Commit Graph
3073 Commits
Author SHA1 Message Date
Paul Kermann edbbc0159f bug fix 2022-02-10 10:31:18 +02:00
Mike Auty 05b4eb22fa Core: Bump the development version to 2.0.2 2022-02-09 20:19:17 +00:00
Mike Auty 497eaea512 Core: Slight speed-up for all single struct.unpack calls 2022-02-09 20:07:13 +00:00
ikelosandGitHub 3e742bf1f7 Merge pull request #643 from ilay122/bugfix/mz_parsing
fix pdb mz parsing
2022-02-09 19:46:09 +00:00
trashcan122 ce166b9263 fix pdb mz parsing 2022-02-09 16:30:40 +02:00
ikelosandGitHub dbf6245b85 Merge pull request #641 from paulkermann/bugfix/pdb-scanning-offset-bug
Fixed pdb scanning bug
2022-02-09 09:04:11 +00:00
Paul Kermann a67121f1c1 Added data_offset to pattern matching result, fixes pdb scanning bug 2022-02-09 10:40:37 +02:00
ikelosandGitHub 52f325ed54 Merge pull request #633 from Digitalisx/develop
Correcting typo for Windows constants code comment.
2022-01-31 11:38:12 +00:00
Donghyun KimandGitHub 7c238f93a0 Update __init__.py
Correcting typos for Windows Constants
2022-01-31 20:15:39 +09:00
ikelosandGitHub b84e478371 Merge pull request #623 from volatilityfoundation/issues/issue542
Plugins: Timeliner improve support for body files
2022-01-18 21:01:46 +00:00
ikelosandGitHub 0de8448f89 Merge pull request #622 from volatilityfoundation/issues/issue616
Plugins: yara python module check improvement
2022-01-18 21:00:33 +00:00
Mike Auty 0f90f7f6ca Plugins: Remove unused timeliner parameter 2022-01-18 20:58:48 +00:00
ikelosandGitHub 290e9fdb39 Merge pull request #628 from kevthehermit/plugin/sessions
add timeliner output to windows.sessions
2022-01-18 20:53:07 +00:00
KevTheHermit ac7cecf231 add timeliner output to windows.sessions 2022-01-18 20:42:38 +00:00
ikelosandGitHub a686042789 Merge pull request #626 from kevthehermit/plugin/sessions
Sessions Plugin
2022-01-18 19:37:37 +00:00
KevTheHermit be0dd49d31 Sessions Plugin use ModuleRequirement 2022-01-18 19:34:06 +00:00
KevTheHermit 0f23089cb4 Create Sessions Plugin 2022-01-17 00:28:59 +00:00
Mike Auty 91a844a8b0 Merge branch 'stable' into develop 2022-01-16 23:26:54 +00:00
ikelosandGitHub 02ff56ba71 Merge pull request #624 from volatilityfoundation/readthedocs-requirements
Fix readthedocs builds
2022-01-16 22:54:24 +00:00
Nick L. Petroni, Jr fa2a608cd2 update doc copyright 2022-01-16 17:32:02 -05:00
Nick L. Petroni, Jr 64acff1b59 use doc/requirements.txt when building with readthedocs 2022-01-16 17:11:53 -05:00
Mike Auty 57c9470f66 Documentation: Fix building from different directories 2022-01-16 22:09:15 +00:00
ikelosandGitHub 7650cfd7d1 Merge pull request #614 from kevthehermit/plugin/mftscan
Create MFTScanner plugin
2022-01-16 14:08:08 +00:00
KevTheHermit e3a7ac5668 Use lookups on mft enums instead of choices 2022-01-16 02:20:55 +00:00
ikelosandGitHub 45e2597399 Merge pull request #610 from volatilityfoundation/feature/pretty-multiline-output
CLI: Support multi-line fields and tabstops in pretty renderer
2022-01-16 01:34:13 +00:00
ikelosandGitHub 84df55a15b Merge pull request #612 from volatilityfoundation/issues/issue588
Automagic: Allow automagic to exclude unsupported OSes
2022-01-16 01:28:52 +00:00
Mike Auty a31f846b14 Documentation: Reorganize and consolidate pages 2022-01-16 00:47:40 +00:00
KevTheHermit f31bc853c4 remove MFTIntermedSymbols 2022-01-15 23:30:39 +00:00
Mike Auty 742d46786b Plugins: Don't forget missing values 2022-01-15 22:56:36 +00:00
Mike Auty d9ba3e6bd9 Plugins: Timeliner improve support for body files 2022-01-15 22:50:21 +00:00
Mike Auty dab746aff0 Plugins: yara python module check improvement
Fixes #616
2022-01-15 22:44:24 +00:00
KevTheHermit 32abab8733 Remove debug print from mftscan 2022-01-15 22:38:05 +00:00
Mike Auty a9e5589260 Documentation: Add summary table for linux/mac ISF creation 2022-01-15 22:02:02 +00:00
KevTheHermit 4aaba89d02 Unity timeliner output for mftscan 2022-01-15 21:47:37 +00:00
Mike Auty 8791631db5 Documentation: More minor fixes 2022-01-15 21:40:25 +00:00
Mike Auty c93e20ab36 Plugins: linux.kmsg update documentation and reformat 2022-01-15 21:14:52 +00:00
Mike Auty 1f7acf2779 Documentation: Update sphinx requirement to 4.0.0 2022-01-15 21:02:20 +00:00
KevTheHermit c5987a45d2 Relative Offset MFT Header 2022-01-15 20:54:22 +00:00
KevTheHermit a8f5b03816 Apply yapf to mftscan plugin 2022-01-15 15:57:23 +00:00
KevTheHermit 1c6cd0fb52 Move mftscan enums to ISF file. 2022-01-15 15:53:35 +00:00
ikelosandGitHub 0abff16580 Merge pull request #615 from volatilityfoundation/feature/yara-rules-update
Plugins: Update yarascan options
2022-01-13 15:21:41 +00:00
Mike Auty d91a6f94fb Automagic: Ensure linxu/mac are excluded from windows automagic 2022-01-13 01:01:20 +00:00
Mike Auty f67f1e242d Documentation: Ensure the doc reqs are included in s_dist builds 2022-01-12 22:11:25 +00:00
Mike Auty 8920fd634a Merge branch 'release/v2.0.0' into develop 2022-01-12 21:39:12 +00:00
Mike Auty d469d9c597 Documentation: Update master branch to stable branch 2022-01-12 21:13:32 +00:00
Mike Auty 1f9d6f5baa Documentation: Update master branch to stable branch 2022-01-12 21:13:05 +00:00
Mike Auty 3294d0a2c2 Documentation: Update README.md before release 2022-01-12 21:06:53 +00:00
Mike Auty a0b66f33f9 Documentation: Update README.md before release 2022-01-12 21:06:20 +00:00
KevTheHermit 793d08faf4 Add TimeLiner interface to MFTScan plugin 2022-01-09 22:27:32 +00:00
KevTheHermit 9d86599e7f MFT Plugin use ISF instead of Struct 2022-01-09 22:04:13 +00:00