 Mike Auty
|
f7f1c1d5e0
|
Raise the right kind of exception in Intermediate Format SymbolTables.
|
2017-08-11 08:49:49 +01:00 |
|
|
Mike Auty
|
c6724a538a
|
Initial support for compressed files.
|
2017-08-11 01:12:50 +01:00 |
|
|
Mike Auty
|
efdd961313
|
Prevent exceptions if there are no linux symboltables.
|
2017-08-11 00:05:50 +01:00 |
|
|
Mike Auty
|
a008686c20
|
Reduce the logging level of the Pdbscan automagic.
|
2017-08-10 23:58:34 +01:00 |
|
|
Mike Auty
|
9c3ad5588a
|
Improve the error handling the LinuxSymbolCache.
|
2017-08-09 18:06:35 +01:00 |
|
|
Mike Auty
|
9c8add5d5c
|
Ensure the dtb is not uninitialized.
|
2017-07-30 21:10:12 +01:00 |
|
|
Mike Auty
|
b7c8c8a058
|
Improve the docstrings for automagic.
|
2017-07-29 12:53:35 +01:00 |
|
|
Mike Auty
|
d34b344507
|
Ensure linux doesn't bog down windows searching.
|
2017-07-20 19:54:10 +01:00 |
|
|
Mike Auty
|
0b6e50daba
|
Convert pdbscanner to a generator.
|
2017-07-20 17:47:21 +01:00 |
|
|
Mike Auty
|
b8fe2a96be
|
Avoid a variable-reuse issue.
|
2017-07-20 11:58:16 +01:00 |
|
|
Mike Auty
|
f8767af1b8
|
Catch the most general InvalidAddressException in case it's thrown by a lower layer.
|
2017-07-20 00:58:07 +01:00 |
|
|
Mike Auty
|
8087f86bcf
|
Remove debugging statements.
|
2017-07-20 00:51:03 +01:00 |
|
|
Mike Auty
|
fbd70438a0
|
Slightly more error checking.
|
2017-07-20 00:49:56 +01:00 |
|
|
Mike Auty
|
03cdd91fbf
|
Add in the capability to merge two config dicts (so that manually set settings aren't overwritten).
|
2017-07-20 00:49:36 +01:00 |
|
|
Mike Auty
|
e2450a0458
|
Add in more debugging information.
|
2017-07-19 17:52:19 +01:00 |
|
|
Mike Auty
|
edcfda0688
|
Change the stacking order, to ensure Lime gets loaded before linux.
|
2017-07-17 22:51:42 +01:00 |
|
|
Mike Auty
|
d2eef99e37
|
Don't try making URIs into URIs.
|
2017-07-17 21:52:01 +01:00 |
|
|
Mike Auty
|
9f3470a8e9
|
Speed up linux caching by allowing lack of validation. This should NOT be enabled without knowing exactly what you're doing.
|
2017-07-17 21:47:31 +01:00 |
|
|
Mike Auty
|
d49e956546
|
Improve file URL handling.
|
2017-07-17 18:33:45 +01:00 |
|
|
Mike Auty
|
f2bfd39c57
|
Add in more debugging information.
|
2017-07-17 17:17:46 +01:00 |
|
|
Mike Auty
|
23ccb4d4c8
|
Fix the real root cause, files not containing a banner.
|
2017-07-17 17:11:05 +01:00 |
|
|
Mike Auty
|
9b9792f3e2
|
Ensure we save the results of checking for non-existant files.
|
2017-07-17 17:06:52 +01:00 |
|
|
Mike Auty
|
5ca4f8e788
|
Use a central bit of code to do the load and unload of cached linux banners.
|
2017-07-17 16:38:25 +01:00 |
|
|
Mike Auty
|
f6a55876d0
|
Add in check to avoid unsightly exceptions.
|
2017-07-17 16:19:36 +01:00 |
|
|
Mike Auty
|
8b95480e88
|
Write the cached linuxbanners after each one so that cancellations don't require re-runs.
|
2017-07-16 22:59:01 +01:00 |
|
|
Mike Auty
|
b68932a7bc
|
Improve the linux DTB finding code.
|
2017-07-16 18:05:19 +01:00 |
|
|
Mike Auty
|
d0b1177c31
|
Add in the linux signature scanner.
|
2017-07-16 18:05:08 +01:00 |
|
|
Mike Auty
|
b099822ce2
|
Refactor requirement finding recursion since we use it a lot.
|
2017-07-16 18:04:22 +01:00 |
|
|
Mike Auty
|
a5e8d98a9c
|
Refactor the location of the linux banner cache.
|
2017-07-13 01:31:19 +01:00 |
|
|
Mike Auty
|
2453b7f180
|
Add a little information to the log to see when the cache is being built.
|
2017-07-10 01:24:52 +01:00 |
|
|
Mike Auty
|
d1cdf805df
|
Update the comments slightly.
|
2017-07-10 01:20:01 +01:00 |
|
|
Mike Auty
|
0811bdaa1a
|
Add in initial version of linux banner cache mechanism.
|
2017-07-10 01:17:09 +01:00 |
|
|
Mike Auty
|
d0ebeab253
|
Merge branch 'master' of github.com:volatilityfoundation/volatility3
|
2017-06-05 23:01:34 +01:00 |
|
|
Mike Auty
|
5dedf00f64
|
Update the linux automagic based on the VMCOREINFO structure.
|
2017-06-05 23:01:22 +01:00 |
|
|
Mike Auty
|
9a2bfe7c92
|
Remove unused variable.
|
2017-06-03 17:44:59 +01:00 |
|
|
Mike Auty
|
fc325f8324
|
Ensure the pdb scanning heuristic works with 32-bit systems as well as 64-bit ones.
|
2017-06-01 23:52:30 +01:00 |
|
|
Mike Auty
|
904a5b18a3
|
Try to bomb out of the NlpDtbFinder if the space already has a dtb.
|
2017-06-01 01:00:49 +01:00 |
|
|
Mike Auty
|
bcfc40acfe
|
Fix egregious typo. 5:S
|
2017-06-01 00:56:40 +01:00 |
|
|
Mike Auty
|
17a3f1630c
|
Add back in the masking, since it is important if maxmium_address is ever not 1 less than a power of 2.
|
2017-05-10 17:37:38 +01:00 |
|
|
Mike Auty
|
a05a470347
|
Fix up some complete and utter daftness, tactfully pointed out by npetroni.
|
2017-05-10 17:30:45 +01:00 |
|
|
Mike Auty
|
4065cfa090
|
Add in first draft of Linux identification stacker.
|
2017-05-06 14:09:49 +01:00 |
|
|
Mike Auty
|
16b1aca56b
|
Make the WintelHelper documentation accurate again.
|
2017-05-06 10:56:21 +01:00 |
|
|
Mike Auty
|
fe04c423ab
|
Remove left-over debugging features that slowed down the NLP dtb finder.
|
2017-05-02 14:51:50 +01:00 |
|
|
Mike Auty
|
d579f7f583
|
Add in a condensed version of Nick Petroni's DTB finder/stacker code.
|
2017-05-01 16:11:00 +01:00 |
|
|
Mike Auty
|
6e9791deb0
|
Add some more safety checks (to get pycharm off my back) and ensure we don't go round in circles.
|
2017-05-01 15:59:24 +01:00 |
|
|
Mike Auty
|
7e1965715d
|
Ensure the pdbscanner can operate when not handed an appropriate intel layer.
|
2017-05-01 14:38:47 +01:00 |
|
|
Mike Auty
|
44d8af70e0
|
Ensure we don't run the DTB finder twice.
|
2017-05-01 14:34:52 +01:00 |
|
|
Mike Auty
|
e182e44815
|
Remove all hardcoded PAGE_SIZE variables, and expose more Intel variables.
|
2017-04-30 22:09:26 +01:00 |
|
|
Mike Auty
|
ff41d4e5b0
|
Improve config.json handling, making single_location optional but bypasses the stacker automagic.
|
2017-04-21 00:53:08 +01:00 |
|
|
Mike Auty
|
b1c561b655
|
Ensure standard name for JSON files is used throughout the code (ISF).
|
2017-03-24 00:32:29 +00:00 |
|