Commit Graph

Select branches

Hide Pull Requests

1446-pstreepy-has-broken-types-and-pid-handling

1775-symlinkscan-needs-to-scan-paged-memory

add_lkm_load_parameters

arm64-support

blackhat_2024

bugfix/missing_modules

bugfix/module_kset_invalid_addr_exc

bugfix/volshell_dt_traceback

cached_files_exception_handling

develop

development/plugin_module_stubs

devicetree_traversal_and_offsets

dgmcdona/filescan_physical_offsets

dgmcdona/package_data

dgmcdona/windows_timers_raw_dpc_offset

docker

driver_signing_enforcement

feature/add-zstd-support

feature/better-config-automagic

feature/better-page-faulting

feature/column-select

feature/data-renderer

feature/disable-caching

feature/disable-caching-try2

feature/eve-string-speedup

feature/linux-utilities-split

feature/module-requirements

feature/pdbconv-cplusplus-vs19

feature/pyinstaller-artifact

feature/scan-one-layer-deep

feature/shtab

feature/use-less-memory

feature/vmsn

feature/volshell-breakpoints

feature/volshell-unicorn-support

feature/warn-on-bad-dwarf2json-version

feature/writecrashdump-plugin

fix_devicetree_device_offsets

fix_get_net_namespace_id

fix_kallsyms_smear_handling

freebsd-pslist

hotfix/v2.26.1

inodepages/memory_usage

intel-5level-paging

issue_1481_driver_objects

issue_197_windows_dumpfiles_debug_parent

issue_574_pstree_smear

issues/build-stable-exe-fix

issues/cache-locking

issues/fix-exe-build

issues/issue1255

issues/issue1255-2

issues/issue1367

issues/issue1874

issues/issue1958

issues/registry-plugin-expiry-date

issues/ruff-formatter

linux_list_tasks_smear

mac_list_files_smear

mac_map_iteration_smear

malfind_warning

mountinfo_exception_handling

november_training

npetroni/feature/pyinstaller-artifact

october_training

orphan_kernel_threads

pe_symbols

pedump

quickscanning

renderer-options

renderer-options2

revert-1736-feature/use-less-memory

safe-output

smeared_linux_processes

stable

threadpool

training

update_gui_pool_types

update_netfilter

vma_enumeration_issues

#1

#10

#100

#1000

#1000

#1001

#1003

#1004

#1008

#1010

#1011

#1012

#1012

#1015

#1016

#1018

#1020

#1023

#1024

#1025

#1027

#1028

#1029

#1034

#1035

#1036

#1036

#1037

#1038

#1039

#1043

#1043

#1044

#1048

#1049

#105

#1050

#1051

#1054

#1057

#106

#1061

#1062

#1063

#1064

#1068

#1069

#1070

#1071

#1072

#1072

#1073

#1073

#1075

#1076

#1077

#1079

#1080

#1082

#1082

#1083

#1084

#1085

#1085

#1088

#1088

#1091

#1092

#1093

#1094

#1096

#1098

#1099

#11

#11

#110

#1100

#1101

#1103

#1104

#1106

#1107

#1108

#1109

#1110

#1111

#1113

#1114

#1115

#1115

#1116

#1116

#1118

#1118

#112

#1120

#1122

#113

#1130

#1131

#1137

#114

#1140

#1141

#1143

#1144

#1145

#1147

#1149

#115

#1150

#1151

#1156

#1157

#116

#1160

#1164

#1165

#1167

#1168

#1169

#117

#1170

#1171

#1172

#1173

#1174

#1176

#1177

#1178

#1182

#1182

#1183

#1186

#1190

#1191

#1192

#1193

#1197

#1198

#1199

#12

#1201

#1202

#1204

#1205

#1206

#1207

#1208

#1209

#121

#1212

#1213

#1214

#1215

#1217

#1219

#122

#1221

#1222

#1224

#1225

#1227

#1228

#1229

#123

#1230

#1232

#1233

#1234

#1236

#1237

#1238

#1239

#1239

#124

#1242

#1243

#1243

#1245

#1247

#1249

#1250

#1253

#1254

#1258

#1259

#126

#1260

#1261

#1262

#1263

#1264

#1266

#1268

#127

#1270

#1271

#1272

#1273

#1274

#1276

#1277

#1278

#1279

#1281

#1283

#1284

#1285

#1287

#1288

#1289

#1290

#1293

#1295

#1297

#1299

#13

#1300

#1301

#1304

#1305

#1306

#1307

#1308

#1310

#1311

#1314

#1315

#1316

#1316

#1317

#1318

#132

#1320

#1321

#1321

#1323

#1326

#1327

#1328

#1329

#133

#1330

#1332

#1335

#1337

#1338

#1339

#1340

#1341

#1342

#1343

#1344

#1345

#1346

#1347

#1348

#1350

#1352

#1353

#1354

#1356

#1357

#1359

#1362

#1363

#1364

#1365

#1368

#1369

#137

#1370

#1371

#1375

#1375

#1376

#1377

#1378

#1378

#1381

#1382

#1384

#1386

#1388

#1389

#1390

#1391

#1393

#1394

#1395

#1396

#1397

#1398

#1399

#14

#140

#1402

#1403

#1405

#1406

#1407

#141

#1412

#1414

#1415

#1416

#1416

#1420

#1421

#1422

#1423

#1424

#1425

#1426

#1427

#1428

#1429

#143

#1430

#1431

#1432

#1433

#1440

#1448

#1449

#1449

#145

#1450

#1451

#1452

#1453

#1454

#1455

#1457

#1459

#146

#1460

#1461

#1462

#1463

#1464

#1465

#1466

#1467

#147

#148

#1485

#1486

#1488

#1489

#149

#1490

#1491

#1492

#1494

#1495

#1497

#1498

#1499

#15

#150

#1500

#1501

#1502

#1503

#1506

#1508

#1509

#1510

#1512

#1513

#1514

#1515

#1516

#1517

#1518

#152

#1521

#1528

#1529

#153

#153

#1530

#1531

#1532

#1533

#1536

#1537

#1538

#1539

#154

#1540

#1541

#1542

#1543

#1544

#1545

#1548

#1549

#1550

#1551

#1553

#1555

#1556

#1557

#1558

#1559

#1560

#1561

#1562

#1563

#1564

#1566

#1567

#1568

#1570

#1571

#1572

#1576

#1578

#1579

#1581

#1582

#1584

#1585

#1586

#1587

#159

#1590

#1591

#1592

#1593

#1595

#1596

#1598

#1599

#1601

#1606

#1607

#1608

#1609

#1610

#1611

#1613

#1615

#1616

#1617

#1619

#162

#1620

#1621

#1622

#1623

#1624

#1625

#1626

#1627

#1628

#1630

#1631

#1632

#1634

#1635

#164

#1640

#1641

#165

#1652

#1653

#1654

#1655

#1656

#1657

#1658

#1659

#166

#1660

#1661

#1663

#1664

#1665

#1666

#1667

#1668

#1669

#167

#1670

#1671

#1672

#1673

#1674

#1675

#1676

#1677

#1678

#1679

#168

#1680

#1681

#1682

#1683

#1683

#1684

#1686

#1689

#169

#1690

#1691

#1692

#1693

#1694

#1695

#1696

#1697

#1698

#170

#1700

#1701

#1702

#1703

#1704

#1706

#1707

#1708

#1709

#171

#1710

#1711

#1712

#1713

#1715

#1716

#1717

#1718

#1719

#172

#1720

#1721

#1722

#1723

#1724

#1726

#1727

#1728

#1729

#173

#1730

#1731

#1733

#1734

#1735

#1736

#1737

#1738

#1739

#174

#1740

#1742

#1743

#1746

#1747

#1748

#1749

#175

#1750

#1751

#1752

#1753

#1755

#1757

#1758

#176

#1760

#1763

#1764

#1765

#1766

#1767

#1768

#1769

#1770

#1771

#1772

#1773

#1776

#1777

#1778

#1779

#1781

#1783

#1786

#1787

#1788

#1788

#1789

#1791

#1792

#1793

#1794

#1795

#1796

#1798

#1799

#180

#1800

#1801

#1802

#1804

#1804

#1807

#1810

#1811

#1812

#1813

#1814

#1815

#1816

#1816

#1818

#1818

#1821

#1822

#1823

#1824

#1825

#1826

#1827

#1828

#1829

#183

#1830

#1831

#1832

#1833

#1834

#1835

#1837

#1838

#1839

#1840

#1841

#1842

#1843

#1844

#1845

#1846

#1849

#185

#1850

#1851

#1852

#1853

#1854

#1856

#1859

#1859

#1861

#1863

#1866

#1868

#187

#1871

#1873

#1877

#1878

#188

#1880

#1882

#1882

#1884

#1888

#189

#1890

#1894

#1894

#1895

#1895

#1896

#1896

#1897

#1897

#1898

#1898

#19

#190

#1900

#1900

#1901

#1901

#1902

#1903

#1903

#1904

#1904

#1905

#1905

#1906

#1906

#1907

#1907

#1908

#1909

#1909

#1910

#1910

#1911

#1911

#1912

#1912

#1913

#1913

#1914

#1914

#1915

#1915

#1917

#1921

#1924

#1926

#1927

#1929

#1932

#1933

#1933

#1935

#1937

#1939

#1939

#1941

#1942

#1946

#1948

#1949

#1949

#195

#1950

#1950

#1953

#1955

#1956

#1957

#1957

#1959

#1959

#1960

#1961

#1962

#1963

#1964

#1964

#1966

#1967

#1967

#1968

#1968

#1969

#1969

#1971

#1972

#1974

#1974

#1976

#1976

#1977

#1980

#1981

#1982

#1982

#1983

#1984

#1984

#1986

#1986

#1988

#1989

#1989

#199

#1990

#1990

#1991

#1991

#1992

#1993

#1994

#1994

#1995

#1995

#1996

#1996

#1997

#1997

#1998

#1999

#1999

#2

#20

#2000

#2000

#2001

#2003

#2005

#2007

#2007

#2008

#2008

#2009

#2010

#2010

#2011

#2011

#2012

#2012

#2013

#2014

#2015

#2016

#2017

#2018

#2018

#2019

#2019

#2020

#2020

#2022

#2023

#2023

#2024

#2024

#2025

#2025

#207

#212

#213

#216

#220

#221

#223

#224

#226

#228

#229

#23

#230

#235

#236

#237

#238

#239

#24

#240

#243

#244

#245

#247

#248

#249

#25

#25

#251

#253

#254

#255

#256

#257

#258

#260

#261

#261

#262

#263

#265

#266

#267

#268

#269

#273

#275

#276

#277

#28

#28

#280

#282

#283

#284

#285

#286

#287

#288

#289

#29

#290

#292

#293

#294

#295

#296

#297

#298

#299

#3

#30

#30

#300

#301

#303

#305

#307

#309

#31

#311

#314

#319

#32

#321

#322

#323

#325

#326

#327

#328

#329

#33

#331

#334

#335

#336

#337

#338

#339

#34

#342

#343

#344

#345

#346

#347

#348

#349

#35

#350

#351

#352

#354

#355

#359

#36

#362

#363

#364

#37

#370

#378

#38

#380

#383

#388

#389

#392

#393

#394

#395

#396

#397

#4

#40

#401

#402

#403

#404

#405

#406

#407

#41

#410

#411

#414

#415

#416

#417

#418

#419

#42

#42

#421

#426

#428

#429

#43

#430

#435

#436

#438

#442

#443

#444

#445

#446

#448

#45

#450

#451

#452

#453

#454

#455

#458

#459

#46

#460

#461

#462

#465

#465

#466

#467

#468

#469

#47

#471

#472

#472

#475

#476

#477

#478

#479

#48

#480

#481

#482

#483

#484

#487

#491

#492

#496

#498

#499

#5

#50

#504

#507

#51

#510

#511

#513

#518

#518

#519

#52

#523

#526

#527

#53

#531

#533

#534

#535

#536

#537

#538

#54

#540

#543

#544

#545

#546

#548

#549

#55

#551

#554

#555

#557

#559

#56

#561

#563

#569

#57

#570

#572

#575

#579

#58

#580

#581

#581

#582

#584

#586

#593

#594

#596

#597

#6

#60

#600

#601

#603

#605

#606

#606

#609

#610

#611

#612

#613

#614

#615

#619

#622

#623

#624

#625

#626

#628

#63

#630

#633

#635

#64

#641

#643

#644

#645

#647

#65

#650

#650

#651

#653

#654

#655

#656

#656

#657

#658

#659

#66

#660

#662

#663

#664

#666

#667

#669

#67

#670

#673

#675

#676

#677

#68

#682

#683

#684

#685

#689

#69

#690

#693

#694

#695

#698

#7

#70

#700

#702

#705

#706

#708

#71

#711

#714

#718

#718

#72

#720

#721

#722

#724

#725

#726

#727

#728

#729

#73

#730

#731

#732

#733

#734

#735

#736

#737

#738

#74

#741

#742

#743

#745

#749

#75

#750

#751

#752

#753

#753

#754

#755

#758

#76

#761

#761

#766

#768

#769

#769

#77

#771

#772

#774

#775

#776

#777

#778

#778

#78

#782

#783

#784

#785

#786

#788

#789

#79

#790

#791

#793

#795

#796

#797

#8

#80

#802

#805

#806

#808

#809

#81

#810

#813

#814

#817

#818

#819

#82

#821

#822

#823

#824

#825

#826

#827

#828

#83

#834

#835

#837

#838

#839

#84

#840

#841

#845

#846

#849

#85

#850

#852

#855

#857

#858

#86

#869

#87

#873

#877

#879

#88

#881

#882

#884

#885

#886

#887

#888

#89

#891

#892

#892

#894

#898

#899

#9

#9

#90

#900

#902

#903

#904

#905

#907

#913

#915

#916

#92

#920

#921

#928

#933

#934

#935

#936

#938

#941

#942

#945

#947

#948

#949

#951

#952

#957

#960

#962

#968

#968

#970

#975

#976

#976

#978

#984

#987

#988

#995

#996

#997

#999

dev-prerelease

v1.0.0

v1.0.0-beta.1

v1.0.1

v2.0.0

v2.0.1

v2.11.0

v2.26.0

v2.26.2

v2.27.0

v2.28.0

v2.4.0

v2.4.1

v2.5.0

v2.5.2

v2.7.0

v2.8.0

Mono Color

• f00b596954 Merge pull request #1262 from volatilityfoundation/direct_indirect_system_calls ikelosandGitHub 2024-12-10 23:54:02 +00:00
• fc33fd9127 Slightly modify documentation j-t-1andGitHub 2024-12-10 17:14:59 +00:00
• 39cb75acca Slightly modify documentation j-t-1andGitHub 2024-12-10 17:02:48 +00:00
• 0b2f4fdeb7 Remove redundant part of if statement j-t-1andGitHub 2024-12-10 12:26:39 +00:00
• faa6cab797 Remove redundant part of if statement j-t-1andGitHub 2024-12-10 12:16:42 +00:00
• 4bccf11629 Remove redundant part of if statement j-t-1andGitHub 2024-12-10 11:31:16 +00:00
• fdd49d0921 Slightly modify documentation j-t-1andGitHub 2024-12-10 10:11:26 +00:00
• 1cde9ae06e Slightly modify volshell.rst j-t-1andGitHub 2024-12-10 09:46:28 +00:00
• a07ee5a0d5 fix(Windows: Handles): Unreliable SAR value on 24H2 David McDonald 2024-12-09 17:49:22 -06:00
• b8298a345f Merge pull request #1169 from volatilityfoundation/mftscan_updates_resident_data_plugin ikelosandGitHub 2024-12-09 20:24:27 +00:00
• 13eae6c3df Add capstone to test system requirements. Allow lazy type checks Andrew Case 2024-12-09 13:19:06 -06:00
• af65d7e32d Address feedback Andrew Case 2024-10-18 11:33:38 -05:00
• e7fca5a83f Update year Andrew Case 2024-09-16 09:38:15 -05:00
• 262c7f1aa7 Make VAD API public as intended Andrew Case 2024-09-14 15:22:50 -05:00
• fce2125a8e Make VAD API public as intended Andrew Case 2024-09-14 15:03:51 -05:00
• 9f8e39efa0 Fix formatting problem between black versions Andrew Case 2024-09-12 18:58:16 -05:00
• e66a3e929b Add detection of direct and indirect system calls Andrew Case 2024-09-12 18:51:47 -05:00
• ec550232ac Merge pull request #1388 from eve-mem/issue_1387 ikelosandGitHub 2024-12-09 18:58:40 +00:00
• 582feccf93 Address feedback Andrew Case 2024-12-09 12:56:07 -06:00
• b86e839718 Interfaces: change allow list for filenames to ensure they work safely on windows. Fixes issue #1387 eve 2024-12-09 18:30:19 +00:00
• 2ae723513a Merge pull request #1386 from j-t-1/doc ikelosandGitHub 2024-12-07 17:19:38 +00:00
• 45f9064623 Cosmetic changes to documentation j-t-1andGitHub 2024-12-07 17:11:49 +00:00
• e165c78ba7 Cosmetic changes to documentation j-t-1andGitHub 2024-12-07 16:37:39 +00:00
• 04d2554442 Cosmetic changes to documentation j-t-1andGitHub 2024-12-07 16:36:18 +00:00
• 97698cc5ed Cosmetic changes to documentation j-t-1andGitHub 2024-12-07 16:29:58 +00:00
• 9ebc0bd90d Cosmetic changes to documentation j-t-1andGitHub 2024-12-07 16:20:45 +00:00
• d29c23e922 Windows: Protect against missing _MM_SESSION_SPACE symbol Mike Auty 2024-12-07 15:51:35 +00:00
• 78e3ee26a0 Merge pull request #1384 from j-t-1/doc ikelosandGitHub 2024-12-07 01:04:22 +00:00
• 93a47e811b Small documentation changes j-t-1andGitHub 2024-12-06 21:52:51 +00:00
• 846403115a Small documention changes j-t-1andGitHub 2024-12-06 16:00:03 +00:00
• e2cdbdc2bf Merge pull request #1382 from j-t-1/PYO ikelosandGitHub 2024-12-06 00:26:21 +00:00
• f11ef06c27 PEP 488 – Elimination of PYO files j-t-1andGitHub 2024-12-05 21:30:20 +00:00
• 5acf8858d9 PEP 488 – Elimination of PYO files j-t-1andGitHub 2024-12-05 18:31:04 +00:00
• 3ff304ceed Layers: Fix intel bug introduced in commit 73d4f2f Mike Auty 2024-12-03 19:58:19 +00:00
• 20f15d3591 modular physical_layer access Abyss Watcher 2024-12-02 11:34:49 +01:00
• e4c552050c Merge pull request #1377 from gcmoreira/pytest_image_autoselection_improvement ikelosandGitHub 2024-12-01 11:06:46 +00:00
• fbc72d35b9 Merge pull request #1368 from gcmoreira/linux_pslist_dependencies_fix_1366 ikelosandGitHub 2024-12-01 11:00:12 +00:00
• 4d628c839b Merge pull request #1376 from gcmoreira/fix_pretty_renderer_hex_bytes_as_text ikelosandGitHub 2024-12-01 10:52:00 +00:00
• 535ce3a22a testing: Enable automatic selection of the OS image based on the test and filename prefix, addressing an issue in the development environment. Gustavo Moreira 2024-12-01 19:34:35 +11:00
• c19a54cbd9 testcases: Minor cleanup: Renaming and reordering functions to align with the Linux/Windows test cases Gustavo Moreira 2024-12-01 14:08:53 +11:00
• 7ae27c4eaa Merge branch 'develop' into linux_pslist_dependencies_fix_1366 Gustavo Moreira 2024-12-01 13:24:53 +11:00
• 3c20e46902 renderers: Fix HexBytes formatter to apply padding also at the end of the string, ensuring proper output alignment when the pretty renderer justifies each line to the right Gustavo Moreira 2024-12-01 12:36:35 +11:00
• 9222f4915a Merge pull request #1371 from volatilityfoundation/issues/use-yara-scanner-over-handling-yara-directly ikelosandGitHub 2024-12-01 01:26:04 +00:00
• d404747de5 Tests: Add in vadyarascan tests Mike Auty 2024-12-01 00:04:46 +00:00
• 90c048fe02 Core: Actually return the right values for the iterator feature/scan-one-layer-deep Mike Auty 2024-11-30 14:42:56 +00:00
• 744adfeda0 Core: Improve the scanning, but it's still not working yet Mike Auty 2024-11-30 14:18:58 +00:00
• 006d3a2043 Layers: Fix up totally off values Mike Auty 2024-11-30 12:42:58 +00:00
• 58a8b2da9f Core: Scanning only splits up the layer Mike Auty 2024-11-29 17:03:58 +00:00
• 2dc1686289 Windows: Protect the SERICE_RECORD is_valid function a little more Mike Auty 2024-11-30 13:36:14 +00:00
• 56f6ef0add Include a test developed by @gcmoreira and @eve-mem Mike Auty 2024-11-30 11:52:16 +00:00
• 3df385369c Ensure the VAD/VMA gets scanned in a single block Mike Auty 2024-11-30 11:28:09 +00:00
• 48d9929591 Linux: Fix-ups for both and also yara-x specific fixes issues/issue1367 Mike Auty 2024-11-29 15:11:07 +00:00
• ba98b088cb Merge pull request #1369 from gcmoreira/logging_producer_information ikelosandGitHub 2024-11-29 10:27:32 +00:00
• 393db1050f Windows: protect again mz_offsets being None Mike Auty 2024-11-29 08:51:06 +00:00
• 0030129ff8 Make suggested fixes to reduce loops and ignore insane sections Mike Auty 2024-11-29 08:43:04 +00:00
• 77778ee6f6 Linux/Mac: ISF metadata: Rename s/DWARF/POSIX/, as I'm not happy with the generic name. BTF source could potentially generate the same keys Gustavo Moreira 2024-11-29 19:35:18 +11:00
• b8023f0c97 Linux/Mac: Address code review suggestions Gustavo Moreira 2024-11-29 19:05:27 +11:00
• bec6bc6594 Fix up vmayarascan and vadyarascan to use yarascan properly Mike Auty 2024-11-28 16:59:52 +00:00
• 126ac9d77a Linux: Differentiate yara/yara-x in vmayarascan Mike Auty 2024-11-28 12:34:48 +00:00
• 3748cb89b8 Windows: Improve debugging output for pdbscan Mike Auty 2024-11-28 10:22:45 +00:00
• 8ecd7e2ddd Linux/Mac: Log producer information Gustavo Moreira 2024-11-28 15:17:22 +11:00
• aaeec80fdf linux: library_list testcase: Optimize testing performance by limiting the number of processes to just one. This change will reduce execution time and speed up the test Gustavo Moreira 2024-11-28 13:53:11 +11:00
• 9048cd1ab8 linux: boottime: Minor, removed unnecessary blank line Gustavo Moreira 2024-11-28 13:47:03 +11:00
• fb4ab9d477 linux: test cases: remove unused variables Gustavo Moreira 2024-11-28 13:45:26 +11:00
• 63ac0abe64 linux: Add 15 new test cases for plugins dependent on pslist Gustavo Moreira 2024-11-28 13:25:08 +11:00
• fa06064635 linux plugins: Update pslist major version and its 18 dependent plugins Gustavo Moreira 2024-11-28 13:16:33 +11:00
• 97534f02de linux: sockstat: It should import and verify the pslist version directly, instead of relying on lsof Gustavo Moreira 2024-11-28 12:19:56 +11:00
• 7c559c53f4 test_cases: underscore unused variables Gustavo Moreira 2024-11-28 12:11:14 +11:00
• 0233193c9d Merge pull request #1335 from gcmoreira/linux_prot_none_L1TF_and_layer_addr_translation_fixes ikelosandGitHub 2024-11-27 10:31:18 +00:00
• eff2a529c8 Linux: intel: Remove the bitwise zero complement to simplify the protnone mask calculation Gustavo Moreira 2024-11-27 18:10:14 +11:00
• 641e008caf Linux: intel: The non-present mapping shouldn't be inverted Gustavo Moreira 2024-11-27 15:06:33 +11:00
• bdd3e1e48e Merge pull request #1365 from volatilityfoundation/issues/pr1343 ikelosandGitHub 2024-11-24 09:58:04 +00:00
• 523a6e92fc CLI: Apply black to recent changes Mike Auty 2024-11-24 09:33:30 +00:00
• 1a0d1a238d CLI: Partial changes by @lesander contributed in #1343 lesanderandMike Auty 2024-11-24 09:28:41 +00:00
• 47baec8bba Merge pull request #1363 from volatilityfoundation/issues/fix-linuxstacker-to-use-cache-interface ikelosandGitHub 2024-11-24 09:19:02 +00:00
• 15f2011eed Merge pull request #1342 from lesander/improvement/remove-requirements-and-setup ikelosandGitHub 2024-11-23 18:58:21 +00:00
• 4bc6e1001d Windows: Improve logging of slowscan to show possible PDB entries Mike Auty 2024-11-22 19:45:15 +00:00
• 4c55c0fe43 Merge pull request #1353 from eve-mem/regex_plugins ikelosandGitHub 2024-11-22 12:26:34 +00:00
• 76ecfc0883 Core: Add in generic cache-manager chooser function Mike Auty 2024-11-22 12:16:14 +00:00
• bbd2f9bc37 linux: intel VMCoreInfo: Fix bug introduced in last commit reverting the layer metadata dict Gustavo Moreira 2024-11-22 22:40:53 +11:00
• fb101de6fc Merge pull request #1362 from c0rydoras/fix/cache-dir ikelosandGitHub 2024-11-22 11:32:57 +00:00
• a2b96c0dc0 fix: dont use / for compat Arthur Deierlein 2024-11-22 11:46:59 +01:00
• b93d5b7c13 update docs Arthur Deierlein 2024-11-22 11:23:53 +01:00
• 1abb4cc881 comply with xdg base directory spec by using XDG_CACHE_HOME if its set Arthur Deierlein 2024-11-22 11:13:21 +01:00
• 8785899080 Only remove a file URL with no host and a non-existant path Mike Auty 2024-11-21 22:51:59 +00:00
• 54cca5f1f8 Core: Remove files from cache only if they don't exist Mike Auty 2024-09-09 09:53:58 +01:00
• 41d2e924d1 linux: intel VMCoreInfo: Revert changes associated with adding vmcoreinfo dict to the layer metadata Gustavo Moreira 2024-11-20 11:47:37 +11:00
• 9f6d194980 linux: intel VMCoreInfo: The _direct_metadata class attribute needs to be modified; otherwise, it will only exist within the instance namespace. Gustavo Moreira 2024-11-19 12:47:56 +11:00
• 96f5fdae2f linux: intel VMCoreInfo: Add the vmcoreinfo to the layer metadata Gustavo Moreira 2024-11-19 11:25:52 +11:00
• ac482e3e13 Merge pull request #1359 from eve-mem/windows_svcscan_remove_yara_dep ikelosandGitHub 2024-11-18 22:29:15 +00:00
• 1ba5b04b7d Windows: Remove dep on vadyarascan from svcscan plugin eve 2024-11-18 21:20:04 +00:00
• e374ca9647 Windows.vadregexscan: update imports, revert vadyarascan changes eve 2024-11-18 21:15:06 +00:00
• 07701fc4cf windows.vadregexscan: remove dependency on vadyarascan eve 2024-11-18 18:32:51 +00:00
• 13729ac25f linux: VMCoreInfo API: AARCH64 uses NUMBER() with hex values. Fortunately, includes the 0x prefix, allowing the parser to still handle these cases correctly Gustavo Moreira 2024-11-18 18:18:14 +11:00
• d80ef55325 linux: intel VMCoreInfo: Select the fastest scanner for each scenario Gustavo Moreira 2024-11-18 17:49:30 +11:00
• 6d366f16ee Windows.vadregexscan: update imports eve 2024-11-18 06:38:06 +00:00
• f2a2f8aa67 linux: intel VMCoreInfo: immediately abort processing the current VMCOREINFO if DTB is not found Gustavo Moreira 2024-11-18 17:00:00 +11:00
• 4a88a7450b linux: VMCoreInfo API: Integrate support for value parsing within the VMCoreInfo API Gustavo Moreira 2024-11-18 16:47:45 +11:00
• 4c0ddca796 linux: intel VMCoreInfo: BugFix. Return layer if both values are present Gustavo Moreira 2024-11-18 15:20:38 +11:00
• f192437a94 typo Abyss Watcher 2024-11-15 17:11:11 +01:00