mirror of
https://github.com/volatilityfoundation/volatility3.git
synced 2026-09-13 21:27:39 +02:00
Commit Graph
Select branches
Hide Pull Requests
1446-pstreepy-has-broken-types-and-pid-handling
1775-symlinkscan-needs-to-scan-paged-memory
add_lkm_load_parameters
arm64-support
blackhat_2024
bugfix/missing_modules
bugfix/module_kset_invalid_addr_exc
bugfix/volshell_dt_traceback
cached_files_exception_handling
develop
development/plugin_module_stubs
devicetree_traversal_and_offsets
dgmcdona/filescan_physical_offsets
dgmcdona/package_data
dgmcdona/windows_timers_raw_dpc_offset
docker
driver_signing_enforcement
feature/add-zstd-support
feature/better-config-automagic
feature/better-page-faulting
feature/column-select
feature/data-renderer
feature/disable-caching
feature/disable-caching-try2
feature/eve-string-speedup
feature/linux-utilities-split
feature/module-requirements
feature/pdbconv-cplusplus-vs19
feature/pyinstaller-artifact
feature/scan-one-layer-deep
feature/shtab
feature/use-less-memory
feature/vmsn
feature/volshell-breakpoints
feature/volshell-unicorn-support
feature/warn-on-bad-dwarf2json-version
feature/writecrashdump-plugin
fix_devicetree_device_offsets
fix_get_net_namespace_id
fix_kallsyms_smear_handling
freebsd-pslist
hotfix/v2.26.1
inodepages/memory_usage
intel-5level-paging
issue_1481_driver_objects
issue_197_windows_dumpfiles_debug_parent
issue_574_pstree_smear
issues/build-stable-exe-fix
issues/cache-locking
issues/fix-exe-build
issues/issue1255
issues/issue1255-2
issues/issue1367
issues/issue1874
issues/issue1958
issues/registry-plugin-expiry-date
issues/ruff-formatter
linux_list_tasks_smear
mac_list_files_smear
mac_map_iteration_smear
malfind_warning
mountinfo_exception_handling
november_training
npetroni/feature/pyinstaller-artifact
october_training
orphan_kernel_threads
pe_symbols
pedump
quickscanning
renderer-options
renderer-options2
revert-1736-feature/use-less-memory
safe-output
smeared_linux_processes
stable
threadpool
training
update_gui_pool_types
update_netfilter
vma_enumeration_issues
#1
#10
#100
#1000
#1000
#1001
#1003
#1004
#1008
#1010
#1011
#1012
#1012
#1015
#1016
#1018
#1020
#1023
#1024
#1025
#1027
#1028
#1029
#1034
#1035
#1036
#1036
#1037
#1038
#1039
#1043
#1043
#1044
#1048
#1049
#105
#1050
#1051
#1054
#1057
#106
#1061
#1062
#1063
#1064
#1068
#1069
#1070
#1071
#1072
#1072
#1073
#1073
#1075
#1076
#1077
#1079
#1080
#1082
#1082
#1083
#1084
#1085
#1085
#1088
#1088
#1091
#1092
#1093
#1094
#1096
#1098
#1099
#11
#11
#110
#1100
#1101
#1103
#1104
#1106
#1107
#1108
#1109
#1110
#1111
#1113
#1114
#1115
#1115
#1116
#1116
#1118
#1118
#112
#1120
#1122
#113
#1130
#1131
#1137
#114
#1140
#1141
#1143
#1144
#1145
#1147
#1149
#115
#1150
#1151
#1156
#1157
#116
#1160
#1164
#1165
#1167
#1168
#1169
#117
#1170
#1171
#1172
#1173
#1174
#1176
#1177
#1178
#1182
#1182
#1183
#1186
#1190
#1191
#1192
#1193
#1197
#1198
#1199
#12
#1201
#1202
#1204
#1205
#1206
#1207
#1208
#1209
#121
#1212
#1213
#1214
#1215
#1217
#1219
#122
#1221
#1222
#1224
#1225
#1227
#1228
#1229
#123
#1230
#1232
#1233
#1234
#1236
#1237
#1238
#1239
#1239
#124
#1242
#1243
#1243
#1245
#1247
#1249
#1250
#1253
#1254
#1258
#1259
#126
#1260
#1261
#1262
#1263
#1264
#1266
#1268
#127
#1270
#1271
#1272
#1273
#1274
#1276
#1277
#1278
#1279
#1281
#1283
#1284
#1285
#1287
#1288
#1289
#1290
#1293
#1295
#1297
#1299
#13
#1300
#1301
#1304
#1305
#1306
#1307
#1308
#1310
#1311
#1314
#1315
#1316
#1316
#1317
#1318
#132
#1320
#1321
#1321
#1323
#1326
#1327
#1328
#1329
#133
#1330
#1332
#1335
#1337
#1338
#1339
#1340
#1341
#1342
#1343
#1344
#1345
#1346
#1347
#1348
#1350
#1352
#1353
#1354
#1356
#1357
#1359
#1362
#1363
#1364
#1365
#1368
#1369
#137
#1370
#1371
#1375
#1375
#1376
#1377
#1378
#1378
#1381
#1382
#1384
#1386
#1388
#1389
#1390
#1391
#1393
#1394
#1395
#1396
#1397
#1398
#1399
#14
#140
#1402
#1403
#1405
#1406
#1407
#141
#1412
#1414
#1415
#1416
#1416
#1420
#1421
#1422
#1423
#1424
#1425
#1426
#1427
#1428
#1429
#143
#1430
#1431
#1432
#1433
#1440
#1448
#1449
#1449
#145
#1450
#1451
#1452
#1453
#1454
#1455
#1457
#1459
#146
#1460
#1461
#1462
#1463
#1464
#1465
#1466
#1467
#147
#148
#1485
#1486
#1488
#1489
#149
#1490
#1491
#1492
#1494
#1495
#1497
#1498
#1499
#15
#150
#1500
#1501
#1502
#1503
#1506
#1508
#1509
#1510
#1512
#1513
#1514
#1515
#1516
#1517
#1518
#152
#1521
#1528
#1529
#153
#153
#1530
#1531
#1532
#1533
#1536
#1537
#1538
#1539
#154
#1540
#1541
#1542
#1543
#1544
#1545
#1548
#1549
#1550
#1551
#1553
#1555
#1556
#1557
#1558
#1559
#1560
#1561
#1562
#1563
#1564
#1566
#1567
#1568
#1570
#1571
#1572
#1576
#1578
#1579
#1581
#1582
#1584
#1585
#1586
#1587
#159
#1590
#1591
#1592
#1593
#1595
#1596
#1598
#1599
#1601
#1606
#1607
#1608
#1609
#1610
#1611
#1613
#1615
#1616
#1617
#1619
#162
#1620
#1621
#1622
#1623
#1624
#1625
#1626
#1627
#1628
#1630
#1631
#1632
#1634
#1635
#164
#1640
#1641
#165
#1652
#1653
#1654
#1655
#1656
#1657
#1658
#1659
#166
#1660
#1661
#1663
#1664
#1665
#1666
#1667
#1668
#1669
#167
#1670
#1671
#1672
#1673
#1674
#1675
#1676
#1677
#1678
#1679
#168
#1680
#1681
#1682
#1683
#1683
#1684
#1686
#1689
#169
#1690
#1691
#1692
#1693
#1694
#1695
#1696
#1697
#1698
#170
#1700
#1701
#1702
#1703
#1704
#1706
#1707
#1708
#1709
#171
#1710
#1711
#1712
#1713
#1715
#1716
#1717
#1718
#1719
#172
#1720
#1721
#1722
#1723
#1724
#1726
#1727
#1728
#1729
#173
#1730
#1731
#1733
#1734
#1735
#1736
#1737
#1738
#1739
#174
#1740
#1742
#1743
#1746
#1747
#1748
#1749
#175
#1750
#1751
#1752
#1753
#1755
#1757
#1758
#176
#1760
#1763
#1764
#1765
#1766
#1767
#1768
#1769
#1770
#1771
#1772
#1773
#1776
#1777
#1778
#1779
#1781
#1783
#1786
#1787
#1788
#1788
#1789
#1791
#1792
#1793
#1794
#1795
#1796
#1798
#1799
#180
#1800
#1801
#1802
#1804
#1804
#1807
#1810
#1811
#1812
#1813
#1814
#1815
#1816
#1816
#1818
#1818
#1821
#1822
#1823
#1824
#1825
#1826
#1827
#1828
#1829
#183
#1830
#1831
#1832
#1833
#1834
#1835
#1837
#1838
#1839
#1840
#1841
#1842
#1843
#1844
#1845
#1846
#1849
#185
#1850
#1851
#1852
#1853
#1854
#1856
#1859
#1859
#1861
#1863
#1866
#1868
#187
#1871
#1873
#1877
#1878
#188
#1880
#1882
#1882
#1884
#1888
#189
#1890
#1894
#1894
#1895
#1895
#1896
#1896
#1897
#1897
#1898
#1898
#19
#190
#1900
#1900
#1901
#1901
#1902
#1903
#1903
#1904
#1904
#1905
#1905
#1906
#1906
#1907
#1907
#1908
#1909
#1909
#1910
#1910
#1911
#1911
#1912
#1912
#1913
#1913
#1914
#1914
#1915
#1915
#1917
#1921
#1924
#1926
#1927
#1929
#1932
#1933
#1933
#1935
#1937
#1939
#1939
#1941
#1942
#1946
#1948
#1949
#1949
#195
#1950
#1950
#1953
#1955
#1956
#1957
#1957
#1959
#1959
#1960
#1961
#1962
#1963
#1964
#1964
#1966
#1967
#1967
#1968
#1968
#1969
#1969
#1971
#1972
#1974
#1974
#1976
#1976
#1977
#1980
#1981
#1982
#1982
#1983
#1984
#1984
#1986
#1986
#1988
#1989
#1989
#199
#1990
#1990
#1991
#1991
#1992
#1993
#1994
#1994
#1995
#1995
#1996
#1996
#1997
#1997
#1998
#1999
#1999
#2
#20
#2000
#2000
#2001
#2003
#2005
#2007
#2007
#2008
#2008
#2009
#2010
#2010
#2011
#2011
#2012
#2012
#2013
#2014
#2015
#2016
#2017
#2018
#2018
#2019
#2019
#2020
#2020
#2022
#2023
#2023
#2024
#2024
#2025
#2025
#207
#212
#213
#216
#220
#221
#223
#224
#226
#228
#229
#23
#230
#235
#236
#237
#238
#239
#24
#240
#243
#244
#245
#247
#248
#249
#25
#25
#251
#253
#254
#255
#256
#257
#258
#260
#261
#261
#262
#263
#265
#266
#267
#268
#269
#273
#275
#276
#277
#28
#28
#280
#282
#283
#284
#285
#286
#287
#288
#289
#29
#290
#292
#293
#294
#295
#296
#297
#298
#299
#3
#30
#30
#300
#301
#303
#305
#307
#309
#31
#311
#314
#319
#32
#321
#322
#323
#325
#326
#327
#328
#329
#33
#331
#334
#335
#336
#337
#338
#339
#34
#342
#343
#344
#345
#346
#347
#348
#349
#35
#350
#351
#352
#354
#355
#359
#36
#362
#363
#364
#37
#370
#378
#38
#380
#383
#388
#389
#392
#393
#394
#395
#396
#397
#4
#40
#401
#402
#403
#404
#405
#406
#407
#41
#410
#411
#414
#415
#416
#417
#418
#419
#42
#42
#421
#426
#428
#429
#43
#430
#435
#436
#438
#442
#443
#444
#445
#446
#448
#45
#450
#451
#452
#453
#454
#455
#458
#459
#46
#460
#461
#462
#465
#465
#466
#467
#468
#469
#47
#471
#472
#472
#475
#476
#477
#478
#479
#48
#480
#481
#482
#483
#484
#487
#491
#492
#496
#498
#499
#5
#50
#504
#507
#51
#510
#511
#513
#518
#518
#519
#52
#523
#526
#527
#53
#531
#533
#534
#535
#536
#537
#538
#54
#540
#543
#544
#545
#546
#548
#549
#55
#551
#554
#555
#557
#559
#56
#561
#563
#569
#57
#570
#572
#575
#579
#58
#580
#581
#581
#582
#584
#586
#593
#594
#596
#597
#6
#60
#600
#601
#603
#605
#606
#606
#609
#610
#611
#612
#613
#614
#615
#619
#622
#623
#624
#625
#626
#628
#63
#630
#633
#635
#64
#641
#643
#644
#645
#647
#65
#650
#650
#651
#653
#654
#655
#656
#656
#657
#658
#659
#66
#660
#662
#663
#664
#666
#667
#669
#67
#670
#673
#675
#676
#677
#68
#682
#683
#684
#685
#689
#69
#690
#693
#694
#695
#698
#7
#70
#700
#702
#705
#706
#708
#71
#711
#714
#718
#718
#72
#720
#721
#722
#724
#725
#726
#727
#728
#729
#73
#730
#731
#732
#733
#734
#735
#736
#737
#738
#74
#741
#742
#743
#745
#749
#75
#750
#751
#752
#753
#753
#754
#755
#758
#76
#761
#761
#766
#768
#769
#769
#77
#771
#772
#774
#775
#776
#777
#778
#778
#78
#782
#783
#784
#785
#786
#788
#789
#79
#790
#791
#793
#795
#796
#797
#8
#80
#802
#805
#806
#808
#809
#81
#810
#813
#814
#817
#818
#819
#82
#821
#822
#823
#824
#825
#826
#827
#828
#83
#834
#835
#837
#838
#839
#84
#840
#841
#845
#846
#849
#85
#850
#852
#855
#857
#858
#86
#869
#87
#873
#877
#879
#88
#881
#882
#884
#885
#886
#887
#888
#89
#891
#892
#892
#894
#898
#899
#9
#9
#90
#900
#902
#903
#904
#905
#907
#913
#915
#916
#92
#920
#921
#928
#933
#934
#935
#936
#938
#941
#942
#945
#947
#948
#949
#951
#952
#957
#960
#962
#968
#968
#970
#975
#976
#976
#978
#984
#987
#988
#995
#996
#997
#999
dev-prerelease
v1.0.0
v1.0.0-beta.1
v1.0.1
v2.0.0
v2.0.1
v2.11.0
v2.26.0
v2.26.2
v2.27.0
v2.28.0
v2.4.0
v2.4.1
v2.5.0
v2.5.2
v2.7.0
v2.8.0
Select branches
Hide Pull Requests
1446-pstreepy-has-broken-types-and-pid-handling
1775-symlinkscan-needs-to-scan-paged-memory
add_lkm_load_parameters
arm64-support
blackhat_2024
bugfix/missing_modules
bugfix/module_kset_invalid_addr_exc
bugfix/volshell_dt_traceback
cached_files_exception_handling
develop
development/plugin_module_stubs
devicetree_traversal_and_offsets
dgmcdona/filescan_physical_offsets
dgmcdona/package_data
dgmcdona/windows_timers_raw_dpc_offset
docker
driver_signing_enforcement
feature/add-zstd-support
feature/better-config-automagic
feature/better-page-faulting
feature/column-select
feature/data-renderer
feature/disable-caching
feature/disable-caching-try2
feature/eve-string-speedup
feature/linux-utilities-split
feature/module-requirements
feature/pdbconv-cplusplus-vs19
feature/pyinstaller-artifact
feature/scan-one-layer-deep
feature/shtab
feature/use-less-memory
feature/vmsn
feature/volshell-breakpoints
feature/volshell-unicorn-support
feature/warn-on-bad-dwarf2json-version
feature/writecrashdump-plugin
fix_devicetree_device_offsets
fix_get_net_namespace_id
fix_kallsyms_smear_handling
freebsd-pslist
hotfix/v2.26.1
inodepages/memory_usage
intel-5level-paging
issue_1481_driver_objects
issue_197_windows_dumpfiles_debug_parent
issue_574_pstree_smear
issues/build-stable-exe-fix
issues/cache-locking
issues/fix-exe-build
issues/issue1255
issues/issue1255-2
issues/issue1367
issues/issue1874
issues/issue1958
issues/registry-plugin-expiry-date
issues/ruff-formatter
linux_list_tasks_smear
mac_list_files_smear
mac_map_iteration_smear
malfind_warning
mountinfo_exception_handling
november_training
npetroni/feature/pyinstaller-artifact
october_training
orphan_kernel_threads
pe_symbols
pedump
quickscanning
renderer-options
renderer-options2
revert-1736-feature/use-less-memory
safe-output
smeared_linux_processes
stable
threadpool
training
update_gui_pool_types
update_netfilter
vma_enumeration_issues
#1
#10
#100
#1000
#1000
#1001
#1003
#1004
#1008
#1010
#1011
#1012
#1012
#1015
#1016
#1018
#1020
#1023
#1024
#1025
#1027
#1028
#1029
#1034
#1035
#1036
#1036
#1037
#1038
#1039
#1043
#1043
#1044
#1048
#1049
#105
#1050
#1051
#1054
#1057
#106
#1061
#1062
#1063
#1064
#1068
#1069
#1070
#1071
#1072
#1072
#1073
#1073
#1075
#1076
#1077
#1079
#1080
#1082
#1082
#1083
#1084
#1085
#1085
#1088
#1088
#1091
#1092
#1093
#1094
#1096
#1098
#1099
#11
#11
#110
#1100
#1101
#1103
#1104
#1106
#1107
#1108
#1109
#1110
#1111
#1113
#1114
#1115
#1115
#1116
#1116
#1118
#1118
#112
#1120
#1122
#113
#1130
#1131
#1137
#114
#1140
#1141
#1143
#1144
#1145
#1147
#1149
#115
#1150
#1151
#1156
#1157
#116
#1160
#1164
#1165
#1167
#1168
#1169
#117
#1170
#1171
#1172
#1173
#1174
#1176
#1177
#1178
#1182
#1182
#1183
#1186
#1190
#1191
#1192
#1193
#1197
#1198
#1199
#12
#1201
#1202
#1204
#1205
#1206
#1207
#1208
#1209
#121
#1212
#1213
#1214
#1215
#1217
#1219
#122
#1221
#1222
#1224
#1225
#1227
#1228
#1229
#123
#1230
#1232
#1233
#1234
#1236
#1237
#1238
#1239
#1239
#124
#1242
#1243
#1243
#1245
#1247
#1249
#1250
#1253
#1254
#1258
#1259
#126
#1260
#1261
#1262
#1263
#1264
#1266
#1268
#127
#1270
#1271
#1272
#1273
#1274
#1276
#1277
#1278
#1279
#1281
#1283
#1284
#1285
#1287
#1288
#1289
#1290
#1293
#1295
#1297
#1299
#13
#1300
#1301
#1304
#1305
#1306
#1307
#1308
#1310
#1311
#1314
#1315
#1316
#1316
#1317
#1318
#132
#1320
#1321
#1321
#1323
#1326
#1327
#1328
#1329
#133
#1330
#1332
#1335
#1337
#1338
#1339
#1340
#1341
#1342
#1343
#1344
#1345
#1346
#1347
#1348
#1350
#1352
#1353
#1354
#1356
#1357
#1359
#1362
#1363
#1364
#1365
#1368
#1369
#137
#1370
#1371
#1375
#1375
#1376
#1377
#1378
#1378
#1381
#1382
#1384
#1386
#1388
#1389
#1390
#1391
#1393
#1394
#1395
#1396
#1397
#1398
#1399
#14
#140
#1402
#1403
#1405
#1406
#1407
#141
#1412
#1414
#1415
#1416
#1416
#1420
#1421
#1422
#1423
#1424
#1425
#1426
#1427
#1428
#1429
#143
#1430
#1431
#1432
#1433
#1440
#1448
#1449
#1449
#145
#1450
#1451
#1452
#1453
#1454
#1455
#1457
#1459
#146
#1460
#1461
#1462
#1463
#1464
#1465
#1466
#1467
#147
#148
#1485
#1486
#1488
#1489
#149
#1490
#1491
#1492
#1494
#1495
#1497
#1498
#1499
#15
#150
#1500
#1501
#1502
#1503
#1506
#1508
#1509
#1510
#1512
#1513
#1514
#1515
#1516
#1517
#1518
#152
#1521
#1528
#1529
#153
#153
#1530
#1531
#1532
#1533
#1536
#1537
#1538
#1539
#154
#1540
#1541
#1542
#1543
#1544
#1545
#1548
#1549
#1550
#1551
#1553
#1555
#1556
#1557
#1558
#1559
#1560
#1561
#1562
#1563
#1564
#1566
#1567
#1568
#1570
#1571
#1572
#1576
#1578
#1579
#1581
#1582
#1584
#1585
#1586
#1587
#159
#1590
#1591
#1592
#1593
#1595
#1596
#1598
#1599
#1601
#1606
#1607
#1608
#1609
#1610
#1611
#1613
#1615
#1616
#1617
#1619
#162
#1620
#1621
#1622
#1623
#1624
#1625
#1626
#1627
#1628
#1630
#1631
#1632
#1634
#1635
#164
#1640
#1641
#165
#1652
#1653
#1654
#1655
#1656
#1657
#1658
#1659
#166
#1660
#1661
#1663
#1664
#1665
#1666
#1667
#1668
#1669
#167
#1670
#1671
#1672
#1673
#1674
#1675
#1676
#1677
#1678
#1679
#168
#1680
#1681
#1682
#1683
#1683
#1684
#1686
#1689
#169
#1690
#1691
#1692
#1693
#1694
#1695
#1696
#1697
#1698
#170
#1700
#1701
#1702
#1703
#1704
#1706
#1707
#1708
#1709
#171
#1710
#1711
#1712
#1713
#1715
#1716
#1717
#1718
#1719
#172
#1720
#1721
#1722
#1723
#1724
#1726
#1727
#1728
#1729
#173
#1730
#1731
#1733
#1734
#1735
#1736
#1737
#1738
#1739
#174
#1740
#1742
#1743
#1746
#1747
#1748
#1749
#175
#1750
#1751
#1752
#1753
#1755
#1757
#1758
#176
#1760
#1763
#1764
#1765
#1766
#1767
#1768
#1769
#1770
#1771
#1772
#1773
#1776
#1777
#1778
#1779
#1781
#1783
#1786
#1787
#1788
#1788
#1789
#1791
#1792
#1793
#1794
#1795
#1796
#1798
#1799
#180
#1800
#1801
#1802
#1804
#1804
#1807
#1810
#1811
#1812
#1813
#1814
#1815
#1816
#1816
#1818
#1818
#1821
#1822
#1823
#1824
#1825
#1826
#1827
#1828
#1829
#183
#1830
#1831
#1832
#1833
#1834
#1835
#1837
#1838
#1839
#1840
#1841
#1842
#1843
#1844
#1845
#1846
#1849
#185
#1850
#1851
#1852
#1853
#1854
#1856
#1859
#1859
#1861
#1863
#1866
#1868
#187
#1871
#1873
#1877
#1878
#188
#1880
#1882
#1882
#1884
#1888
#189
#1890
#1894
#1894
#1895
#1895
#1896
#1896
#1897
#1897
#1898
#1898
#19
#190
#1900
#1900
#1901
#1901
#1902
#1903
#1903
#1904
#1904
#1905
#1905
#1906
#1906
#1907
#1907
#1908
#1909
#1909
#1910
#1910
#1911
#1911
#1912
#1912
#1913
#1913
#1914
#1914
#1915
#1915
#1917
#1921
#1924
#1926
#1927
#1929
#1932
#1933
#1933
#1935
#1937
#1939
#1939
#1941
#1942
#1946
#1948
#1949
#1949
#195
#1950
#1950
#1953
#1955
#1956
#1957
#1957
#1959
#1959
#1960
#1961
#1962
#1963
#1964
#1964
#1966
#1967
#1967
#1968
#1968
#1969
#1969
#1971
#1972
#1974
#1974
#1976
#1976
#1977
#1980
#1981
#1982
#1982
#1983
#1984
#1984
#1986
#1986
#1988
#1989
#1989
#199
#1990
#1990
#1991
#1991
#1992
#1993
#1994
#1994
#1995
#1995
#1996
#1996
#1997
#1997
#1998
#1999
#1999
#2
#20
#2000
#2000
#2001
#2003
#2005
#2007
#2007
#2008
#2008
#2009
#2010
#2010
#2011
#2011
#2012
#2012
#2013
#2014
#2015
#2016
#2017
#2018
#2018
#2019
#2019
#2020
#2020
#2022
#2023
#2023
#2024
#2024
#2025
#2025
#207
#212
#213
#216
#220
#221
#223
#224
#226
#228
#229
#23
#230
#235
#236
#237
#238
#239
#24
#240
#243
#244
#245
#247
#248
#249
#25
#25
#251
#253
#254
#255
#256
#257
#258
#260
#261
#261
#262
#263
#265
#266
#267
#268
#269
#273
#275
#276
#277
#28
#28
#280
#282
#283
#284
#285
#286
#287
#288
#289
#29
#290
#292
#293
#294
#295
#296
#297
#298
#299
#3
#30
#30
#300
#301
#303
#305
#307
#309
#31
#311
#314
#319
#32
#321
#322
#323
#325
#326
#327
#328
#329
#33
#331
#334
#335
#336
#337
#338
#339
#34
#342
#343
#344
#345
#346
#347
#348
#349
#35
#350
#351
#352
#354
#355
#359
#36
#362
#363
#364
#37
#370
#378
#38
#380
#383
#388
#389
#392
#393
#394
#395
#396
#397
#4
#40
#401
#402
#403
#404
#405
#406
#407
#41
#410
#411
#414
#415
#416
#417
#418
#419
#42
#42
#421
#426
#428
#429
#43
#430
#435
#436
#438
#442
#443
#444
#445
#446
#448
#45
#450
#451
#452
#453
#454
#455
#458
#459
#46
#460
#461
#462
#465
#465
#466
#467
#468
#469
#47
#471
#472
#472
#475
#476
#477
#478
#479
#48
#480
#481
#482
#483
#484
#487
#491
#492
#496
#498
#499
#5
#50
#504
#507
#51
#510
#511
#513
#518
#518
#519
#52
#523
#526
#527
#53
#531
#533
#534
#535
#536
#537
#538
#54
#540
#543
#544
#545
#546
#548
#549
#55
#551
#554
#555
#557
#559
#56
#561
#563
#569
#57
#570
#572
#575
#579
#58
#580
#581
#581
#582
#584
#586
#593
#594
#596
#597
#6
#60
#600
#601
#603
#605
#606
#606
#609
#610
#611
#612
#613
#614
#615
#619
#622
#623
#624
#625
#626
#628
#63
#630
#633
#635
#64
#641
#643
#644
#645
#647
#65
#650
#650
#651
#653
#654
#655
#656
#656
#657
#658
#659
#66
#660
#662
#663
#664
#666
#667
#669
#67
#670
#673
#675
#676
#677
#68
#682
#683
#684
#685
#689
#69
#690
#693
#694
#695
#698
#7
#70
#700
#702
#705
#706
#708
#71
#711
#714
#718
#718
#72
#720
#721
#722
#724
#725
#726
#727
#728
#729
#73
#730
#731
#732
#733
#734
#735
#736
#737
#738
#74
#741
#742
#743
#745
#749
#75
#750
#751
#752
#753
#753
#754
#755
#758
#76
#761
#761
#766
#768
#769
#769
#77
#771
#772
#774
#775
#776
#777
#778
#778
#78
#782
#783
#784
#785
#786
#788
#789
#79
#790
#791
#793
#795
#796
#797
#8
#80
#802
#805
#806
#808
#809
#81
#810
#813
#814
#817
#818
#819
#82
#821
#822
#823
#824
#825
#826
#827
#828
#83
#834
#835
#837
#838
#839
#84
#840
#841
#845
#846
#849
#85
#850
#852
#855
#857
#858
#86
#869
#87
#873
#877
#879
#88
#881
#882
#884
#885
#886
#887
#888
#89
#891
#892
#892
#894
#898
#899
#9
#9
#90
#900
#902
#903
#904
#905
#907
#913
#915
#916
#92
#920
#921
#928
#933
#934
#935
#936
#938
#941
#942
#945
#947
#948
#949
#951
#952
#957
#960
#962
#968
#968
#970
#975
#976
#976
#978
#984
#987
#988
#995
#996
#997
#999
dev-prerelease
v1.0.0
v1.0.0-beta.1
v1.0.1
v2.0.0
v2.0.1
v2.11.0
v2.26.0
v2.26.2
v2.27.0
v2.28.0
v2.4.0
v2.4.1
v2.5.0
v2.5.2
v2.7.0
v2.8.0
-
35ad2325a8
Move all core plugins over to framework/plugins.
Mike Auty
2018-12-16 13:40:15 +00:00 -
9824538bd9
Numerous pycharm warnings resolved
Mike Auty
2018-12-16 13:14:43 +00:00 -
29d41470a4
Mass reformat of typing imports
Mike Auty
2018-12-16 12:55:26 +00:00 -
0abaa3af2f
Don't load all symbols when we ask to import symbols.
Mike Auty
2018-12-14 00:27:46 +00:00 -
7502ef7366
Shuffle around registry extensions.
Mike Auty
2018-12-14 00:18:57 +00:00 -
8c7cab163b
Minor fixes from the monkeytype run.
Mike Auty
2018-12-13 23:49:24 +00:00 -
dfe2f86fe2
Lots and lots of typing additions found by an initial monkeytype run.
Mike Auty
2018-12-13 23:46:37 +00:00 -
2c72439334
Add in protections for the crashdump layer.
Mike Auty
2018-12-13 22:59:21 +00:00 -
04c5007fbb
Fix minor issue with the conversion change.
Mike Auty
2018-12-13 21:38:20 +00:00 -
d9369001d4
Ensure we can cache the linux/mac banners.
Mike Auty
2018-12-13 21:23:59 +00:00 -
c0fcd15d4f
Minor changes to various checks to be more pythonic.
Mike Auty
2018-12-13 21:04:07 +00:00 -
a534ef216e
Pycharm reformatting.
Mike Auty
2018-12-13 21:01:12 +00:00 -
03d41c3f79
Add mac psaux plugin

Andrew Caseandikelos
2018-12-13 12:18:33 -06:00 -
f41e3e0453
Completely rework the primitive data format system.
Mike Auty
2018-12-13 18:27:16 +00:00 -
6b480eed56
Fix up PE data construction code.
Mike Auty
2018-12-13 16:04:39 +00:00 -
9949809198
Fix a minor typo.
Mike Auty
2018-12-13 15:55:25 +00:00 -
b533d19f83
Refactor the data extraction for primitive types.
Mike Auty
2018-12-13 15:54:14 +00:00 -
a78452e361
Fix up ugly int128 hack with a slightly nicer hack.
Mike Auty
2018-12-13 12:28:19 +00:00 -
6e43d0bab4
Bring the aslr_mask_symbol_table methods in sync (even though mac never uses it).
Mike Auty
2018-12-13 01:59:33 +00:00 -
1341925160
Remove unnecessary requirements method.
Mike Auty
2018-12-13 01:41:07 +00:00 -
cd7296d64e
Fix up based on the recent master refactoring.
Mike Auty
2018-12-12 23:49:23 +00:00 -
3a2c2b30a9
Use the virtual_to_physical_address in case of extremely large physical files where the masking might break things.
Mike Auty
2018-12-12 23:15:21 +00:00 -
d72534747e
Ignore the mac symbols as well as linux and windows.
Mike Auty
2018-12-12 23:11:51 +00:00 -
25fb05c9bf
Fix up Mac double-DTB finding code by address masking the BootPML4 symbol address.
Mike Auty
2018-12-12 23:11:30 +00:00 -
57b2a5bab7
Fix up a rogue classmethod, and ensure we have a separate variable for the new layer.
Mike Auty
2018-12-12 00:52:28 +00:00 -
5135215c62
Do some tidying and renaming.
Mike Auty
2018-12-11 14:53:34 +00:00 -
7a462d5f85
Refactor out the shared symbol cache/finder code from linux and mac.
Mike Auty
2018-12-11 14:47:34 +00:00 -
55286f04cb
Consolidate identical code into a single symbol cache, add mac automagic list and pycharm reformat.
Mike Auty
2018-12-11 11:53:50 +00:00 -
622c86f9ed
Add initial mac backend code, with broken DTB finding, along with the pslist plugin

Andrew Caseandikelos
2018-12-10 23:21:47 -06:00 -
c9a08603c7
Move the get_requirements over to the IntermedSymbols which actually requires the parameter.
Mike Auty
2018-12-13 01:39:26 +00:00 -
5e8ba16709
Remove the unimplemented hook.
Mike Auty
2018-12-13 01:09:22 +00:00 -
dfaaf1e455
Fix up some things missed in the master refactor.
Mike Auty
2018-12-13 00:59:17 +00:00 -
7c4cb0d291
Remove attempts to improve speed that may not help.
Mike Auty
2018-12-13 00:30:02 +00:00 -
da2f3b38d3
Add in page-table repetition blocking code (helps with windows 10 virtual space).
Mike Auty
2018-12-08 14:27:17 +00:00 -
736a1c6e50
add is_valid() for _FILE_OBJECT and _EPROCESS

Michael Lighandikelos
2018-11-28 17:16:43 -06:00 -
91b2c61803
Try to add some optimizations to intel scanning.
Mike Auty
2018-11-10 23:47:44 +00:00 -
a16fb3bf7d
Don't break on validity tests.
Mike Auty
2018-11-09 11:27:08 +00:00 -
76264cee34
Catch invalid _OBJECT_HEADER objects.
Mike Auty
2018-11-08 22:23:33 +00:00 -
650a188d51
updates for win8/win10 poolscanning

Michael Lighandikelos
2018-11-07 15:28:18 -06:00 -
fa033b8ab7
Back out the symbol_table_name parameter, and provide full symbol names in the constraints.
Mike Auty
2018-10-24 21:18:42 +01:00 -
eacc45dab6
Ensure POOL_HEADER finds the right object in the right symbol table.
Mike Auty
2018-10-24 19:54:17 +01:00 -
4c68da8b06
move the functionality for getting an object's type into the _OBJECT_HEADER extension

Michael Lighandikelos
2018-10-03 21:51:11 -05:00 -
4b0e7e5309
remove the Path column from poolscanner. add File scanning

Michael Lighandikelos
2018-10-24 13:11:51 -05:00 -
d653839359
switch Handles.find_cookie() to a classmethod so it can be called from the poolscanner. add typing

Michael Lighandikelos
2018-10-24 12:29:17 -05:00 -
d667a68f97
switch Handles.list_objects() to a classmethod so it can be called from the poolscanner. pass the type_map into get_object()

Michael Lighandikelos
2018-10-24 12:16:09 -05:00 -
a76d71a7dc
move the functionality for getting an object's type into the _OBJECT_HEADER extension

Michael Lighandikelos
2018-10-03 21:51:11 -05:00 -
b148305f76
Add in protection for the Lime Layer being unable to read the header.
Mike Auty
2018-12-12 23:42:31 +00:00 -
8acbe8bba3
Refactor conversion code from objects.utility to a conversion module in renderers.
Mike Auty
2018-12-12 23:39:10 +00:00 -
1a5c9d3af8
Roll symbols.utility into symbols file until we get enough functions we need to split them out again.
Mike Auty
2018-12-12 23:31:01 +00:00 -
67f5230d77
Ensure the plugins are appropriately sorted when listing them.
Mike Auty
2018-12-09 13:32:51 +00:00 -
f57bfa5738
Prepare core plugins for moving into the framework namespace.
Mike Auty
2018-12-09 13:28:44 +00:00 -
cf95f6e73e
Minor typing fix.
Mike Auty
2018-12-08 18:41:13 +00:00 -
323ea0f348
Add in the timeliner interface to the linux bash plugin.
Mike Auty
2018-12-08 18:26:45 +00:00 -
b5d532555c
Convert the adhoc scanner into a layer scanner using sections.
Mike Auty
2018-12-08 18:21:39 +00:00 -
649a39a13d
Change time_as_integer from a property to get_time_as_integer method.
Mike Auty
2018-12-08 18:00:44 +00:00 -
918653e398
Convert aslr_mask_symbol_table to more parameterized form.
Mike Auty
2018-12-08 17:55:13 +00:00 -
378820bf23
More 'inheritance' fixes.
Mike Auty
2018-12-08 17:45:28 +00:00 -
780c5d2646
Avoid 'inheritance' issues with requirements.
Mike Auty
2018-12-08 17:43:28 +00:00 -
f1780bc547
Use constants.BANG (plus pycharm autoreformat).
Mike Auty
2018-12-08 17:33:34 +00:00 -
dc91a16a2f
update check syscall

Andrew Caseandikelos
2018-12-07 12:05:46 -06:00 -
ade6aa1e74
update check_afinfo for write member

Andrew Caseandikelos
2018-12-07 11:51:42 -06:00 -
9d9b68eaa3
have check_afinfo not inherit from lsmod

Andrew Caseandikelos
2018-12-07 11:46:27 -06:00 -
8705fb3047
update time_object to get_time_object

Andrew Caseandikelos
2018-12-07 11:41:06 -06:00 -
0e7b6b6702
Updated hist_entry type and references, add bash plugin

Andrew Caseandikelos
2018-12-07 11:35:22 -06:00 -
3ab654847e
Change NotApplicableValue -> UnparsableValue

Andrew Caseandikelos
2018-12-07 11:28:21 -06:00 -
c6e9763e5a
Linux - add bash plugin

Andrew Caseandikelos
2018-12-03 11:43:21 -06:00 -
36131d01bb
Add check_afinfo plugin

Andrew Caseandikelos
2018-11-28 11:28:18 -06:00 -
72798d3187
Add linux system call checking plugin

Andrew Caseandikelos
2018-11-28 10:31:44 -06:00 -
34ed11bfc0
Fix up issue with coalescing sections.
Mike Auty
2018-12-03 02:30:19 +00:00 -
aaeb349a70
Remove debugging call.
Mike Auty
2018-12-01 21:47:16 +00:00 -
4fabb762d2
Make some typing fixes and remove specification of the iterator.
Mike Auty
2018-12-01 21:46:33 +00:00 -
5a331f9f01
A few remaining changes due to the API aleration.
Mike Auty
2018-12-01 20:48:21 +00:00 -
341b9b8f9e
Add in initial changes for scanner sections.
Mike Auty
2018-12-01 20:35:33 +00:00 -
3f2f3cd2f3
Add a reminder to fix up the API in this place.
Mike Auty
2018-12-03 21:52:29 +00:00 -
4703f192e4
Add in a check to ensure mappings that ignore errors don't cause errors.
Mike Auty
2018-12-01 21:33:09 +00:00 -
5b3a81de05
Ensure the yarascan generator returns rows.
Mike Auty
2018-12-01 20:48:53 +00:00 -
185d4ccdc2
Fix issue with yara scans not accepting binary data.
Mike Auty
2018-12-01 20:32:08 +00:00 -
5dea1968bb
Fix up _MMVAD_SHORT context typo.
Mike Auty
2018-12-01 16:27:52 +00:00 -
431da21440
Fix up the metadata format pattern matching to be slightly more strict.
Mike Auty
2018-11-28 19:50:28 +00:00 -
1f0888cf19
Remove the functools.wraps because we don't strictly wrap, just proxy.
Mike Auty
2018-11-28 16:24:00 +00:00 -
44592c63ca
Update dependencies to support sphinx_autodoc_typehints.
Mike Auty
2018-11-13 12:01:57 +00:00 -
68760bff40
Add wrapper convenience function and reorder imports for documentation generation.
Mike Auty
2018-11-13 11:53:42 +00:00 -
3900f38262
Remove vestigal trace of NlpDtbFinder.
Mike Auty
2018-11-13 11:43:14 +00:00 -
e27ba8d089
Fix up naming for objects/symbols_utility imports.
Mike Auty
2018-11-08 00:48:38 +00:00 -
90c964905a
Fix up a circular import issue.
Mike Auty
2018-11-08 00:25:26 +00:00 -
ac0f1a2cd0
Fix up a remaining typo, and two typing questions.
Mike Auty
2018-11-07 22:12:57 +00:00 -
db7320e426
Bulk lint and a couple of typos fixed.
Mike Auty
2018-11-07 22:11:06 +00:00 -
c6ca2666b6
Update aslr calculation to correctly handle physical shifts and also to cache results

Andrew Caseandikelos
2018-11-07 14:32:14 -06:00 -
625952680a
mass convert hasattr -> has_member

Andrew Caseandikelos
2018-11-07 13:37:16 -06:00 -
b868f41c95
Fix get_path_file call

Andrew Caseandikelos
2018-11-07 11:41:09 -06:00 -
6254538371
Properly use expeption type

Andrew Caseandikelos
2018-11-07 11:39:41 -06:00 -
a015e69b84
Update the use of symbols and objects class and add comments about dentry traversal

Andrew Caseandikelos
2018-11-07 11:37:22 -06:00 -
542a062779
Update how the modules list address is found

Andrew Caseandikelos
2018-11-07 11:36:34 -06:00 -
7aa729f4b7
add typing import to pslist

Andrew Caseandikelos
2018-08-08 17:34:24 -05:00 -
a8adf4eaea
Fix find_aslr for swapper isgnature and throwing exception instead of returning None

Andrew Caseandikelos
2018-08-08 17:32:08 -05:00 -
9c01b93c94
Check that mount type exists before appling type

Andrew Caseandikelos
2018-08-08 17:30:46 -05:00 -
3d7d11b340
Make the symbol table masking use the correct bit mask and ASLR aware

Andrew Caseandikelos
2018-08-01 14:08:59 -05:00 -
af496d4741
update lsof to print name properly

Andrew Caseandikelos
2018-08-01 14:08:31 -05:00 -
98e472e211
major updates and new plugins

Andrew Caseandikelos
2018-08-01 13:26:09 -05:00 -
63e9cd4604
initial set of Linux plugins and extensions for ikelos review

Andrew Caseandikelos
2018-06-06 10:48:16 -05:00