Commit Graph
4216 Commits
Author SHA1 Message Date
Eve e4aac0c976 Windows: ldrmodules update exception handling to InvalidAddressException 2024-06-10 11:30:15 +01:00
ikelosandGitHub 543a39485b Merge pull request #1149 from volatilityfoundation/getcellroutine
Add a new getcellroutine plugin that reports hooked GetCellRoutine ha…
2024-06-09 23:21:35 +01:00
ikelosandGitHub faadfab481 Merge pull request #1151 from volatilityfoundation/feature/linux-replace-intunsignedlong
Linux: Replace uses of specific types with the more generic pointer
2024-06-09 23:20:04 +01:00
ikelosandGitHub 7c2eca4932 Merge pull request #1150 from volatilityfoundation/feature/vmscan
Generic: Add vmscan plugin
2024-06-09 23:17:57 +01:00
Mike Auty 771ed10b44 Core: Bump to 2.7.1 2024-05-29 20:44:04 +01:00
Mike Auty 35122df27d Infra: Upgrade deprecated githubs actions 2 2024-05-29 20:42:25 +01:00
Mike Auty 57b3a99a1e Infra: Upgrade deprecated githubs actions 2024-05-29 20:40:44 +01:00
Mike Auty 08493e9c3a Automagic: Do some slight gymnastics to get the true value of the pointer 2024-05-21 23:13:31 +01:00
Mike Auty c6d207d170 Generic: Fix code scanning issue with vmscan 2024-05-21 09:06:01 +01:00
Mike Auty c5a45f91fc Linux: Replace uses of specific types with the more generic pointer 2024-05-20 21:09:00 +01:00
Mike Auty 3eab0671b4 Generic: Add vmscan plugin 2024-05-20 20:47:12 +01:00
atcuno 901b0fd6ba Fix year in header 2024-05-19 15:11:06 -05:00
atcuno bc8666b64a Fixes for black 2024-05-19 14:24:53 -05:00
atcuno 4ed7d40ecb Fixes for black 2024-05-19 14:23:21 -05:00
atcuno 47eb42204e Fixes for black 2024-05-19 14:21:03 -05:00
atcuno c2b2321622 Add a new getcellroutine plugin that reports hooked GetCellRoutine handlers of memory mapped Windows registry hives 2024-05-19 14:09:14 -05:00
ikelosandGitHub dc7a3878fa Merge pull request #1147 from eve-mem/windows_handles_debug_logging
Windows: add extra debugging messages to handles plugin
2024-05-16 23:09:24 +01:00
Eve 5d5fa96e36 Windows: add extra debugging messages to handles plugin, ref #1146 2024-05-16 09:19:59 +01:00
ikelosandGitHub 1b3ba6ab2e Merge pull request #1145 from volatilityfoundation/handles_bad_read_check
Correctly check for a failed read
2024-05-09 22:37:15 +01:00
atcuno 2b165a56be Fix pre-existing formatting issue from black checks 2024-05-09 14:53:24 -05:00
atcuno 4c937a922d Correctly check for a failed read 2024-05-09 14:47:56 -05:00
ikelosandGitHub 1c4fd269d0 Merge pull request #1144 from volatilityfoundation/timerliner_missing_macb_times_fix
Add a default 0 value to macb columns to avoid mactime not reporting …
2024-05-09 16:35:40 +01:00
atcuno 3933061551 Add a default 0 value to macb columns to avoid mactime not reporting timeline entries 2024-05-09 09:17:32 -05:00
ikelosandGitHub a66aa02050 Merge pull request #1143 from volatilityfoundation/dumpfiles_dump_only_once_per_file_object
Prevent duplicate processing of the same file object
2024-05-08 21:26:45 +01:00
atcuno 3f3f1a9c0d Prevent duplicate processing of the same file object 2024-05-08 11:23:01 -05:00
ikelosandGitHub 1c5c57e155 Merge pull request #1140 from digitalisx/develop
Fix: typo for `CITATION.cff`
2024-04-30 20:34:45 +01:00
Donghyun KimandGitHub 314725f0c5 Fix: typo for CITATION.cff 2024-05-01 04:30:36 +09:00
Mike Auty 35c5837218 Core: Default to completely clearing the cache when requested 2024-04-30 12:34:46 +01:00
Mike Auty 8f0d1b37cc Core: Improve error handling for proxy authentication issue 2024-04-28 20:53:22 +01:00
Mike Auty 974e6a4107 Core: When clearing the cache, actually clear cached files 2024-04-21 18:28:13 +01:00
Mike Auty c1f239b8d2 Linux: Improve debugging of pslist dump feature 2024-04-07 19:34:17 +01:00
ikelosandGitHub a19dfb57a6 Merge pull request #1122 from volatilityfoundation/feature/inclusive-requirements-txt
Core: Develop nested requirement files
2024-04-04 19:18:22 +01:00
Mike Auty 47891c3477 Core: Develop nested requirement files 2024-04-03 21:17:42 +01:00
ikelosandGitHub 55dd39f2ba Merge pull request #1113 from Abyss-W4tcher/reorder_logging_extra_levels
CLI: Reorder logging extra levels
2024-03-17 01:25:33 +00:00
Abyss Watcher de4a335998 call extra verbose level ordering 2024-03-16 22:19:45 +01:00
Abyss Watcher 7ff5f57e5d use logging explicit constants 2024-03-16 22:19:28 +01:00
Abyss Watcher 745491c846 put extra log level ordering in a function 2024-03-16 22:19:02 +01:00
Abyss Watcher 33d653e7a6 use logging explicit constants 2024-03-16 18:44:19 +01:00
Abyss Watcher 436d355ef3 incrementally order extra log levels 2024-03-16 18:44:09 +01:00
Mike Auty f6495d3d98 Documentation: Improve logging level docstrings 2024-03-16 08:42:53 +00:00
ikelosandGitHub 6f3091c644 Merge pull request #1015 from Abyss-W4tcher/fix_mac_pslist
Fix mac pslist
2024-03-13 19:26:41 +00:00
Mike Auty 8dbc64f4a8 Layers: Fix up typo in recent crashdump patch - take 2 2024-03-12 00:14:30 +00:00
Mike Auty 084ea38f84 Layers: Fix up typo in recent crashdump patch 2024-03-12 00:13:02 +00:00
Mike Auty 9edf33b721 Layers: Improve logging on crashdump layer 2024-03-11 21:20:29 +00:00
ikelosandGitHub 148e46db75 Merge pull request #1108 from Abyss-W4tcher/mac_dmesg
macOS dmesg plugin support
2024-03-04 20:42:52 +00:00
ikelosandGitHub 5b2d95a91f Merge pull request #1107 from Abyss-W4tcher/mac_process_memory_dump
Mac process memory dump
2024-03-04 20:41:35 +00:00
ikelosandGitHub 9189fb6589 Merge pull request #1109 from Abyss-W4tcher/cli_list_of_ints_as_hex
CLI : pass integers as 0x hexadecimal format in ListRequirement
2024-03-04 20:38:36 +00:00
Abyss Watcher 1f9a983f49 correct use of SymbolError 2024-03-04 20:38:01 +01:00
Abyss Watcher f4b12c6406 allow ints in the 0x format in ListRequirement 2024-03-04 20:26:18 +01:00
Abyss Watcher 9914f339df simplify addrs_in_vma check 2024-03-04 20:19:15 +01:00