WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-07 02:07:39 +02:00
Code Issues Packages Projects Releases Wiki Activity
2,594 Commits 80 Branches 17 Tags
eae2ad8748a4eb58c2fc8933f024c10c3d911ce8
Commit Graph
2594 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Nick L. Petroni, Jr eae2ad8748 add GitHub Action to build PyPI and source artifacts 2021-01-28 10:01:53 -05:00
ikelosandGitHub f63f690b17 Merge pull request #430 from volatilityfoundation/issues/release-namespace 
Rename the base namespace as volatility3
 2021-01-26 11:46:56 +00:00
Mike Auty 22620ce968 Merge branch 'release/v2.0.0' into issues/release-namespace 2021-01-23 16:32:30 +00:00
Mike Auty 5cabf271ea Plugins: Fix list_files with suitable required version. 2021-01-20 21:58:56 +00:00
Mike Auty 5235f43416 Plugins: Fix list_files with suitable required version. 2021-01-20 21:55:32 +00:00
Mike Auty fc75c14002 CLI: Make sure the program name doesn't look weird 2021-01-20 21:47:12 +00:00
Mike Auty 79e2a1494b Documentation: Minor rename fixes. 2021-01-20 21:46:20 +00:00
Mike Auty d14ba9e96e Core: Roll the version number back to 1.0.0 2021-01-20 21:29:30 +00:00
Mike Auty 3911098d27 Core: Rename the top level namespace 2021-01-20 21:21:16 +00:00
ikelosandGitHub 1477887831 Merge pull request #426 from volatilityfoundation/issue_409_vacb_validity 
refs #409 VACB does not expose is_valid() - do the validity check inline
 2021-01-14 09:12:51 +00:00
iMHLv2 b61185c6b0 refs #409 VACB does not expose is_valid() - do the validity check inline 2021-01-13 21:23:12 -06:00
Mike Auty 89a3d441ff Layerwriter: Ensure we autochoose by default 2021-01-13 00:54:50 +00:00
ikelosandGitHub 1bfaf960ef Merge pull request #421 from volatilityfoundation/issue_368_windows_handles_x86_win8 
refs #368 fix handles on 32-bit windows 8 and 10 - finding SAR is not necessary on these platforms
 2021-01-13 00:27:12 +00:00
Mike Auty 53169b15ab Intel: Fix PAE typo 2021-01-08 17:40:52 +00:00
Mike Auty de2f464a71 Documentation: Fix up the surjective line 
This makes #389 obsolete.
 2021-01-08 01:14:34 +00:00
ikelosandGitHub 1ea9a493a8 Merge pull request #415 from volatilityfoundation/windows_info_add_Is64Bits_and_IsPAE 
add Is64Bit and IsPAE properties to the windows.info plugin
 2021-01-06 21:10:26 +00:00
ikelosandGitHub 95c19f1676 Merge pull request #416 from volatilityfoundation/issues/intel-pae-metadata 
Layers: Ensure intel PAE reports pae in the metadata
 2021-01-06 21:09:33 +00:00
ikelosandGitHub cbe7166257 Merge pull request #411 from volatilityfoundation/issues/issue408 
Issues/issue408
 2021-01-06 21:07:26 +00:00
ikelosandGitHub cc3818391c Merge pull request #405 from volatilityfoundation/issues/mac_vpager_native_layer 
Linux: Use native_layer when constructing from a pointer offset
 2021-01-06 21:05:00 +00:00
ikelosandGitHub b3339437fb Merge pull request #404 from volatilityfoundation/issues/bad_dtb_finder_code 
Automagic: Windows DTB finder was too limited
 2021-01-06 21:04:07 +00:00
Mike Auty e1032623fe Layers: Ensure intel PAE reports pae in the metadata 2021-01-06 19:28:24 +00:00
iMHLv2 d7d176d040 add Is64Bit and IsPAE properties to the windows.info plugin 2021-01-06 11:36:56 -06:00
iMHLv2 53397117ef remove unnecessary and unused imports from the windows extensions init file 2021-01-06 10:30:01 -06:00
iMHLv2 2c3b6668d5 refs #368 fix handles on 32-bit windows 8 and 10 - finding SAR is not necessary on these versions 2021-01-06 10:10:51 -06:00
Mike Auty f75e77997d Layerwriter: Remove erroneous debugging statements 2021-01-03 10:38:49 +00:00
Mike Auty d1b10781d4 CLI: Parse windows file as files not URIs 
Fixes #408
 2020-12-30 18:06:41 +00:00
Mike Auty 1c2a9921ff Windows: Partial fix for #368 error messages 2020-12-27 15:21:18 +00:00
Mike Auty feefc93adc CLI: Fix inaccurate documentation 2020-12-27 15:21:18 +00:00
Mike Auty f262821924 Documentation: minor bugfix 2020-12-21 17:07:51 +00:00
Mike Auty ccef55e448 Linux: Use native_layer when constructing from a pointer offset 2020-12-21 15:57:18 +00:00
Mike Auty c45b1b3423 Automagic: Windows DTB finder was too limited 
The DTB finder test returns a full DTB, if that's over the scan chunk
size it'll get discarded, so we remove that test.
 2020-12-21 15:52:43 +00:00
Mike Auty 1abc65c2ac CLI: Fix inaccurate documentation 2020-12-11 16:04:13 +00:00
Mike Auty f9102a60b8 Release: Update the version number for this release 
Entering code-freeze
10th Dec - Bug fixes and documentation, no new features
7th Jan - Only critical fixes
21st Jan - Release date
 2020-12-10 22:42:39 +00:00
Andrew Caseandikelos 93c6a62972 Detect attempts to fix the image base for LARGEADDRESSAWARE executables and provide the user with a warning. #332 2020-12-10 18:58:00 +00:00
Mike Auty d63aef566f Codebase: Yapf the codebase again 2020-12-10 15:37:40 +00:00
Matt Tresslerandikelos 747fe8609f update copywrite to 2020 2020-12-10 15:37:40 +00:00
Matt Tresslerandikelos 17e629a4c4 converted process_file_object into a classmethod 2020-12-10 15:37:40 +00:00
Matt Tresslerandikelos e9f870ff05 revert self.context change back to self._context 2020-12-10 15:37:40 +00:00
Matt Tresslerandikelos 9f977080c5 changed self._context to self.context 2020-12-10 15:37:40 +00:00
Matt Tresslerandikelos d98337cc09 added debug statements to dump_file_producer when none is returned 2020-12-10 15:37:40 +00:00
Matt Tresslerandikelos 4f37a28185 dump_file_producer is now a classmethod and returns a FileInterface Object 2020-12-10 15:37:40 +00:00
Matt Tresslerandikelos 49acf44302 dumpfiles.py is now consistent with master and runs correctly 2020-12-10 15:37:40 +00:00
Matt Tresslerandikelos 8e1a599203 changed PluginRequirement to VersionRequirement 2020-12-10 15:37:40 +00:00
iMHLv2andikelos 0a9e663c41 remove the _VACB.is_valid() method - do all validity checks in the calling function 2020-12-10 15:37:40 +00:00
iMHLv2andikelos 442f877e9a refs #197 initial commit of windows.dumpfiles 2020-12-10 15:37:40 +00:00
iMHLv2andikelos 20f4fbf157 add --virtaddr and --physaddr options so users can supply virtual or physical addresses (or both) 2020-12-10 15:37:40 +00:00
iMHLv2andikelos 0c09b98318 use native_layer_name in file_name_with_device() in case the FILE_OBJECT is instantiated from a memory (physical) layer 2020-12-10 15:37:40 +00:00
iMHLv2andikelos 25b56b5ca4 remove the _VACB.is_valid() method - do all validity checks in the calling function 2020-12-10 15:37:40 +00:00
iMHLv2andikelos 3ac89577cc refs #197 initial commit of windows.dumpfiles 2020-12-10 15:37:40 +00:00
Mike Auty 56ff75a74b Layers: Add internal intel debugging flag 2020-12-10 12:18:14 +00:00