volatility3

extensions

optimizations as raised by #397

2020-12-28 21:22:50 +01:00

__init__.py

add KTHREAD struct

2020-09-02 10:52:53 +01:00

bigpools-vista-x64.json

issue #186 - add bigpools plugin

2020-05-27 23:16:18 +01:00

bigpools-vista-x86.json

issue #186 - add bigpools plugin

2020-05-27 23:16:18 +01:00

bigpools-win10-x64.json

issue #186 - add bigpools plugin

2020-05-27 23:16:18 +01:00

bigpools-win10-x86.json

issue #186 - add bigpools plugin

2020-05-27 23:16:18 +01:00

bigpools-x64.json

issue #186 - add bigpools plugin

2020-05-27 23:16:18 +01:00

bigpools-x86.json

issue #186 - add bigpools plugin

2020-05-27 23:16:18 +01:00

callbacks-x64.json

add the windows callbacks plugin

2019-09-08 16:08:48 +01:00

callbacks-x86.json

add the windows callbacks plugin

2019-09-08 16:08:48 +01:00

crash64.json

Crash64: Add support for type 0x01 to crashdump64

2020-09-23 20:28:23 +01:00

crash.json

Layers: Initial crashdump64 implementation

2020-09-23 20:28:23 +01:00

kdbg.json

wininfo, procdump, dlldump, and json for pe & kdbg

2018-06-12 08:40:21 +01:00

netscan-vista-sp12-x64.json

adds netscan plugin, network objects extension and symbol JSONs

2020-08-24 19:03:28 +01:00

netscan-vista-x64.json

adds netscan plugin, network objects extension and symbol JSONs

2020-08-24 19:03:28 +01:00

netscan-vista-x86.json

adds netscan plugin, network objects extension and symbol JSONs

2020-08-24 19:03:28 +01:00

netscan-win7-x64.json

adds partition_table type to ISFs

2020-12-22 17:18:20 +01:00

netscan-win7-x86.json

optimizations as raised by #397

2020-12-28 21:22:50 +01:00

netscan-win8-x64.json

adds netscan plugin, network objects extension and symbol JSONs

2020-08-24 19:03:28 +01:00

netscan-win8-x86.json

adds netscan plugin, network objects extension and symbol JSONs

2020-08-24 19:03:28 +01:00

netscan-win10-14393-x86.json

adds netscan plugin, network objects extension and symbol JSONs

2020-08-24 19:03:28 +01:00

netscan-win10-15063-x64.json

optimizations as raised by #397

2020-12-28 21:22:50 +01:00

netscan-win10-15063-x86.json

optimizations as raised by #397

2020-12-28 21:22:50 +01:00

netscan-win10-16299-x64.json

addresses issues raised in pr #399

2020-12-22 17:11:55 +01:00

netscan-win10-17134-x64.json

adds partition_table type to ISFs

2020-12-22 17:18:20 +01:00

netscan-win10-17134-x86.json

adds new vol3 netscan profiles and fixes rare bug

2020-12-08 10:34:07 +00:00

netscan-win10-17763-x64.json

adds partition_table type to ISFs

2020-12-22 17:18:20 +01:00

netscan-win10-18362-x64.json

adds partition_table type to ISFs

2020-12-22 17:18:20 +01:00

netscan-win10-18363-x64.json

adds partition_table type to ISFs

2020-12-22 17:18:20 +01:00

netscan-win10-19041-x64.json

optimizations as raised by #397

2020-12-28 21:22:50 +01:00

netscan-win10-19041-x86.json

adds new vol3 netscan profiles and fixes rare bug

2020-12-08 10:34:07 +00:00

netscan-win10-x64.json

adds netscan plugin, network objects extension and symbol JSONs

2020-08-24 19:03:28 +01:00

netscan-win10-x86.json

optimizations as raised by #397

2020-12-28 21:22:50 +01:00

netscan-win81-x64.json

adds netscan plugin, network objects extension and symbol JSONs

2020-08-24 19:03:28 +01:00

netscan-win81-x86.json

adds netscan plugin, network objects extension and symbol JSONs

2020-08-24 19:03:28 +01:00

pdb.json

Pdbconv: Extract appropriate database name if possible

2020-11-29 22:56:01 +00:00

pdbconv.py

Codebase: Improve typing using monkeytype

2020-12-06 21:34:28 +00:00

pdbutil.py

PdbUtility: Support multiple debug directories

2020-12-01 01:21:36 +00:00

pe.json

wininfo, procdump, dlldump, and json for pe & kdbg

2018-06-12 08:40:21 +01:00

poolheader-x64-win7.json

Add required poolheader types and change the PoolHeaderSymbolTable to match the inheritted constructor signature.

2018-10-24 19:31:22 +01:00

poolheader-x64.json

Add required poolheader types and change the PoolHeaderSymbolTable to match the inheritted constructor signature.

2018-10-24 19:31:22 +01:00

poolheader-x86.json

Add required poolheader types and change the PoolHeaderSymbolTable to match the inheritted constructor signature.

2018-10-24 19:31:22 +01:00

registry.json

add userassist types to registry.json

2018-08-29 21:51:52 +01:00

services-vista-x64.json

Remove executable bit from data files.

2019-10-13 10:09:10 +01:00

services-vista-x86.json

Remove executable bit from data files.

2019-10-13 10:09:10 +01:00

services-win8-x64.json

Remove executable bit from data files.

2019-10-13 10:09:10 +01:00

services-win8-x86.json

Remove executable bit from data files.

2019-10-13 10:09:10 +01:00

services-win10-15063-x64.json

Remove executable bit from data files.

2019-10-13 10:09:10 +01:00

services-win10-15063-x86.json

the hand-written 32-bit windows 10 service record types were missing the Tag member

2020-01-05 01:53:52 +00:00

services-win10-16299-x64.json

Remove executable bit from data files.

2019-10-13 10:09:10 +01:00

services-win10-16299-x86.json

the hand-written 32-bit windows 10 service record types were missing the Tag member

2020-01-05 01:53:52 +00:00

services-xp-2003-x64.json

Remove executable bit from data files.

2019-10-13 10:09:10 +01:00

services-xp-x86.json

Remove executable bit from data files.

2019-10-13 10:09:10 +01:00

versions.py

adds os_distinguisher for 18363

2020-12-08 10:34:07 +00:00