Commit Graph

  • 1cea43c5b8 Merge branch 'type-annotations' of github.com:volatilityfoundation/volatility3 into type-annotations Mike Auty 2017-12-13 20:49:06 +00:00
  • 89bba609b2 Update to ignore missing imports for now. Mike Auty 2017-12-13 01:23:36 +00:00
  • a993996e28 Add in a very basic mypy.ini without ignore-missing-imports. Mike Auty 2017-12-12 15:32:04 +00:00
  • 3cb48c19e8 Remove the errant urllib3 import in favour of native python. Mike Auty 2017-12-11 08:47:41 +00:00
  • e362c50460 Ensure we don't run through signatures when we've found one that gives a layer. Mike Auty 2017-12-11 00:39:51 +00:00
  • 265182b66b Fix bug that massively broken the wintelstacker, slowing everything else down. Mike Auty 2017-12-10 23:47:23 +00:00
  • e23bb65162 Add in better logging. Mike Auty 2017-12-10 23:46:59 +00:00
  • 942de5f166 Finish adding type-annotations thoughout the code. Mike Auty 2017-12-10 19:31:41 +00:00
  • ee12b81f4a Add in type-annotations for renderers and start on symbols. Mike Auty 2017-12-10 14:57:26 +00:00
  • 62b986d2e9 Remove code from plugins, since plugins aren't callable anymore. Mike Auty 2017-12-10 11:59:48 +00:00
  • f50a0b715d Add in object type-annotations. Mike Auty 2017-12-10 11:54:54 +00:00
  • 1dcad91126 Add in type annotations for scanners. Mike Auty 2017-12-10 01:45:52 +00:00
  • ac12098317 Add type-annotations for reamining layer files. Mike Auty 2017-12-10 01:28:44 +00:00
  • f40fae197d Convert to python3.5 syntax (no local type-annotations). Mike Auty 2017-12-09 20:48:48 +00:00
  • 736cbff1b6 Start on the layers folder (with a few small fixes). Mike Auty 2017-12-09 20:06:01 +00:00
  • 6c52e04489 Fix up exception in DTBtests. Mike Auty 2017-12-08 00:55:29 +00:00
  • de3b8cf76b Fix exception being thrown in the middle of Nlpdtbfinder for layers without validity details. Mike Auty 2017-12-08 00:50:21 +00:00
  • 21b4506b7b Add in type-annotations for the remaining interfaces. Mike Auty 2017-12-08 00:00:34 +00:00
  • 50b60c0df6 Add in more interfaces (and fix additional errors now that type information is available). Mike Auty 2017-12-07 00:16:24 +00:00
  • 5536412a5e Add in initial work at interface type-annotations. Mike Auty 2017-12-06 01:21:39 +00:00
  • 2cc456e847 Finish off the automagic directory type annotations. Mike Auty 2017-12-06 00:37:29 +00:00
  • d7d13eb19c Add type annotations to most of the automagic files. Mike Auty 2017-12-05 00:23:54 +00:00
  • d30daa5fd3 Bump to version 3.6 to ensure support for all type hinding (including local variables). Mike Auty 2017-12-04 21:34:11 +00:00
  • 19de03b16d Merge pull request #13 from volatilityfoundation/windows-handles ikelosandGitHub 2017-12-13 20:47:53 +00:00
  • fad5a238d5 add the windows handles plugin iMHLv2 2017-12-13 20:43:17 +00:00
  • 78484cb17e Update to ignore missing imports for now. Mike Auty 2017-12-13 01:23:36 +00:00
  • 2c204e411d Add in a very basic mypy.ini without ignore-missing-imports. Mike Auty 2017-12-12 15:32:04 +00:00
  • 4067bca24e Remove the errant urllib3 import in favour of native python. Mike Auty 2017-12-11 08:47:41 +00:00
  • e80392aa12 Ensure we don't run through signatures when we've found one that gives a layer. Mike Auty 2017-12-11 00:39:51 +00:00
  • 758e521292 Fix bug that massively broken the wintelstacker, slowing everything else down. Mike Auty 2017-12-10 23:47:23 +00:00
  • 412d893f19 Add in better logging. Mike Auty 2017-12-10 23:46:59 +00:00
  • 3cbac8e75f Finish adding type-annotations thoughout the code. Mike Auty 2017-12-10 19:31:41 +00:00
  • 184d89d36d Add in type-annotations for renderers and start on symbols. Mike Auty 2017-12-10 14:57:26 +00:00
  • 0947d75289 Remove code from plugins, since plugins aren't callable anymore. Mike Auty 2017-12-10 11:59:48 +00:00
  • 923fb6a2ad Add in object type-annotations. Mike Auty 2017-12-10 11:54:54 +00:00
  • 8dcf2b25e7 Add in type annotations for scanners. Mike Auty 2017-12-10 01:45:52 +00:00
  • bde174d3d5 Add type-annotations for reamining layer files. Mike Auty 2017-12-10 01:28:44 +00:00
  • c504ee5822 Convert to python3.5 syntax (no local type-annotations). Mike Auty 2017-12-09 20:48:48 +00:00
  • 9b1736f737 Start on the layers folder (with a few small fixes). Mike Auty 2017-12-09 20:06:01 +00:00
  • 627caab55b Fix up exception in DTBtests. Mike Auty 2017-12-08 00:55:29 +00:00
  • ca1424ceee Fix exception being thrown in the middle of Nlpdtbfinder for layers without validity details. Mike Auty 2017-12-08 00:50:21 +00:00
  • 924455613c Add in type-annotations for the remaining interfaces. Mike Auty 2017-12-08 00:00:34 +00:00
  • 6f18349592 Add in more interfaces (and fix additional errors now that type information is available). Mike Auty 2017-12-07 00:16:24 +00:00
  • 61f4f05cb3 Add in initial work at interface type-annotations. Mike Auty 2017-12-06 01:21:39 +00:00
  • 06e623033d Finish off the automagic directory type annotations. Mike Auty 2017-12-06 00:37:29 +00:00
  • 1f444f7b5e Add type annotations to most of the automagic files. Mike Auty 2017-12-05 00:23:54 +00:00
  • 4f58f0748f Bump to version 3.6 to ensure support for all type hinding (including local variables). Mike Auty 2017-12-04 21:34:11 +00:00
  • 0ecf68af0f Support table remapping for referenced symbol names. Mike Auty 2017-11-27 14:39:46 +00:00
  • 60e1aebaf8 Improve the plugin help descriptions. Mike Auty 2017-11-25 16:19:47 +00:00
  • 0ad6294662 Reuse the cache if we're within the same ResourceAccessor. Mike Auty 2017-11-25 14:00:16 +00:00
  • 7a40d8128c Add in support for the smb protocol when loading files. Mike Auty 2017-11-24 22:28:14 +00:00
  • 917829d87f Reduce the number of times a ResourceAccessor is created, and use all handlers. Mike Auty 2017-11-24 22:27:36 +00:00
  • 30059766b6 Plug the WindowsMixin into the automagic. Mike Auty 2017-11-24 12:02:34 +00:00
  • e43ca15630 Improve the logging for scan failures. Mike Auty 2017-11-24 00:39:28 +00:00
  • 2d570fdb62 Fix up the broken get_symbols_by_location call. Mike Auty 2017-11-23 01:36:16 +00:00
  • 2322a1b071 Pass the keypath through the recursion rather than expensively regenerating it. Mike Auty 2017-11-23 01:02:06 +00:00
  • 678ad2c72c Merge pull request #12 from superponible/master ikelosandGitHub 2017-11-22 23:02:01 +00:00
  • fdcab2760e change name of ntsymbols and call to get_key Dave Lassalle 2017-11-22 16:03:55 -06:00
  • 51f508e602 Allow for substring matching on plugin names. Mike Auty 2017-11-14 11:04:47 +00:00
  • b075d8c31c Standardize on nt_symbols for standard symboltable requirements. Mike Auty 2017-11-13 01:25:35 +00:00
  • 330832e546 Just to make it easier in case of renames, etc. Mike Auty 2017-11-13 01:20:08 +00:00
  • 327c8cb073 Make use of the hivelist plugin when no offset is provided to printkey. Mike Auty 2017-11-13 01:19:54 +00:00
  • a60fcba32f Make sure we don't assume that the primary layer's config lives under our own. Mike Auty 2017-11-13 01:12:34 +00:00
  • 769e1226c4 Make creating subconfigs simpler from configurables. Mike Auty 2017-11-13 00:52:52 +00:00
  • 9af49a49a9 Code improvement not to re-lookup the size of an unsigned int every turn of a loop. Mike Auty 2017-11-11 22:35:40 +00:00
  • 3a591688a6 Add in a little more information about signatures. Mike Auty 2017-11-11 15:34:06 +00:00
  • 35d47b0fb0 Improve checks for invalid values Mike Auty 2017-11-11 15:15:14 +00:00
  • 18f1e5ae90 Re-order the output of the printkey plugin. Mike Auty 2017-11-10 18:08:06 +00:00
  • f58cdf73f1 Remove debugging print and use get_node rather than recasting. Mike Auty 2017-11-09 23:20:53 +00:00
  • eb76cab749 Add in Big Data support. Mike Auty 2017-11-09 23:16:58 +00:00
  • be1ebf03b0 Don't forget the constants import. Mike Auty 2017-11-09 23:16:46 +00:00
  • 18b84e31a5 Don't forget the constants import. Mike Auty 2017-11-09 23:16:30 +00:00
  • 527ef44800 Make sure the cell boundaries are checked correctly. Mike Auty 2017-11-09 23:13:38 +00:00
  • def6de51bd Add in the ability to get a symbol table from a specific object (often self.get_symbol_table). Mike Auty 2017-11-09 23:11:05 +00:00
  • 479848fde7 Improve subkey traversal by catering for various _CM_KEY_INDEX structures. Mike Auty 2017-11-08 11:41:06 +00:00
  • 918452f067 Remove deprecated volatile property in favour of the helper-prefixed property namespace. Mike Auty 2017-11-08 11:40:45 +00:00
  • 497f0f4950 Registry node with RI signature are effectively _CM_KEY_INDEX, just with single item elements. Mike Auty 2017-11-08 11:40:17 +00:00
  • 2db214e2f8 Ensure we appropriately truncate unicode strings. Mike Auty 2017-11-08 01:00:53 +00:00
  • 7c6970212f Fix recursion (it wasn't being passed the argument). Mike Auty 2017-11-08 01:00:15 +00:00
  • ba9ed5e3eb Add minor comments about the jar uri scheme. Mike Auty 2017-11-08 00:13:26 +00:00
  • f3f68e34cf Change exception output to not have so many spaces. Mike Auty 2017-11-06 10:35:08 +00:00
  • bbae34f1d5 Attempt to resolve issues with <python-3.6 json module not loading bytes. Mike Auty 2017-11-06 10:09:44 +00:00
  • adfc1f889a Add a comment about caching files that have been unzipped. Mike Auty 2017-11-06 00:48:33 +00:00
  • 3a215c185e Ensure the linux caching happens early, so the user doesn't have to run it twice. Mike Auty 2017-11-06 00:17:30 +00:00
  • c0e2d7499a Ensure that magic isn't a hard dependency. Mike Auty 2017-11-05 22:46:24 +00:00
  • 71d938d78b Add in support for looking for symbols in zip files. Mike Auty 2017-11-05 22:29:46 +00:00
  • a21d0c174a Fix the magic detection and add logging to the ResourceAccessor. Mike Auty 2017-11-05 22:29:37 +00:00
  • b6d932f4a5 Refactor the ResourceAccessor because it isn't an interface. Mike Auty 2017-11-05 21:27:56 +00:00
  • f6ac9c8367 Remove a no longer used function, so it doesn't get stuck in the API forever. Mike Auty 2017-11-05 15:28:38 +00:00
  • 671f65ed56 Centralize the ISF locating code. Mike Auty 2017-11-05 15:18:20 +00:00
  • fd582f62e2 Fix a potential exception when earlier automagics don't succeed. Mike Auty 2017-11-04 18:54:52 +00:00
  • 585ec3f72d Change the way plugin failures are reported. Mike Auty 2017-11-04 18:54:23 +00:00
  • 9d7d547667 Minor linting. Mike Auty 2017-11-04 18:45:18 +00:00
  • a4b4a8eed3 Improve the error handling with automagics. Mike Auty 2017-11-04 18:45:08 +00:00
  • 8166b0cc96 Add better logging around the stacker. Mike Auty 2017-11-04 17:13:01 +00:00
  • d9d67efa3a Add in the capability to stash linux_banners. Mike Auty 2017-11-04 17:09:59 +00:00
  • dab5caf104 Paths from the banner cache are already URIs, so we don't need to reconvert them. Mike Auty 2017-11-04 15:52:02 +00:00
  • 01043b9f3e Rework isf_filename to isf_url since we can load it from a remote location if required. Mike Auty 2017-11-04 15:47:52 +00:00
  • 4b7543f2f4 Unify the resource opening. Mike Auty 2017-11-02 21:46:39 +00:00
  • dbc73df8f2 Make sure we support windows filenames Mike Auty 2017-11-02 11:56:03 +00:00