ikelos and GitHub
3e2d831be3
Merge pull request #1890 from volatilityfoundation/issues/registry-plugin-expiry-date
...
Update Registry plugin expiry date
2025-11-09 17:56:53 +00:00
Mike Auty
46c508fff2
Bump removal of plugins by a year to ensure suitable time for transition
2025-10-16 20:29:02 +01:00
Mike Auty
841b2b6435
Ruff fixes that black agrees with
2025-09-29 23:04:01 +01:00
SolitudePy
215ba1dfaa
Plugins: categorize ldrmodules as a malware plugin
2025-06-13 17:42:17 +03:00
ikelos and GitHub
470c53c5f7
Merge branch 'develop' into check_creds_malware
2025-06-11 22:21:59 +01:00
ikelos and GitHub
76db04c494
Merge pull request #1807 from volatilityfoundation/bugfix/windows_thrdscan_tuple_unpacking
...
Windows Thrdscan: Fix broken tuple unpacking
2025-06-11 14:06:43 +01:00
ikelos and GitHub
58f441186c
Merge pull request #1850 from SolitudePy/malware_plugins_category
...
Malware categorization: linux.tty_check, linux.netfilter, linux.modxview
2025-06-10 21:20:12 +01:00
ikelos and GitHub
43ed10a4f8
Merge pull request #1846 from SolitudePy/linux_malware_plugins
...
Malware categorization: linux.malfind & linux.keyboard_notifiers
2025-06-10 21:07:42 +01:00
ikelos and GitHub
58e41d754a
Merge pull request #1845 from SolitudePy/categorize_linux_malware
...
Malware categorization: linux.check_afinfo & linux.hidden_modules
2025-06-10 21:05:41 +01:00
ikelos and GitHub
9596893f1b
Merge pull request #1844 from SolitudePy/check_syscall_malware
...
Malware categorization: linux.check_syscall
2025-06-10 21:02:34 +01:00
ikelos and GitHub
e06910c763
Merge pull request #1843 from SolitudePy/check_modules_malware
...
Malware categorization: linux.check_modules
2025-06-10 21:00:02 +01:00
SolitudePy
8040c049e0
Tests: change class name for tty_check
2025-06-10 20:30:05 +03:00
SolitudePy
e3877f68ec
Plugins: categorize linux.tty_check as a malware plugin
2025-06-10 19:37:57 +03:00
SolitudePy
77801e4cb0
Plugins: categorize linux.netfilter as a malware plugin
2025-06-10 19:22:12 +03:00
SolitudePy
a06d59bc52
Plugins: categorize linux.malfind as a malware plugin
2025-06-07 22:58:46 +03:00
SolitudePy
faf7d781be
Plugins: categorize linux.keyboard_notifiers as a malware plugin
2025-06-07 22:55:29 +03:00
SolitudePy
1d2b78976a
Plugins: categorize linux.hidden_modules as a malware plugin
2025-06-07 19:54:44 +03:00
SolitudePy
962665b412
Plugins: categorize linux.check_afinfo as a malware plugin + test fix
2025-06-07 19:44:50 +03:00
SolitudePy
70514396b3
linux.malware.check_syscall - fix test
2025-06-07 19:35:26 +03:00
SolitudePy
4b279f9633
linux.malware.check_modules - fix test
2025-06-07 19:30:04 +03:00
SolitudePy
4bc1bb818d
linux.malware.check_idt - fix doc & test deps
2025-06-07 19:23:13 +03:00
SolitudePy
85a5eb5d41
linux.malware.check_creds - fix deps in: test, doc
2025-06-07 18:42:42 +03:00
David McDonald
90a3829ee7
Windows Timeliner: Add basic test
...
This is enough to ensure that the return code is nonzero and there was
some valid output.
2025-05-15 17:28:26 -05:00
David McDonald
2199375dd5
Tests: Add symlinkscan specific test
2025-04-15 10:49:43 -05:00
David McDonald
32e9cee6dd
Tests: Add Symlinkscan generic test
...
This should be enough to prevent serious regressions that break all
output.
2025-04-15 10:49:43 -05:00
David McDonald
5befbf8629
Tests: Fix MFTScan testdata
...
These test values needed updating now that the `LayerData` type is used
and presents the data a little differently than before.
2025-04-02 14:08:18 -05:00
David McDonald
0b1bbb87ee
Windows Tests: Update userassist JSON output
...
The new layer data type renders the output a little differently, and the
plugin also seems to render 'N/A' for a missing value where previously
it was an empty string.
2025-04-02 09:36:07 -05:00
Abyss Watcher
dca182dc72
trigger tests
2025-03-26 15:59:35 +01:00
Abyss Watcher
b80a34110e
adjust thrdscan
2025-03-26 14:41:05 +01:00
Abyss Watcher
d70d8820a9
use winxp against scanner plugins (performances)
2025-03-25 11:41:28 +01:00
Abyss Watcher
951d1f6c48
fix pstree data test name
2025-03-12 16:55:20 +01:00
Abyss Watcher
cd2d396c9e
tmp commit to resolve pstree case sensitive filename
2025-03-12 16:54:49 +01:00
Abyss Watcher
c4054b4122
correct pstree json name
2025-03-12 16:51:14 +01:00
Abyss Watcher
489265e86c
make modules test specific
2025-03-12 16:28:19 +01:00
Abyss Watcher
d37f7b98f5
first windows testing enhancement iteration
2025-03-12 16:22:54 +01:00
Abyss Watcher
a539047516
correctly order volshell args
2025-03-12 16:19:08 +01:00
Abyss Watcher
7b0628d9c1
windows testing data
2025-03-12 15:59:07 +01:00
Abyss Watcher
8c1e9f0534
change args order to improve debugging ease
2025-03-05 15:12:02 +01:00
Abyss Watcher
a162fceed4
migrate windows and linux tests to dedicated files
2025-03-04 16:54:11 +01:00
Arthur Deierlein
f6c852c478
format with black
2024-12-17 22:55:39 +01:00
Arthur Deierlein
a63ea662f4
apply unsafe fixes (ruff check --unsafe-fixes --fix)
2024-12-17 22:55:38 +01:00
David McDonald
0413cc5e26
Windows: Scheduled tasks - code review fixes
2024-10-25 12:56:18 -05:00
