Mike Auty
eeeda60bfb
A couple more small documentation updates.
2017-08-11 19:30:39 +01:00
Mike Auty
2954d7433f
Improve documentation and ordering.
2017-08-11 19:29:37 +01:00
Mike Auty
e434909e50
Make SymbolTable.symbols consistent with enumerations and types.
2017-08-11 19:25:13 +01:00
Mike Auty
f7f1c1d5e0
Raise the right kind of exception in Intermediate Format SymbolTables.
2017-08-11 08:49:49 +01:00
Mike Auty
c6724a538a
Initial support for compressed files.
2017-08-11 01:12:50 +01:00
Mike Auty
efdd961313
Prevent exceptions if there are no linux symboltables.
2017-08-11 00:05:50 +01:00
Mike Auty
a008686c20
Reduce the logging level of the Pdbscan automagic.
2017-08-10 23:58:34 +01:00
Mike Auty
c336a39695
Fix up the Char type (struct.unpack returns a bytes, not a string).
2017-08-10 20:44:21 +01:00
Mike Auty
570a2d35be
Make the DllList import a little more sensible/consistent.
2017-08-10 10:07:57 +01:00
Mike Auty
c19ad1cb22
Placeholder change to ensure even if we don't change it to a from statement, it isn't bizarre.
2017-08-10 10:03:39 +01:00
Mike Auty
ab5f4fa3ab
Refactor the List and Choice Requirements
...
These are required by the Automagic interface, and so to prevent
importing from outside the interfaces namespace, these two classes
were moved into interfaces.
2017-08-09 22:44:06 +01:00
Mike Auty
d32fc223e2
Fix up additional imports inconsistent with the coding style.
...
Note: also remove interfaces_configuration where ever possible
(this is not possible in the interfaces directory itself
because it would cause an import loop).
2017-08-09 22:32:44 +01:00
Mike Auty
8be6869a84
Tidy up imports and adhere to the coding style of never directly importing objects.
2017-08-09 22:22:43 +01:00
Mike Auty
bfb83f0c33
Fix up silly typo (and replace another hardcoded bang).
2017-08-09 21:34:26 +01:00
Mike Auty
9c3ad5588a
Improve the error handling the LinuxSymbolCache.
2017-08-09 18:06:35 +01:00
Mike Auty
ce89564f71
Merge branch 'master' of github.com:volatilityfoundation/volatility3
2017-08-08 17:45:52 +01:00
Mike Auty
f0d7dbdf68
Add in translate method for TranslationLayers.
2017-08-08 17:45:36 +01:00
Mike Auty
fc0fa96ed8
Replace hardcoded exclamation marks for constants.BANG
2017-08-08 09:50:22 +01:00
Mike Auty
2caeeb275e
First stab at refactoring the add_process_layer code out of the Windows _EPROCESS structure.
2017-08-07 21:42:10 +01:00
Mike Auty
ab8d76eeef
Revert the generator changes, the visiting function should be used instead.
2017-08-02 10:40:16 +01:00
Mike Auty
d8c53b63bf
Don't forget to iterate over the populate generator.
2017-08-02 10:05:12 +01:00
Mike Auty
ff3d5e8f3b
Maintain a row count for populated tree grids.
2017-08-01 15:39:38 +01:00
Mike Auty
029fa8e940
Ensure ColumnSortKey is callable, and make sure the top level direction is considered.
2017-08-01 15:39:01 +01:00
Mike Auty
80508c8711
Allow for ascending or descending sort order.
2017-08-01 02:41:55 +01:00
Mike Auty
5e9b2306d4
Ensure symbol tables are created with unique names.
2017-07-31 16:34:02 +01:00
Mike Auty
d119f372dc
Ensure the populate generator is actually a generator.
2017-07-31 13:52:54 +01:00
Mike Auty
b8f7433dba
Ensure that non-multiprocessing does not use multiprocessing.
2017-07-30 22:40:33 +01:00
Mike Auty
9c8add5d5c
Ensure the dtb is not uninitialized.
2017-07-30 21:10:12 +01:00
Mike Auty
b7c8c8a058
Improve the docstrings for automagic.
2017-07-29 12:53:35 +01:00
Mike Auty
775ece3cb2
Convert the 'ntkrnlmp' requirement into an 'nt' requirement.
2017-07-24 15:43:34 +01:00
Mike Auty
8ad9fbfd24
Ensure imported plugins have their correct requirements fulfilled (even if they change).
2017-07-24 15:41:47 +01:00
Mike Auty
4b0515aa65
Fix up the logging so there are five standard levels, and list the cache location.
2017-07-24 01:39:29 +01:00
Mike Auty
d34b344507
Ensure linux doesn't bog down windows searching.
2017-07-20 19:54:10 +01:00
Mike Auty
c0a8ddd9a3
Improve the progress messages.
2017-07-20 19:35:12 +01:00
Mike Auty
0b6e50daba
Convert pdbscanner to a generator.
2017-07-20 17:47:21 +01:00
Mike Auty
b8fe2a96be
Avoid a variable-reuse issue.
2017-07-20 11:58:16 +01:00
Mike Auty
14ae9db745
Improve the progress output.
2017-07-20 11:40:30 +01:00
Mike Auty
469afc800b
Revert "Change the behaviour of multithreaded scans to return results as soon as possible (at the cost of ordering)."
...
This reverts commit 8c4bdc8c61
2017-07-20 11:09:42 +01:00
Mike Auty
f8767af1b8
Catch the most general InvalidAddressException in case it's thrown by a lower layer.
2017-07-20 00:58:07 +01:00
Mike Auty
8087f86bcf
Remove debugging statements.
2017-07-20 00:51:03 +01:00
Mike Auty
fbd70438a0
Slightly more error checking.
2017-07-20 00:49:56 +01:00
Mike Auty
03cdd91fbf
Add in the capability to merge two config dicts (so that manually set settings aren't overwritten).
2017-07-20 00:49:36 +01:00
ikelos and GitHub
fe66301cf3
Merge pull request #8 from volatilityfoundation/mhl-cmhive
...
move the hive name decision to _CMHIVE extension for hivelist (and ot…
2017-07-19 20:43:05 +01:00
iMHLv2
770dba1f0a
use @property and update pydoc for _CMHIVE.name. catch AttributeError instead of checking hasattr
2017-07-19 18:12:50 +00:00
iMHLv2
b9adcb2b87
move the hive name decision to _CMHIVE extension for hivelist (and other plugins in the future)
2017-07-19 17:10:49 +00:00
Mike Auty
e2450a0458
Add in more debugging information.
2017-07-19 17:52:19 +01:00
ikelos and GitHub
a423b034a2
Merge pull request #7 from volatilityfoundation/mhl-modules
...
add the modules plugin for windows
2017-07-19 15:26:53 +01:00
iMHLv2
cc8114e872
add the modules plugin for windows
2017-07-18 23:51:35 +00:00
iMHLv2
60e67a80d8
fix a misleading pydoc string in the hivelist plugin
2017-07-18 23:50:38 +00:00
iMHLv2
8493f4c4d6
add hivelist plugin for windows
2017-07-18 23:21:44 +00:00
Mike Auty