WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-01 04:39:03 +02:00
Code Issues Packages Projects Releases Wiki Activity
1,655 Commits 80 Branches 17 Tags
e503c3667feaa41cccddecff5b97ed8d20c81f5d
Commit Graph
1655 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Mike Auty e503c3667f Improve enumeration support. 2019-06-30 14:12:43 +01:00
Mike Auty 5e37080c14 Fix up misnamed get_enum/has_enum. 2019-06-30 13:35:13 +01:00
Mike Auty ef28a9b733 Apparently, it wasn't in 3.5, but it throws type-checking errors 
Python3.6 introduced it, but annoying the type-checker realizes that
we're using it like any int (ie, A | B) and throws a wobbly.  Really
want to see the back of python3.5...

Revert "IntFlag is in python-3.5 by default, it's just if the enum34 package is installed that problems happen."

This reverts commit 17a0e1eac8.
 2019-06-28 15:31:59 +01:00
Mike Auty 17a0e1eac8 IntFlag is in python-3.5 by default, it's just if the enum34 package is installed that problems happen. 2019-06-28 15:29:40 +01:00
Mike Auty 81d3293414 Move type_classes to dictionaries stored in their modules rather than separate tables. 2019-05-29 22:14:38 +01:00
Mike Auty 6a12361977 Fix up minor typo in info plugin. 2019-05-29 22:14:25 +01:00
Andrew Case 2a8a1523e5 Mac - add lsof plugin 2019-05-29 14:49:55 -05:00
Andrew Case 66690bcbfe Merge branch 'master' of https://github.com/volatilityfoundation/volatility3 2019-05-29 14:07:06 -05:00
Andrew Case 600af7299b Mac - add check_sysctl plugin 2019-05-29 14:06:51 -05:00
Analystandikelos a90f3ed1a7 fixup an instance of is_windows_7 in poolscanner 2019-05-29 14:46:22 +01:00
Mike Auty 4ff137bc18 Fix up a is_windows_8_or_later call. 2019-05-29 14:46:22 +01:00
Mike Auty 38f249aef2 Change the os-distguisher to make it more flexible. 2019-05-29 14:46:22 +01:00
Mike Auty 867edc9501 Add in the os-distinguisher code. 2019-05-29 14:46:22 +01:00
Andrew Case 15e546c23c Mac - add check_trap_table 2019-05-28 22:01:28 -05:00
Andrew Case bc6e63cb19 Mac - skip invaid kaslr shift results 2019-05-28 19:59:14 -05:00
Mike Auty 2b6007857e Fix up type signature of filter_func for windows pslist. 2019-05-26 20:45:24 +01:00
Mike Auty 91f1909a01 Add in more accurate generic typing for class_subclasses. 2019-05-11 23:20:16 +01:00
Mike Auty 84a1307c93 More minor typing fixes. 2019-05-11 23:10:39 +01:00
Mike Auty 4cfde031f6 Additional typing fixes. 2019-05-11 22:57:06 +01:00
Mike Auty cf5cf5cacd Add in caching just at the page read point of intel spaces. 2019-05-11 20:58:06 +01:00
Mike Auty 86a60985ec Revert "Add in poor man's lru_caching to see if it's the caching or lru_cache itself." 
This reverts commit 48826a9051.
 2019-05-11 20:52:45 +01:00
Mike Auty 48826a9051 Add in poor man's lru_caching to see if it's the caching or lru_cache itself. 2019-05-11 20:33:18 +01:00
Mike Auty 2d939a7ddb Fix syntax error. 2019-05-11 20:32:21 +01:00
Mike Auty 9378c445db lru_cache just seems to break file reading. 2019-05-09 01:56:17 +01:00
Mike Auty 488b9be2ba Attempt to apply lru_cache but without using staticmethod. 2019-05-09 01:43:00 +01:00
Mike Auty a87d3c0dad Make sure the separation of read isn't the issue. 2019-05-09 01:05:34 +01:00
Mike Auty df4c81a7c0 Trade off memory for disk reads (take 2). 2019-05-09 00:49:36 +01:00
Mike Auty 1c0cd7ddaf Make sure objects.utility is imported automatically. 2019-05-09 00:07:59 +01:00
Mike Auty d0ff961ed1 Revert "Trade off memory for disk reads." 
This reverts commit 20c609b180.
 2019-05-09 00:06:07 +01:00
Mike Auty 20c609b180 Trade off memory for disk reads. 2019-05-08 23:47:02 +01:00
Mike Auty 46d8e37cf5 Add optional dependency for pdbconv now pdbparse is in pypy. 2019-05-07 23:57:12 +01:00
Mike Auty 1e67ef6a34 Ignore warning for pyinstaller dependency search. 2019-05-06 23:50:36 +01:00
Mike Auty f73b2b3e92 Update vol.spec to ensure automagic and mac symbols are shipped. 2019-05-06 21:07:12 +01:00
Mike Auty db480bb1b8 Fix up minor typing issue. 2019-05-05 16:00:26 +01:00
Mike Auty 573dd88885 Add some typing information and better error checking in pdbconv. 2019-05-05 15:51:47 +01:00
Mike Auty 287ed2be94 Fix up the logging messages. 2019-04-28 14:00:36 +01:00
Mike Auty d89ade4e02 Remove requests dependency. 
It turns out the MS servers don't require a specific header anymore, so
we can use the built in urllib.
 2019-04-28 13:56:54 +01:00
Mike Auty 4959bb93b1 Don't write empty temporary files when there's a 404. 2019-04-27 22:50:02 +01:00
Mike Auty 5d380d666f Make sure we convert names for pointers. 2019-04-27 22:25:41 +01:00
Mike Auty 08e22e9bee Fix up some terrible code where we caught all exceptions. 2019-04-27 22:19:55 +01:00
Mike Auty a99a40b691 Use base-types to define pointer types. 2019-04-27 22:16:03 +01:00
Mike Auty 67d0c18e8a Add in missing types to pdbconv. 2019-04-27 22:09:50 +01:00
Mike Auty 4bf0a97703 Revert "Refactor the ordering of things in CrashDump initializer." 
Allowed a configuration to be accessed before full initialization, so no
need for CrashDump changes.

This reverts commit ac57255b23.
 2019-04-27 22:06:58 +01:00
Mike Auty 9ce139d4e2 Allow configs to potentially be accessed before initialization has happened. 2019-04-27 22:06:39 +01:00
Mike Auty ca46f090c2 Fix up pdbparse GUID parsing to use Bytes. 2019-04-27 22:02:02 +01:00
Mike Auty ac57255b23 Refactor the ordering of things in CrashDump initializer. 2019-04-27 21:38:01 +01:00
Mike Auty a7160dd6b6 Move the PDB downloading code and test for file writability. 2019-04-27 21:06:25 +01:00
Mike Auty 470d3906dc Improve PDB parsing to include symbol undecoration. 2019-04-27 21:05:55 +01:00
Dave Lassalleandikelos 61f9173bb6 initial hivescan plugin 2019-04-27 14:02:07 +01:00
Mike Auty 7c16c403d5 Ensure we delete the temorary file even if things go wrong. 2019-04-23 22:43:16 +01:00