volatility3

mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-22 01:24:51 +02:00

T

Mike Auty 72259008f3 Use the physical layer and improve the output.

The physical layer will miss certain patterns, but is an order of
magnitude faster at scanning.  The main amount of time spent in scanning
Intel spaces is counting through every page in the address space (32, 40
or 64 bits), not the actual scanning.  There's no real way around this
if you want to ensure you get every chunk of virtual memory.  Since the
scanner could be stopped after its first hit, this might still be
preferable, but should not be the default (particularly for an automagic
scan).

2016-11-19 23:36:48 +00:00

development

Update the schema validator toy to include debugging information.

2016-11-07 12:37:24 +00:00

doc

Squashed commit of the following:

2016-08-20 14:13:32 -04:00

volatility

Use the physical layer and improve the output.

2016-11-19 23:36:48 +00:00

.gitignore

Remove the pycharm IDE files, they change too often.