volatility3

registry

Minor improvements for mypy

2024-12-18 15:18:33 +08:00

__init__.py

Core: Rename the top level namespace

2021-01-20 21:21:16 +00:00

amcache.py

Windows Registry: Handle uncaught exceptions

2024-12-30 14:29:20 -06:00

bigpools.py

Core: Update to black 23.1.0 which removes many blank lines and parentheses

2023-02-03 00:35:49 +00:00

cachedump.py

Windows Cachedump: Handle uncaught InvalidAddressException

2024-12-30 09:37:40 -06:00

callbacks.py

Windows: Handles - major version bump

2024-12-16 17:58:53 -06:00

cmdline.py

linted with ruff (ruff check . --fix)

2024-12-17 22:55:38 +01:00

cmdscan.py

Tiny comment changes

2025-01-05 21:55:58 +00:00

consoles.py

linted with ruff (ruff check . --fix)

2024-12-17 22:55:38 +01:00

crashinfo.py

Core: Apply black 24.1.0 to the whole codebase

2024-01-28 23:50:45 +00:00

debugregisters.py

More comments on unhooked system calls

2024-09-15 19:48:55 -05:00

devicetree.py

Core: Update to black 23.1.0 which removes many blank lines and parentheses

2023-02-03 00:35:49 +00:00

direct_system_calls.py

Do not analyze processes without VADs #1470

2024-12-29 02:13:18 +00:00

dlllist.py

Revert one f-string

2024-12-20 05:48:42 +00:00

driverirp.py

Windows: Add version to driverirp.DriverIrp plugin

2024-07-03 17:15:16 -05:00

drivermodule.py

Core: Update to black 23.1.0 which removes many blank lines and parentheses

2023-02-03 00:35:49 +00:00

driverscan.py

Core: Update to black 23.1.0 which removes many blank lines and parentheses

2023-02-03 00:35:49 +00:00

dumpfiles.py

linted with ruff (ruff check . --fix)

2024-12-17 22:55:38 +01:00

envars.py

linted with ruff (ruff check . --fix)

2024-12-17 22:55:38 +01:00

filescan.py

Windows: Add a _version to the filescan plugin

2024-07-25 18:21:12 +01:00

getservicesids.py

Merge pull request #1424 from j-t-1/readability

2024-12-17 22:29:39 +00:00

getsids.py

linted with ruff (ruff check . --fix)

2024-12-17 22:55:38 +01:00

handles.py

Windows Handles: Fix unbound local in exception handler

2024-12-30 16:59:40 -06:00

hashdump.py

Windows Registry: Handle uncaught exceptions

2024-12-30 14:29:20 -06:00

hollowprocesses.py

linted with ruff (ruff check . --fix)

2024-12-17 22:55:38 +01:00

iat.py

linted with ruff (ruff check . --fix)

2024-12-17 22:55:38 +01:00

indirect_system_calls.py

chore: make ruff happy

2024-12-17 22:59:04 +01:00

info.py

Windows: Fix up broken imports in info plugin

2024-07-17 17:08:15 +01:00

joblinks.py

Core: Update to black 23.1.0 which removes many blank lines and parentheses

2023-02-03 00:35:49 +00:00

kpcrs.py

#118 - MR feedback

2024-07-15 15:20:10 -05:00

ldrmodules.py

Remove errant filter on ldrmodule checks

2024-07-30 14:00:41 -05:00

lsadump.py

Windows Registry: Handle uncaught exceptions

2024-12-30 14:29:20 -06:00

malfind.py

fix unbound page variable access

2024-12-20 13:11:35 +01:00

mbrscan.py

Core: Update to black 23.1.0 which removes many blank lines and parentheses

2023-02-03 00:35:49 +00:00

memmap.py

linted with ruff (ruff check . --fix)

2024-12-17 22:55:38 +01:00

mftscan.py

run ruff check . --unsafe-fixes --fix

2024-12-17 22:55:39 +01:00

modscan.py

Add dedicated plugin and API for extracting PE files from kernel and process memory

2024-07-18 17:54:33 -05:00

modules.py

Minor improvements for mypy

2024-12-18 15:18:33 +08:00

mutantscan.py

Core: Update to black 23.1.0 which removes many blank lines and parentheses

2023-02-03 00:35:49 +00:00

netscan.py

add fixme to windows/netscan plugin

2024-12-17 22:55:39 +01:00

netstat.py

Significantly improve the smear/error handling in the netstat plugin

2024-12-29 02:25:17 +00:00

orphan_kernel_threads.py

Address feedback

2024-09-02 12:17:16 -05:00

pe_symbols.py

Tweak comment

2024-12-19 12:00:27 +00:00

pedump.py

Merge pull request #1432 from TheMythologist/minor-improv

2024-12-20 15:21:09 +00:00

poolscanner.py

Minor improvements for mypy

2024-12-18 15:18:33 +08:00

privileges.py

linted with ruff (ruff check . --fix)

2024-12-17 22:55:38 +01:00

processghosting.py

Black fix

2024-07-18 15:48:21 -05:00

pslist.py

Minor improvements for mypy

2024-12-18 15:18:33 +08:00

psscan.py

Minor improvements for mypy

2024-12-18 15:18:33 +08:00

pstree.py

Windows: Display additional process info for windows.pstree

2024-01-18 22:25:54 -05:00

psxview.py

Swap two letters in a typo

2024-12-19 12:21:20 +00:00

scheduled_tasks.py

Minor improvements for mypy

2024-12-18 15:18:33 +08:00

sessions.py

Core: Update to black 23.1.0 which removes many blank lines and parentheses

2023-02-03 00:35:49 +00:00

shimcachemem.py

Make f-string slightly more readable

2025-01-03 15:20:35 +00:00

sids_and_privileges.json

Core: Rename the top level namespace

2021-01-20 21:21:16 +00:00

skeleton_key_check.py

Fix uncheck read() call and remove variable that would not be definied if exception triggers

2024-12-30 18:08:30 +00:00

ssdt.py

Bump the modules version number

2024-08-27 14:45:55 +01:00

strings.py

linted with ruff (ruff check . --fix)

2024-12-17 22:55:38 +01:00

suspended_threads.py

Address feedback

2024-12-29 02:47:48 +00:00

suspicious_threads.py

Fix typo in SuspiciousThreads

2024-11-08 10:19:05 +01:00

svcdiff.py

Address feedback

2024-07-21 11:10:38 -05:00

svclist.py

Add a required framework version

2024-12-21 18:48:12 +00:00

svcscan.py

linted with ruff (ruff check . --fix)

2024-12-17 22:55:38 +01:00

symlinkscan.py

Core: Update to black 23.1.0 which removes many blank lines and parentheses

2023-02-03 00:35:49 +00:00

thrdscan.py

linted with ruff (ruff check . --fix)

2024-12-17 22:55:38 +01:00

threads.py

apply unsafe fixes (ruff check --unsafe-fixes --fix)

2024-12-17 22:55:38 +01:00

timers.py

Merge pull request #1364 from c0rydoras/linting

2024-12-17 22:09:55 +00:00

truecrypt.py

Update the modules.Modules version requirement.

2024-08-13 08:34:35 -04:00

unhooked_system_calls.py

linted with ruff (ruff check . --fix)

2024-12-17 22:55:38 +01:00

unloadedmodules.py

apply unsafe fixes (ruff check --unsafe-fixes --fix)

2024-12-17 22:55:38 +01:00

vadinfo.py

linted with ruff (ruff check . --fix)

2024-12-17 22:55:38 +01:00

vadregexscan.py

Windows.vadregexscan: update imports, revert vadyarascan changes

2024-11-18 21:15:06 +00:00

vadwalk.py

Core: Apply black to the entire codebase and add workflow

2022-12-07 20:48:14 +00:00

vadyarascan.py

Ensure the VAD/VMA gets scanned in a single block

2024-11-30 11:28:09 +00:00

verinfo.py

linted with ruff (ruff check . --fix)

2024-12-17 22:55:38 +01:00

virtmap.py

apply unsafe fixes (ruff check --unsafe-fixes --fix)

2024-12-17 22:55:38 +01:00