
Elad Levi and GitHub
dc34070739
Merge branch 'volatilityfoundation:develop' into develop
2025-05-19 13:25:09 +03:00
Elad Levi and GitHub
cb3e18ec9e
Update hashdump.py
...
calling `<reg_key>.Name` returns array, changed to `<reg_key>.get_name()` which returns a string (the if statement in the code didn't work before this change)
2025-05-19 13:24:58 +03:00
ikelos and GitHub
b3e770dd0c
Merge pull request #1811 from j-t-1/the
...
Remove extra word in comment
2025-05-18 20:20:36 +01:00
Mike Auty
6269091be7
CLI: Support listing/clearing breakpoints in volshell
2025-05-18 20:18:29 +01:00
