ikelos and GitHub
cbc745d5a8
Merge pull request #936 from volatilityfoundation/release/v2.4.1
...
Release v2.4.1
```
New plugins:
linux.sockstat
linux.iomem
linux.psscan
linux.envars
windows.drivermodule
windows.vadwalk
Pid filtering for Windows pstree plugin
Minor fixes for Windows callbacks plugin
Minimum python version was increased to 3.7
Python-snappy dependency was replaced with ctypes to ease installation
Whole codebase was reformatted with black
Faster release cycle (targetting every 4 months)
```
2023-04-12 20:22:23 +01:00
Mike Auty
1b5a6b6267
Core: Bump the copyright year of the README
2023-04-12 19:58:53 +01:00
Mike Auty
b5ef7248ab
Linux: Fix psscan task native_layer
2023-03-11 15:25:31 +00:00
Mike Auty
cfec8e4b12
Core: Pointer is_readable should check the native layer
2023-03-11 15:25:14 +00:00
Mike Auty
85e86d45c5
Linux: fix black lint issues
2023-03-08 20:43:03 +00:00
ikelos and GitHub
97347efff3
Merge pull request #915 from 0xThiebaut/pstree
...
Add PID filtering to `windows.pstree`
2023-03-08 19:51:48 +00:00
ikelos and GitHub
cd2e07da27
Merge pull request #881 from eve-mem/linux_envars
...
add linux envars
2023-03-08 18:59:05 +00:00
ikelos and GitHub
f028b0a4dc
Merge pull request #894 from eve-mem/linux_iomem
...
add linux.iomem plugin based on vol2 plugin by atcuno
2023-03-08 18:58:35 +00:00
ikelos and GitHub
fff64b6071
Merge pull request #921 from eve-mem/linux_psscan
...
Fix Linux psscan
2023-03-08 18:56:16 +00:00
Eve
32db4c0e5f
Fix black linting for linux.psscan.
2023-03-08 14:08:44 +00:00
Eve
abfe104eb9
Fix linux.pscan to find memory layer to scan using kernel layers dependencies rather than hard coded value.
2023-03-08 14:02:13 +00:00
Eve
bdf57f0716
Add extra debug messages to linux.psscan when finding symbol locations
2023-03-08 13:44:08 +00:00
Eve
a34fb84976
Fix linux.psscan to use kernel offset when finding symbol location
2023-03-08 13:39:00 +00:00
Mike Auty
3791b21695
Layers: Fix new snappy implementation error
2023-03-06 00:13:47 +00:00
ikelos and GitHub
56b899e738
Merge pull request #913 from volatilityfoundation/feature/snappy-ctypes
...
Feature/snappy ctypes
2023-03-05 11:35:45 +00:00
Maxime THIEBAUT
588b096254
Add PID filtering to windows.pstree
2023-02-25 20:52:13 +01:00
Mike Auty
1770edf6fa
Automagic: Fix typo in cache stats
2023-02-22 17:24:12 +00:00
Mike Auty
ad3773d898
Automagic: Improve identified AVML CodeQL issues
2023-02-19 10:23:04 +00:00
Mike Auty
c7252e9707
Automagic: Handle snappy for windows.
2023-02-19 10:03:23 +00:00
Mike Auty
471b19b037
Layers: Use ctypes for snappy support
2023-02-18 21:15:43 +00:00
Mike Auty
4734a3d1f8
Automagic: Fix cache issue with missing files
2023-02-18 21:14:02 +00:00
ikelos and GitHub
4f028416a3
Merge pull request #907 from agearhe/patch-1
...
Update simple-plugin.rst
2023-02-10 08:03:05 +00:00
Ashley and GitHub
d6ebad8235
Update simple-plugin.rst
...
Very minor typo fix.
2023-02-09 21:19:11 -07:00
ikelos and GitHub
0245988fab
Merge pull request #882 from eve-mem/linux_psscan
...
add linux.psscan
2023-02-03 10:51:47 +00:00
Eve
9e5a98ca40
Update linux.psscan with black linting and version
2023-02-03 10:51:18 +00:00
Eve
e81935869a
Update linux.psscan to find kernel layer name correctly
2023-02-03 10:37:29 +00:00
Eve
4bb6d93e12
Update linux.psscan
2023-02-03 10:18:06 +00:00
ikelos and GitHub
78d75a7b33
Merge pull request #904 from paulkermann/bugfix/csv-escape
...
Add escapechar to csvwriter
2023-02-03 09:46:40 +00:00
Mike Auty
aac4c73528
Actions: Bump black checkout to Node16/wqv3
2023-02-03 09:22:30 +00:00
Mike Auty
43a17384c3
Core: Update to black 23.1.0 which removes many blank lines and parentheses
2023-02-03 00:35:49 +00:00
ikelos and GitHub
2a459266ba
Merge pull request #905 from volatilityfoundation/feature/canonical-helper
...
Add in the canonical helper functions for translating between volatility address ranges and intel canonical addresses
2023-02-03 00:29:07 +00:00
Eve
b375c6f71d
Update linux.iomem
2023-02-01 09:43:02 +00:00
Mike Auty
3297ba02e7
Core: Rather than scheduling it daily, only do it on commits
2023-01-29 12:46:06 +00:00
Mike Auty
c2a1afb0ba
Core: Update codeql action to only run once a week
2023-01-29 12:42:17 +00:00
Eve
1d4aa72c85
update linux.iomem with basic smear protection
2023-01-27 11:07:05 +00:00
Paul Kermann
728e8b608a
black reformat
2023-01-17 16:11:08 +02:00
Paul Kermann
e16887414e
add escapechar
2023-01-17 10:15:03 +02:00
ikelos and GitHub
91ec909b3c
Merge pull request #903 from paulkermann/fix/missing-import
...
Fix missing import
2023-01-16 11:08:05 +00:00
Paul Kermann
f036acdeb8
missing import
2023-01-16 13:02:20 +02:00
Mike Auty
4cafc982f4
Windows: Fix up callbacks typos and typing info
2023-01-16 10:47:09 +00:00
ikelos and GitHub
9f607d6903
Merge pull request #902 from paulkermann/bugfix/cmregisterscallbacks_smearing
...
Handle smearing in volatility callbacks plugin
2023-01-16 10:42:40 +00:00
Paul Kermann
5e33a98481
change default value to None
2023-01-16 12:39:08 +02:00
ikelos and GitHub
648fa78c95
Merge pull request #900 from paulkermann/improv/extra_logging_symbol_table_from_offset
...
Add debug message for symbol_table_from_offset
2023-01-16 10:18:19 +00:00
Paul Kermann
5aca49388e
fix smearing
2023-01-16 12:01:45 +02:00
Paul Kermann
bd291c43d5
added debug message
2023-01-16 10:15:36 +02:00
Mike Auty
1641a6e4c4
Windows: Fix up black issue with vadinfo
2023-01-12 19:58:51 +00:00
ikelos and GitHub
3cf47b9260
Merge pull request #835 from paulkermann/improv/vadinfo_containing_address
...
Added new containing address flag to vadinfo plugin
2023-01-12 19:05:20 +00:00
ikelos and GitHub
adbc33ceed
Merge branch 'develop' into improv/vadinfo_containing_address
2023-01-12 19:05:11 +00:00
Mike Auty
a1eeecf6de
Layers: Fix uncaught exception in Elf layer
2023-01-09 21:32:19 +00:00
Mike Auty
cd89e39ee0
Layers: Fix QEMU layer cutting off the last byte of the config
2023-01-06 22:10:50 +00:00
