Mike Auty
e4e54a5c58
Don't fix the type error as part of the shift.
2025-01-26 13:48:00 +00:00
Mike Auty
1ac2dbc49c
Shift exposed staticmethods to classmethods
2025-01-26 13:44:33 +00:00
ikelos and GitHub
69fc7fe723
Merge pull request #1566 from Danking555/develop
...
Add low stub offset kernel detection
2025-01-25 15:32:43 +00:00
ikelos and GitHub
f644063e90
Merge pull request #1421 from volatilityfoundation/issues/issue1418
...
Issues/issue1418
2025-01-25 15:14:06 +00:00
Daniel Davidov
2e1b77f4b3
Move LowStubLayout constants to windows.constants
...
* Moved constants out of the class and moved to constants.windows
* Applied ruff and black
2025-01-25 16:22:49 +02:00
ikelos and GitHub
734c18c269
Merge pull request #1570 from volatilityfoundation/issues/explicit-version-check
...
Core: Move the python check somewhere it can't accidentally be removed
2025-01-25 12:59:19 +00:00
ikelos and GitHub
a38a0282ae
Merge branch 'develop' into issues/issue1418
2025-01-25 12:51:15 +00:00
ikelos and GitHub
c0adb721b7
Merge pull request #1559 from volatilityfoundation/issues/issue1419
...
Layers: Update LeechCore RawIO with better error handling for readlines
2025-01-25 12:44:08 +00:00
ikelos and GitHub
cae7930613
Merge pull request #1490 from volatilityfoundation/issue_1482_infinite_loop_oom
...
Prevent infinite looping and out of memory errors #1482
2025-01-25 12:21:40 +00:00
ikelos and GitHub
45e7f34636
Merge pull request #1568 from volatilityfoundation/1473-get_key_tryexcept
...
#1473 - add exception handling on calls to registry get_key
2025-01-25 11:53:38 +00:00
ikelos and GitHub
4d50d1072f
Merge pull request #1558 from volatilityfoundation/issues/issue1546
...
Issues/issue1546
2025-01-25 11:27:09 +00:00
Andrew Case
506a61d884
Address feedback
2025-01-24 22:09:24 +00:00
Andrew Case
e9088be0d8
Prevent infinite looping and out of memory errors #1482
2025-01-24 22:02:27 +00:00
Daniel Davidov
17d52c27bf
Update method_low_stub_offset & run ruff & black
...
* Eliminate unnecessary scanning for 32 bit processors where the structure PROCESSOR_START_BLOCK doesn't exist
* Put offsets as values of constants in a class - LowStubLayout.
* Add documentation in the class and in the function method_low_stub_offset
* Run "ruff check --fix" and "black ."
* Checked the method works on 3 physical machines
2025-01-24 21:09:28 +02:00
Mike Auty
128e1be154
Core: Fix f-string quotes
2025-01-23 20:57:44 +00:00
Mike Auty
61f60ac464
Core: Move the python check somewhere it can't accidentally be removed
2025-01-23 20:52:08 +00:00
Mike Auty
a68be50798
Revert "Typing fix"
...
This reverts commit c82d432b10
2025-01-23 20:30:21 +00:00
Dave Lassalle
81ba89eef6
#1473 - update exception message
2025-01-23 12:20:14 -06:00
Dave Lassalle
6c4cafa64f
#1473 - black fixes
2025-01-23 11:59:37 -06:00
Dave Lassalle
b8d9c7b883
#1473 - add missing exception handling for get_key
2025-01-23 11:57:43 -06:00
ikelos and GitHub
db0a8a0078
Merge pull request #1381 from the-rectifier/develop
...
Volshell: Add Dedicated Method to retrieve EPROCESS/Task object
2025-01-23 00:06:56 +00:00
Daniel Davidov
c10572905f
Add low stub offset kernel detection
...
reference: Memprocfs and https://www.youtube.com/watch?v=_ShCSth6dWM
2025-01-22 10:45:52 +02:00
Odysseas Stavrou
b59f051353
Volshell: Updates to the get_process() methods
2025-01-22 02:39:35 +02:00
Odysseas Stavrou
dfe3d255c0
Volshell: Update Process retrieval methods with virtual/physical offsets
2025-01-20 22:25:01 +02:00
ikelos and GitHub
d2314ed1ef
Merge pull request #1537 from volatilityfoundation/issues/improve-jsonschema-speed
...
Issues/improve jsonschema speed
2025-01-20 08:26:32 +00:00
ikelos and GitHub
51726cd14f
Merge pull request #1553 from gcmoreira/parity_release_harden_page_cache
...
Linux - Parity release harden Page Cache
2025-01-20 08:17:16 +00:00
ikelos and GitHub
0f09ecd126
Merge pull request #1563 from volatilityfoundation/revert-1561-pre_linux_pagecache_recoverfs_support
...
Revert "Pre linux.pagecache.recoverfs support"
2025-01-20 08:16:24 +00:00
Gustavo Moreira
ec7a101eb9
linux: page_cache.InodePages plugin: Remove unnecesary casting
2025-01-20 11:05:51 +11:00
Gustavo Moreira
bf76aad1e2
linux: page_cache.Files plugin: Ensure the inode's i_link pointer is readable
2025-01-20 11:05:46 +11:00
ikelos and GitHub
e158ea73b2
Merge pull request #1562 from volatilityfoundation/revert-1513-env_var_missing_exception_handler
...
Revert "Add missing exception handling in env var recovery. Prevent backtraces"
2025-01-20 00:00:21 +00:00
ikelos and GitHub
e18bffdde9
Revert "Pre linux.pagecache.recoverfs support"
2025-01-19 23:51:28 +00:00
ikelos and GitHub
74b98e62c7
Revert "Add missing exception handling in env var recovery. Prevent backtraces"
2025-01-19 23:42:41 +00:00
ikelos and GitHub
00a69c9e49
Merge pull request #1561 from Abyss-W4tcher/pre_linux_pagecache_recoverfs_support
...
Pre linux.pagecache.recoverfs support
2025-01-19 16:57:21 +00:00
Abyss Watcher
d42ffc01e2
typo
2025-01-19 17:33:47 +01:00
Abyss Watcher
a02243bb3c
2.1.0 -> 3.0.0 InodePages bump
2025-01-19 17:27:27 +01:00
Abyss Watcher
59703045c7
switch calling convention to context and layer name
2025-01-19 17:26:42 +01:00
ikelos and GitHub
89c6d7a80e
Merge pull request #1338 from Abyss-W4tcher/add_scatterlists
...
Introduce scatter-gather scatterlists
2025-01-19 16:25:59 +00:00
Abyss Watcher
eddba98ef7
type hint format_symlink
2025-01-19 17:09:59 +01:00
Abyss Watcher
ecae545f58
typo
2025-01-19 17:05:52 +01:00
Abyss Watcher
452d6e705b
1.0.1 -> 1.1.0 Files bump
2025-01-19 16:26:25 +01:00
Abyss Watcher
da068676d1
typo
2025-01-19 15:16:09 +01:00
Abyss Watcher
818ddb746b
2.0.0 -> 2.1.0 InodePages bump
2025-01-19 15:15:55 +01:00
Abyss Watcher
e8b44efc17
add and leverage write_inode_content_to_stream
2025-01-19 15:13:26 +01:00
Abyss Watcher
8594106005
1.0.1 -> 1.2.0 Files bump
2025-01-19 15:12:10 +01:00
Abyss Watcher
6f2ff4f7c6
add InodeSize column to Files
2025-01-19 15:11:03 +01:00
Abyss Watcher
48a8f3929b
add and leverage follow_symlinks parameter
2025-01-19 15:10:32 +01:00
Abyss Watcher
1d0159325f
switch to InodeUser.format_symlink
2025-01-19 15:09:20 +01:00
Abyss Watcher
d325e1ca17
add inode_size and format_symlink to Inode* dataclasses
2025-01-19 15:08:27 +01:00
Abyss Watcher
08830fee05
use architectures.LINUX_ARCHS
2025-01-19 15:06:42 +01:00
Abyss Watcher
726fbe6cce
2.17.1 -> 2.18.0 bump
2025-01-19 13:01:14 +01:00
Mike Auty