Commit Graph

Select branches

Hide Pull Requests

1446-pstreepy-has-broken-types-and-pid-handling

1775-symlinkscan-needs-to-scan-paged-memory

add_lkm_load_parameters

arm64-support

blackhat_2024

bugfix/missing_modules

bugfix/module_kset_invalid_addr_exc

bugfix/volshell_dt_traceback

cached_files_exception_handling

develop

development/plugin_module_stubs

devicetree_traversal_and_offsets

dgmcdona/filescan_physical_offsets

dgmcdona/package_data

dgmcdona/windows_timers_raw_dpc_offset

docker

driver_signing_enforcement

feature/add-zstd-support

feature/better-config-automagic

feature/better-page-faulting

feature/column-select

feature/data-renderer

feature/disable-caching

feature/disable-caching-try2

feature/eve-string-speedup

feature/linux-utilities-split

feature/module-requirements

feature/pdbconv-cplusplus-vs19

feature/pyinstaller-artifact

feature/scan-one-layer-deep

feature/shtab

feature/use-less-memory

feature/vmsn

feature/volshell-breakpoints

feature/volshell-unicorn-support

feature/warn-on-bad-dwarf2json-version

feature/writecrashdump-plugin

fix_devicetree_device_offsets

fix_get_net_namespace_id

fix_kallsyms_smear_handling

freebsd-pslist

hotfix/v2.26.1

inodepages/memory_usage

intel-5level-paging

issue_1481_driver_objects

issue_197_windows_dumpfiles_debug_parent

issue_574_pstree_smear

issues/build-stable-exe-fix

issues/cache-locking

issues/fix-exe-build

issues/issue1255

issues/issue1255-2

issues/issue1367

issues/issue1874

issues/issue1958

issues/registry-plugin-expiry-date

issues/ruff-formatter

linux_list_tasks_smear

mac_list_files_smear

mac_map_iteration_smear

malfind_warning

mountinfo_exception_handling

november_training

npetroni/feature/pyinstaller-artifact

october_training

orphan_kernel_threads

pe_symbols

pedump

quickscanning

renderer-options

renderer-options2

revert-1736-feature/use-less-memory

safe-output

smeared_linux_processes

stable

threadpool

training

update_gui_pool_types

update_netfilter

vma_enumeration_issues

#1

#10

#100

#1000

#1000

#1001

#1003

#1004

#1008

#1010

#1011

#1012

#1012

#1015

#1016

#1018

#1020

#1023

#1024

#1025

#1027

#1028

#1029

#1034

#1035

#1036

#1036

#1037

#1038

#1039

#1043

#1043

#1044

#1048

#1049

#105

#1050

#1051

#1054

#1057

#106

#1061

#1062

#1063

#1064

#1068

#1069

#1070

#1071

#1072

#1072

#1073

#1073

#1075

#1076

#1077

#1079

#1080

#1082

#1082

#1083

#1084

#1085

#1085

#1088

#1088

#1091

#1092

#1093

#1094

#1096

#1098

#1099

#11

#11

#110

#1100

#1101

#1103

#1104

#1106

#1107

#1108

#1109

#1110

#1111

#1113

#1114

#1115

#1115

#1116

#1116

#1118

#1118

#112

#1120

#1122

#113

#1130

#1131

#1137

#114

#1140

#1141

#1143

#1144

#1145

#1147

#1149

#115

#1150

#1151

#1156

#1157

#116

#1160

#1164

#1165

#1167

#1168

#1169

#117

#1170

#1171

#1172

#1173

#1174

#1176

#1177

#1178

#1182

#1182

#1183

#1186

#1190

#1191

#1192

#1193

#1197

#1198

#1199

#12

#1201

#1202

#1204

#1205

#1206

#1207

#1208

#1209

#121

#1212

#1213

#1214

#1215

#1217

#1219

#122

#1221

#1222

#1224

#1225

#1227

#1228

#1229

#123

#1230

#1232

#1233

#1234

#1236

#1237

#1238

#1239

#1239

#124

#1242

#1243

#1243

#1245

#1247

#1249

#1250

#1253

#1254

#1258

#1259

#126

#1260

#1261

#1262

#1263

#1264

#1266

#1268

#127

#1270

#1271

#1272

#1273

#1274

#1276

#1277

#1278

#1279

#1281

#1283

#1284

#1285

#1287

#1288

#1289

#1290

#1293

#1295

#1297

#1299

#13

#1300

#1301

#1304

#1305

#1306

#1307

#1308

#1310

#1311

#1314

#1315

#1316

#1316

#1317

#1318

#132

#1320

#1321

#1321

#1323

#1326

#1327

#1328

#1329

#133

#1330

#1332

#1335

#1337

#1338

#1339

#1340

#1341

#1342

#1343

#1344

#1345

#1346

#1347

#1348

#1350

#1352

#1353

#1354

#1356

#1357

#1359

#1362

#1363

#1364

#1365

#1368

#1369

#137

#1370

#1371

#1375

#1375

#1376

#1377

#1378

#1378

#1381

#1382

#1384

#1386

#1388

#1389

#1390

#1391

#1393

#1394

#1395

#1396

#1397

#1398

#1399

#14

#140

#1402

#1403

#1405

#1406

#1407

#141

#1412

#1414

#1415

#1416

#1416

#1420

#1421

#1422

#1423

#1424

#1425

#1426

#1427

#1428

#1429

#143

#1430

#1431

#1432

#1433

#1440

#1448

#1449

#1449

#145

#1450

#1451

#1452

#1453

#1454

#1455

#1457

#1459

#146

#1460

#1461

#1462

#1463

#1464

#1465

#1466

#1467

#147

#148

#1485

#1486

#1488

#1489

#149

#1490

#1491

#1492

#1494

#1495

#1497

#1498

#1499

#15

#150

#1500

#1501

#1502

#1503

#1506

#1508

#1509

#1510

#1512

#1513

#1514

#1515

#1516

#1517

#1518

#152

#1521

#1528

#1529

#153

#153

#1530

#1531

#1532

#1533

#1536

#1537

#1538

#1539

#154

#1540

#1541

#1542

#1543

#1544

#1545

#1548

#1549

#1550

#1551

#1553

#1555

#1556

#1557

#1558

#1559

#1560

#1561

#1562

#1563

#1564

#1566

#1567

#1568

#1570

#1571

#1572

#1576

#1578

#1579

#1581

#1582

#1584

#1585

#1586

#1587

#159

#1590

#1591

#1592

#1593

#1595

#1596

#1598

#1599

#1601

#1606

#1607

#1608

#1609

#1610

#1611

#1613

#1615

#1616

#1617

#1619

#162

#1620

#1621

#1622

#1623

#1624

#1625

#1626

#1627

#1628

#1630

#1631

#1632

#1634

#1635

#164

#1640

#1641

#165

#1652

#1653

#1654

#1655

#1656

#1657

#1658

#1659

#166

#1660

#1661

#1663

#1664

#1665

#1666

#1667

#1668

#1669

#167

#1670

#1671

#1672

#1673

#1674

#1675

#1676

#1677

#1678

#1679

#168

#1680

#1681

#1682

#1683

#1683

#1684

#1686

#1689

#169

#1690

#1691

#1692

#1693

#1694

#1695

#1696

#1697

#1698

#170

#1700

#1701

#1702

#1703

#1704

#1706

#1707

#1708

#1709

#171

#1710

#1711

#1712

#1713

#1715

#1716

#1717

#1718

#1719

#172

#1720

#1721

#1722

#1723

#1724

#1726

#1727

#1728

#1729

#173

#1730

#1731

#1733

#1734

#1735

#1736

#1737

#1738

#1739

#174

#1740

#1742

#1743

#1746

#1747

#1748

#1749

#175

#1750

#1751

#1752

#1753

#1755

#1757

#1758

#176

#1760

#1763

#1764

#1765

#1766

#1767

#1768

#1769

#1770

#1771

#1772

#1773

#1776

#1777

#1778

#1779

#1781

#1783

#1786

#1787

#1788

#1788

#1789

#1791

#1792

#1793

#1794

#1795

#1796

#1798

#1799

#180

#1800

#1801

#1802

#1804

#1804

#1807

#1810

#1811

#1812

#1813

#1814

#1815

#1816

#1816

#1818

#1818

#1821

#1822

#1823

#1824

#1825

#1826

#1827

#1828

#1829

#183

#1830

#1831

#1832

#1833

#1834

#1835

#1837

#1838

#1839

#1840

#1841

#1842

#1843

#1844

#1845

#1846

#1849

#185

#1850

#1851

#1852

#1853

#1854

#1856

#1859

#1859

#1861

#1863

#1866

#1868

#187

#1871

#1873

#1877

#1878

#188

#1880

#1882

#1882

#1884

#1888

#189

#1890

#1894

#1894

#1895

#1895

#1896

#1896

#1897

#1897

#1898

#1898

#19

#190

#1900

#1900

#1901

#1901

#1902

#1903

#1903

#1904

#1904

#1905

#1905

#1906

#1906

#1907

#1907

#1908

#1909

#1909

#1910

#1910

#1911

#1911

#1912

#1912

#1913

#1913

#1914

#1914

#1915

#1915

#1917

#1921

#1924

#1926

#1927

#1929

#1932

#1933

#1933

#1935

#1937

#1939

#1939

#1941

#1942

#1946

#1948

#1949

#1949

#195

#1950

#1950

#1953

#1955

#1956

#1957

#1957

#1959

#1959

#1960

#1961

#1962

#1963

#1964

#1964

#1966

#1967

#1967

#1968

#1968

#1969

#1969

#1971

#1972

#1974

#1974

#1976

#1976

#1977

#1980

#1981

#1982

#1982

#1983

#1984

#1984

#1986

#1986

#1988

#1989

#1989

#199

#1990

#1990

#1991

#1991

#1992

#1993

#1994

#1994

#1995

#1995

#1996

#1996

#1997

#1997

#1998

#1999

#1999

#2

#20

#2000

#2000

#2001

#2003

#2005

#2007

#2007

#2008

#2008

#2009

#2010

#2010

#2011

#2011

#2012

#2012

#2013

#2014

#2015

#2016

#2017

#2018

#2018

#2019

#2019

#2020

#2020

#2022

#2023

#2023

#2024

#2024

#2025

#2025

#207

#212

#213

#216

#220

#221

#223

#224

#226

#228

#229

#23

#230

#235

#236

#237

#238

#239

#24

#240

#243

#244

#245

#247

#248

#249

#25

#25

#251

#253

#254

#255

#256

#257

#258

#260

#261

#261

#262

#263

#265

#266

#267

#268

#269

#273

#275

#276

#277

#28

#28

#280

#282

#283

#284

#285

#286

#287

#288

#289

#29

#290

#292

#293

#294

#295

#296

#297

#298

#299

#3

#30

#30

#300

#301

#303

#305

#307

#309

#31

#311

#314

#319

#32

#321

#322

#323

#325

#326

#327

#328

#329

#33

#331

#334

#335

#336

#337

#338

#339

#34

#342

#343

#344

#345

#346

#347

#348

#349

#35

#350

#351

#352

#354

#355

#359

#36

#362

#363

#364

#37

#370

#378

#38

#380

#383

#388

#389

#392

#393

#394

#395

#396

#397

#4

#40

#401

#402

#403

#404

#405

#406

#407

#41

#410

#411

#414

#415

#416

#417

#418

#419

#42

#42

#421

#426

#428

#429

#43

#430

#435

#436

#438

#442

#443

#444

#445

#446

#448

#45

#450

#451

#452

#453

#454

#455

#458

#459

#46

#460

#461

#462

#465

#465

#466

#467

#468

#469

#47

#471

#472

#472

#475

#476

#477

#478

#479

#48

#480

#481

#482

#483

#484

#487

#491

#492

#496

#498

#499

#5

#50

#504

#507

#51

#510

#511

#513

#518

#518

#519

#52

#523

#526

#527

#53

#531

#533

#534

#535

#536

#537

#538

#54

#540

#543

#544

#545

#546

#548

#549

#55

#551

#554

#555

#557

#559

#56

#561

#563

#569

#57

#570

#572

#575

#579

#58

#580

#581

#581

#582

#584

#586

#593

#594

#596

#597

#6

#60

#600

#601

#603

#605

#606

#606

#609

#610

#611

#612

#613

#614

#615

#619

#622

#623

#624

#625

#626

#628

#63

#630

#633

#635

#64

#641

#643

#644

#645

#647

#65

#650

#650

#651

#653

#654

#655

#656

#656

#657

#658

#659

#66

#660

#662

#663

#664

#666

#667

#669

#67

#670

#673

#675

#676

#677

#68

#682

#683

#684

#685

#689

#69

#690

#693

#694

#695

#698

#7

#70

#700

#702

#705

#706

#708

#71

#711

#714

#718

#718

#72

#720

#721

#722

#724

#725

#726

#727

#728

#729

#73

#730

#731

#732

#733

#734

#735

#736

#737

#738

#74

#741

#742

#743

#745

#749

#75

#750

#751

#752

#753

#753

#754

#755

#758

#76

#761

#761

#766

#768

#769

#769

#77

#771

#772

#774

#775

#776

#777

#778

#778

#78

#782

#783

#784

#785

#786

#788

#789

#79

#790

#791

#793

#795

#796

#797

#8

#80

#802

#805

#806

#808

#809

#81

#810

#813

#814

#817

#818

#819

#82

#821

#822

#823

#824

#825

#826

#827

#828

#83

#834

#835

#837

#838

#839

#84

#840

#841

#845

#846

#849

#85

#850

#852

#855

#857

#858

#86

#869

#87

#873

#877

#879

#88

#881

#882

#884

#885

#886

#887

#888

#89

#891

#892

#892

#894

#898

#899

#9

#9

#90

#900

#902

#903

#904

#905

#907

#913

#915

#916

#92

#920

#921

#928

#933

#934

#935

#936

#938

#941

#942

#945

#947

#948

#949

#951

#952

#957

#960

#962

#968

#968

#970

#975

#976

#976

#978

#984

#987

#988

#995

#996

#997

#999

dev-prerelease

v1.0.0

v1.0.0-beta.1

v1.0.1

v2.0.0

v2.0.1

v2.11.0

v2.26.0

v2.26.2

v2.27.0

v2.28.0

v2.4.0

v2.4.1

v2.5.0

v2.5.2

v2.7.0

v2.8.0

Mono Color

• 2e9b5b62fa removing test code k1nd0ne 2024-08-02 18:11:29 +02:00
• 60b1c49e49 removing test code k1nd0ne 2024-08-02 18:10:11 +02:00
• 230ea09728 Updating code following #1230 merge k1nd0ne 2024-08-02 17:52:51 +02:00
• 3c377320e5 Linux: Begin to breakdown the functions in sockscan plugin eve 2024-08-02 15:41:04 +01:00
• 70675149c3 Merge branch 'volatilityfoundation:develop' into feature/lsof_inodes ForensicXlabandGitHub 2024-08-02 16:21:46 +02:00
• a3393a9711 Linux: fix black formatting issues eve 2024-08-02 11:46:04 +01:00
• e4ea19debf Linux: sockscan update based on comments from @gcmoreira, add version, make use of relative_child_offset, fix f string. eve 2024-08-02 11:41:52 +01:00
• eb757b41cc Merge pull request #1230 from gcmoreira/linux_inode_timespec_timespec64_obj_extensions ikelosandGitHub 2024-08-02 10:56:37 +01:00
• ed20834763 PR review fixes: Remove get_inode_number. It's better to use the type's original member name and handle the casting on the consumer side. Gustavo Moreira 2024-08-02 19:46:23 +10:00
• d34b1ded3e PR review fixes: Remove get_inode_number. It's better to use the type's original member name and handle the casting on the consumer side. Gustavo Moreira 2024-08-02 19:46:23 +10:00
• 933a41fa3a PR review fixes: Convert inode's is_* functions to properties Gustavo Moreira 2024-08-02 14:17:57 +10:00
• b8d68b9a5e PR review fixes: Avoid using renderers in core functions. Gustavo Moreira 2024-08-02 14:15:01 +10:00
• efba3a1b73 PR review fixes: Convert inode's is_* functions to properties Gustavo Moreira 2024-08-02 14:17:57 +10:00
• 930d29046a PR review fixes: Avoid using renderers in core functions. Gustavo Moreira 2024-08-02 14:15:01 +10:00
• 79529fb815 PR review fixes: Rename method name from private to internal Gustavo Moreira 2024-08-02 13:50:51 +10:00
• 1dcaf9c0b1 PR review fixes: Rename method name from private to internal Gustavo Moreira 2024-08-02 13:50:51 +10:00
• af5a743b35 Merge pull request #1219 from qpalzmz112/develop ikelosandGitHub 2024-08-02 01:33:59 +01:00
• 98c0094da5 Updated unpacked variable names qpalzmz112 2024-08-01 18:51:11 -05:00
• 2127c5ced5 Merge remote-tracking branch 'origin/816-port-cmdscan-and-console-plugins-from-vol2-to-vol3-please' into blackhat_2024 Dave Lassalle 2024-08-01 16:28:33 -05:00
• fdb131f870 #816 - add cmdscan and bug fixes Dave Lassalle 2024-08-01 16:27:48 -05:00
• d19013c852 fixed typo, updated plugin docstring, and updated comment qpalzmz112 2024-08-01 16:19:24 -05:00
• 0bda154385 Clarify the documentation a little Mike Auty 2024-08-01 21:08:18 +01:00
• e6308a6035 Make suggested changes by gcmoreira Mike Auty 2024-08-01 21:04:24 +01:00
• a165c91ed9 Merge remote-tracking branch 'origin/816-port-cmdscan-and-console-plugins-from-vol2-to-vol3-please' into blackhat_2024 Dave Lassalle 2024-08-01 14:23:38 -05:00
• dbc837474c #816 - initial support for Windows Windows Server 2022 (10.0.20348) Dave Lassalle 2024-08-01 14:23:22 -05:00
• 3017a7d00c Linux: Add inode, timespec, and timespec64 object extensions to support different kernel versions, ensuring we will get aware datetimes when using them. Gustavo Moreira 2024-08-01 11:46:10 +10:00
• 90b8b5340f Linux: Add inode, timespec, and timespec64 object extensions to support different kernel versions, ensuring we will get aware datetimes when using them. Gustavo Moreira 2024-08-01 11:46:10 +10:00
• 9e8864521c Added debug log for failed address translation qpalzmz112 2024-07-31 18:02:52 -05:00
• fd6e4bec5c Updated with feedback from the PR qpalzmz112 2024-07-31 17:53:29 -05:00
• d576f8cb48 Fix CodeQL error Mike Auty 2024-07-31 21:49:07 +01:00
• 73bc10c283 Wire the argcomplete into volshell too Mike Auty 2024-07-31 21:46:57 +01:00
• 931ca7d43c add amcache plugin Dave Lassalle 2024-07-31 09:50:33 -05:00
• dea99ad6fd Merge remote-tracking branch 'origin/orphan_threads_v2' into blackhat_2024 Dave Lassalle 2024-07-31 09:46:57 -05:00
• 4655ef0e1c Merge remote-tracking branch 'origin/pe_symbols' into blackhat_2024 Dave Lassalle 2024-07-31 09:04:21 -05:00
• 16cde44400 Merge pull request #1228 from volatilityfoundation/ldr_fix ikelosandGitHub 2024-07-30 23:21:57 +01:00
• 2743e78481 Merge pull request #1227 from dgmcdona/dgmcdona/windows-netscan-update ikelosandGitHub 2024-07-30 23:19:56 +01:00
• 189f8729e5 Merge pull request #1222 from gcmoreira/renderers_time_conversion_fixes ikelosandGitHub 2024-07-30 23:08:11 +01:00
• af7466b353 Merge pull request #1224 from dgmcdona/dgmcdona/windows-callback-symbol-fix ikelosandGitHub 2024-07-30 22:45:50 +01:00
• 4e8d64ed86 Merge pull request #1217 from eve-mem/windows_issue_1146 ikelosandGitHub 2024-07-30 22:38:36 +01:00
• bee333908b Merge pull request #1221 from volatilityfoundation/issues/issue1216 ikelosandGitHub 2024-07-30 22:37:42 +01:00
• a84a3706c5 Remove errant filter on ldrmodule checks Andrew Case 2024-07-30 14:00:41 -05:00
• 56b618f5c3 Windows: Updates netscan with new symbol file David McDonald 2024-07-30 13:00:38 -05:00
• efc48d5831 Make timeliner able to sort aware datetimes. Otherwise, it will raise an exception when comparing the plugin output data with this naive datetime Gustavo Moreira 2024-07-30 17:18:14 +10:00
• 30217ed36d Merge branch 'volatilityfoundation:develop' into develop Arcuri DavideandGitHub 2024-07-30 09:11:33 +02:00
• f1c5bbdfaf Address feedback Andrew Case 2024-07-29 19:11:32 -05:00
• 896b40bd22 Fix bugs in thrdscan and threads. Add orphan kernel threads plugin Andrew Case 2024-07-29 18:50:55 -05:00
• 59fec176aa Fix bugs in thrdscan and threads. Add orphan kernel threads plugin Andrew Case 2024-07-29 18:49:48 -05:00
• d97fd777f3 Windows: Bumps netstat module version requirement David McDonald 2024-07-29 18:36:43 -05:00
• ba7ec00599 Windows: Fixes bad structure member in callbacks David McDonald 2024-07-29 17:55:56 -05:00
• b343734bae Renderers conversion exceptions fix: Even though the documentation states that OverflowError should be raised starting from version 3.3, it has been observed that ValueError is still being triggered. Also, in Linux, we noticed that OSError is also being raised in some cases. Gustavo Moreira 2024-07-29 15:16:34 +10:00
• ece15c914f Renderers conversion exceptions fix: Since version 3.3 utcfromtimestamp() and fromtimestamp() Python datimetime module raises OverflowError instead of ValueError. As of today, Volatility3 requires Python 3.7.3 so we should only include OverflowError Gustavo Moreira 2024-07-29 14:18:10 +10:00
• 76414d3246 Renderers conversion fix: Create aware datetimes to represent times in UTC. Fix Python 3.12 datetime.utcfromtimestamp() deprecation. Gustavo Moreira 2024-07-29 14:13:54 +10:00
• b659a060bd Renderers: Ensure the version is bumped so plugins can require the format_hints properly Mike Auty 2024-07-28 21:57:48 +01:00
• 0d8fb76b3a Renderers: Allow BaseAbsentValues in value results Mike Auty 2024-07-28 19:57:18 +01:00
• 13c0d8df08 Add in shtab support feature/shtab Mike Auty 2024-07-28 12:47:23 +01:00
• e89e776377 Try out argcomplete as well Mike Auty 2024-07-28 12:41:31 +01:00
• 44f26c928e Add in shtab autocompletion Mike Auty 2024-07-28 12:35:02 +01:00
• 824b0599f2 formatted qpalzmz112 2024-07-27 20:35:08 -05:00
• f44ceb321d Added psxview qpalzmz112 2024-07-27 20:11:39 -05:00
• 815252c9ba Adding watchdogs k1nd0ne 2024-07-27 16:35:22 +02:00
• 7024588076 Code clean k1nd0ne 2024-07-27 16:09:52 +02:00
• 650dd06245 Modifications following the review k1nd0ne 2024-07-27 16:03:59 +02:00
• 438fc79c8c Merge pull request #1197 from eve-mem/issue_1040 ikelosandGitHub 2024-07-26 10:03:50 +01:00
• 7a03e9deab Windows: Add a _version to the filescan plugin Eve 2024-07-25 18:21:12 +01:00
• 799afe6e51 Windows: fix type in handles plugin Eve 2024-07-25 18:02:30 +01:00
• 6f3f645dbc Windows: update handles plugin sar warnings to use DEFAULT_SAR_VALUE var Eve 2024-07-25 17:59:10 +01:00
• dc8dc9b078 fix yara depending plugins Davide Arcuri 2024-07-25 14:37:18 +02:00
• c6727ffb70 fix f-string for previous python release Davide Arcuri 2024-07-25 08:43:21 +02:00
• 1616a898ae restore comment Davide Arcuri 2024-07-25 08:37:27 +02:00
• fceb79ba8b use with context, bump release Davide Arcuri 2024-07-25 08:34:04 +02:00
• c92cd1935e Merge branch 'volatilityfoundation:develop' into develop Arcuri DavideandGitHub 2024-07-25 08:32:01 +02:00
• 05aa81b63c Merge pull request #1214 from eve-mem/windows_issue_1146 ikelosandGitHub 2024-07-24 22:11:42 +01:00
• 19e1c21cbb Merge pull request #1207 from volatilityfoundation/issues/fix-generator-inheritance ikelosandGitHub 2024-07-24 21:04:36 +01:00
• f4cbed856b Fix up missing filter parameter Mike Auty 2024-07-24 20:47:05 +01:00
• e1065f9e78 Fix up a missing super which @atcuno spotted Mike Auty 2024-07-24 20:32:36 +01:00
• 7d52f7992d Windows: Make the default sar value used in handles plugin a variable so if it needs to be changed it gets updated in one place only Eve 2024-07-24 11:06:26 +01:00
• b8b146a444 Windows: update handles plugin to use a default SAR value of 0x10 if decoding fails. Produce warnings when this happens. Ref issue #1147 Eve 2024-07-24 10:59:52 +01:00
• d8970cc606 Merge branch 'volatilityfoundation:develop' into feature/lsof_inodes ForensicXlabandGitHub 2024-07-23 22:06:08 +02:00
• af2d620676 Improving lsof k1nd0ne 2024-07-23 22:02:34 +02:00
• 2e0f7371ac Add pe_symbols plugin for user specified symbol resolution as well as programtic access Andrew Case 2024-07-23 14:41:53 -05:00
• ce9832a2b3 both yara-python and yara-x support Davide Arcuri 2024-07-22 13:58:33 +02:00
• 0b84a5627b Merge branch 'volatilityfoundation:develop' into develop Arcuri DavideandGitHub 2024-07-22 13:56:34 +02:00
• 5e96327cb0 Add in threads that only provides an implmentation method Mike Auty 2024-07-21 22:58:43 +01:00
• 721971652c Merge pull request #1168 from volatilityfoundation/svcdiff_malware_detection ikelosandGitHub 2024-07-21 18:37:49 +01:00
• 111873e173 Fix class vs static method and leading underscores Andrew Case 2024-07-21 11:54:06 -05:00
• 21396185d0 Address feedback Andrew Case 2024-07-21 11:10:38 -05:00
• fba7255b23 Merge pull request #1204 from volatilityfoundation/pedump_v2 ikelosandGitHub 2024-07-21 17:05:42 +01:00
• 9454181b98 Address feedback Andrew Case 2024-07-21 09:42:19 -05:00
• 5645c4ff4b Merge pull request #1167 from volatilityfoundation/process_ghosting ikelosandGitHub 2024-07-21 13:31:35 +01:00
• be10469702 Merge pull request #1202 from dgmcdona/dgmcdona/windows-shimcachemem ikelosandGitHub 2024-07-21 13:21:45 +01:00
• d494df2673 Merge pull request #1201 from volatilityfoundation/issues/issue1200 ikelosandGitHub 2024-07-21 13:11:51 +01:00
• 6043e740ca Merge pull request #1177 from volatilityfoundation/118-missing-plugins-threads-timers ikelosandGitHub 2024-07-21 12:03:18 +01:00
• 7aa509b92b Merge pull request #1186 from volatilityfoundation/userassist_timeline ikelosandGitHub 2024-07-21 12:00:27 +01:00
• 4073524dc1 Add the orphan_kernel_threads plugin to help detect rootkits on Windows systems orphan_kernel_threads Andrew Case 2024-07-20 12:21:45 -05:00
• bca4cdda74 replace yara-python with yara-x Davide Arcuri 2024-07-19 11:09:52 +02:00
• 12f3beacfc Add dedicated plugin and API for extracting PE files from kernel and process memory atcuno 2024-07-18 17:56:24 -05:00
• 75ccf1bfab Add dedicated plugin and API for extracting PE files from kernel and process memory atcuno 2024-07-18 17:54:33 -05:00
• 3e3d9c7235 Merge branch 'pedump' of github.com:volatilityfoundation/volatility3 into pedump pedump atcuno 2024-07-18 16:16:20 -05:00
• bc63e24a8d Address feedback from ikelos atcuno 2024-07-03 10:30:05 -05:00
• 36bd9584c3 placeholder atcuno 2024-06-20 18:13:32 -05:00