Mike Auty
e503c3667f
Improve enumeration support.
2019-06-30 14:12:43 +01:00
Mike Auty
5e37080c14
Fix up misnamed get_enum/has_enum.
2019-06-30 13:35:13 +01:00
Mike Auty
ef28a9b733
Apparently, it wasn't in 3.5, but it throws type-checking errors
...
Python3.6 introduced it, but annoying the type-checker realizes that
we're using it like any int (ie, A | B) and throws a wobbly. Really
want to see the back of python3.5...
Revert "IntFlag is in python-3.5 by default, it's just if the enum34 package is installed that problems happen."
This reverts commit 17a0e1eac8
2019-06-28 15:31:59 +01:00
Mike Auty
17a0e1eac8
IntFlag is in python-3.5 by default, it's just if the enum34 package is installed that problems happen.
2019-06-28 15:29:40 +01:00
Mike Auty
81d3293414
Move type_classes to dictionaries stored in their modules rather than separate tables.
2019-05-29 22:14:38 +01:00
Mike Auty
6a12361977
Fix up minor typo in info plugin.
2019-05-29 22:14:25 +01:00
Andrew Case
2a8a1523e5
Mac - add lsof plugin
2019-05-29 14:49:55 -05:00
Andrew Case
66690bcbfe
Merge branch 'master' of https://github.com/volatilityfoundation/volatility3
2019-05-29 14:07:06 -05:00
Andrew Case
600af7299b
Mac - add check_sysctl plugin
2019-05-29 14:06:51 -05:00
Analyst and ikelos
a90f3ed1a7
fixup an instance of is_windows_7 in poolscanner
2019-05-29 14:46:22 +01:00
Mike Auty
4ff137bc18
Fix up a is_windows_8_or_later call.
2019-05-29 14:46:22 +01:00
Mike Auty
38f249aef2
Change the os-distguisher to make it more flexible.
2019-05-29 14:46:22 +01:00
Mike Auty
867edc9501
Add in the os-distinguisher code.
2019-05-29 14:46:22 +01:00
Andrew Case
15e546c23c
Mac - add check_trap_table
2019-05-28 22:01:28 -05:00
Andrew Case
bc6e63cb19
Mac - skip invaid kaslr shift results
2019-05-28 19:59:14 -05:00
Mike Auty
2b6007857e
Fix up type signature of filter_func for windows pslist.
2019-05-26 20:45:24 +01:00
Mike Auty
91f1909a01
Add in more accurate generic typing for class_subclasses.
2019-05-11 23:20:16 +01:00
Mike Auty
84a1307c93
More minor typing fixes.
2019-05-11 23:10:39 +01:00
Mike Auty
4cfde031f6
Additional typing fixes.
2019-05-11 22:57:06 +01:00
Mike Auty
cf5cf5cacd
Add in caching just at the page read point of intel spaces.
2019-05-11 20:58:06 +01:00
Mike Auty
86a60985ec
Revert "Add in poor man's lru_caching to see if it's the caching or lru_cache itself."
...
This reverts commit 48826a9051
2019-05-11 20:52:45 +01:00
Mike Auty
48826a9051
Add in poor man's lru_caching to see if it's the caching or lru_cache itself.
2019-05-11 20:33:18 +01:00
Mike Auty
2d939a7ddb
Fix syntax error.
2019-05-11 20:32:21 +01:00
Mike Auty
9378c445db
lru_cache just seems to break file reading.
2019-05-09 01:56:17 +01:00
Mike Auty
488b9be2ba
Attempt to apply lru_cache but without using staticmethod.
2019-05-09 01:43:00 +01:00
Mike Auty
a87d3c0dad
Make sure the separation of read isn't the issue.
2019-05-09 01:05:34 +01:00
Mike Auty
df4c81a7c0
Trade off memory for disk reads (take 2).
2019-05-09 00:49:36 +01:00
Mike Auty
1c0cd7ddaf
Make sure objects.utility is imported automatically.
2019-05-09 00:07:59 +01:00
Mike Auty
d0ff961ed1
Revert "Trade off memory for disk reads."
...
This reverts commit 20c609b180
2019-05-09 00:06:07 +01:00
Mike Auty
20c609b180
Trade off memory for disk reads.
2019-05-08 23:47:02 +01:00
Mike Auty
4bf0a97703
Revert "Refactor the ordering of things in CrashDump initializer."
...
Allowed a configuration to be accessed before full initialization, so no
need for CrashDump changes.
This reverts commit ac57255b23
2019-04-27 22:06:58 +01:00
Mike Auty
9ce139d4e2
Allow configs to potentially be accessed before initialization has happened.
2019-04-27 22:06:39 +01:00
Mike Auty
ac57255b23
Refactor the ordering of things in CrashDump initializer.
2019-04-27 21:38:01 +01:00
Mike Auty
a7160dd6b6
Move the PDB downloading code and test for file writability.
2019-04-27 21:06:25 +01:00
Dave Lassalle and ikelos
61f9173bb6
initial hivescan plugin
2019-04-27 14:02:07 +01:00
Mike Auty
7c16c403d5
Ensure we delete the temorary file even if things go wrong.
2019-04-23 22:43:16 +01:00
Mike Auty
9350f7b88a
Don't forget to cleanup.
2019-04-23 00:32:29 +01:00
Mike Auty
ac282d01fb
Add in initial support at automatic downloading.
2019-04-23 00:16:19 +01:00
Mike Auty
5b0f99229c
Remove the VolTemplateProxy method proxying to fix the slowdown.
2019-04-18 01:48:56 +01:00
Mike Auty
754b3f0bc6
Refactor create_filter to create_pid_filter.
2019-04-18 01:10:07 +01:00
Mike Auty
603512122d
Allow class_types to be specified as part of SymbolTable construction.
2019-04-18 01:03:59 +01:00
Mike Auty
8c76a25b2d
Allow VolTemplateProxies to include additional useful methods.
2019-04-17 23:53:36 +01:00
Mike Auty
e5d6cd3d16
Add in Enum ObjectTemplate lookup method.
2019-04-17 23:53:22 +01:00
Mike Auty
90ef8f363f
Have hivelist traverse in both directions in case of invalid addresses.
2019-04-11 00:38:46 +01:00
Mike Auty
45268245ca
Add in base __getattr__ to appease ObjectInterface vs Struct issues.
...
Consider revisiting this at some point, it immediately throws an
exception, so should cause significant slow downs (none detected on a
reasonably fast machine, although buildbot will give a better idea).
Without this a lot more specific typing will be required on the
expectation that Structs will be returned rather than any other type of
object.
2019-04-07 19:08:48 +01:00
Mike Auty
5b8645bd1f
Revert IntFlag change until we drop python 3.5 support.
2019-04-05 22:56:36 +01:00
Mike Auty
af7d969ace
Fix up variable type assignment.
2019-04-05 14:51:23 +01:00
Mike Auty
87bf1da424
Don't use mutable defaults.
2019-04-05 14:50:39 +01:00
Mike Auty
cc3a9ea4d8
Fix locking type issue.
2019-04-05 14:50:22 +01:00
Mike Auty
fa94ef3271
Use the flag type for flags.
2019-04-05 14:49:44 +01:00
Mike Auty