volatility3

registry

#1476 - merge develop

2025-03-10 13:56:08 -05:00

__init__.py

Core: Rename the top level namespace

2021-01-20 21:21:16 +00:00

amcache.py

Code Review (style): Use keyword args for clarity

2025-03-05 17:59:49 -06:00

bigpools.py

Convert poolscanning APIs to new coding standards

2025-03-08 17:21:27 +00:00

cachedump.py

Fix versioning again

2025-03-08 00:32:47 +00:00

callbacks.py

Add missing files

2025-03-10 03:39:57 +00:00

cmdline.py

Code Review (style): Use keyword args for clarity

2025-03-05 17:59:49 -06:00

cmdscan.py

Convert poolscanning APIs to new coding standards

2025-03-08 17:21:27 +00:00

consoles.py

Add missing change

2025-03-08 17:27:50 +00:00

crashinfo.py

Core: Apply black 24.1.0 to the whole codebase

2024-01-28 23:50:45 +00:00

debugregisters.py

Remove deepcopy call in pe_symbols. Validate wanted symbol information passed through resolving functions

2025-03-08 19:59:57 +00:00

deskscan.py

Windows DeskScan: Add version to class

2025-03-05 17:59:38 -06:00

desktops.py

Windows GUI Plugins: Adds three plugins

2025-03-05 17:59:38 -06:00

devicetree.py

Address feedback

2025-02-16 21:24:33 +00:00

direct_system_calls.py

Code Review (style): Use keyword args for clarity

2025-03-05 17:59:49 -06:00

dlllist.py

Convert poolscanning APIs to new coding standards

2025-03-08 17:21:27 +00:00

driverirp.py

Code Review (style): Use keyword args for clarity

2025-03-05 17:59:49 -06:00

drivermodule.py

Code Review (style): Use keyword args for clarity

2025-03-05 17:59:49 -06:00

driverscan.py

Add missing files

2025-03-10 03:39:57 +00:00

dumpfiles.py

Fix handles API and callers. Bump version number and requirements

2025-03-08 22:49:16 +00:00

envars.py

#1476 - merge develop

2025-03-10 13:56:08 -05:00

filescan.py

Add missing files

2025-03-10 03:39:57 +00:00

getservicesids.py

#1476 - merge develop

2025-03-10 13:56:08 -05:00

getsids.py

#1476 - merge develop

2025-03-10 13:56:08 -05:00

handles.py

Fix handles API and callers. Bump version number and requirements

2025-03-08 22:49:16 +00:00

hashdump.py

#1476 - merge develop

2025-03-10 13:56:08 -05:00

hollowprocesses.py

Code Review (style): Use keyword args for clarity

2025-03-05 17:59:49 -06:00

iat.py

Change debug to warning to always notify user

2025-03-08 00:50:51 +00:00

indirect_system_calls.py

Convert poolscanning APIs to new coding standards

2025-03-08 17:21:27 +00:00

info.py

Convert poolscanning APIs to new coding standards

2025-03-08 17:21:27 +00:00

joblinks.py

Code Review (style): Use keyword args for clarity

2025-03-05 17:59:49 -06:00

kpcrs.py

Fix timers and kpcrs bugs, missing smear checks, and API. Closes #1642

2025-03-07 18:24:53 +00:00

ldrmodules.py

Code Review (style): Use keyword args for clarity

2025-03-05 17:59:49 -06:00

lsadump.py

#1476 - merge develop

2025-03-10 13:56:08 -05:00

malfind.py

Code Review (style): Use keyword args for clarity

2025-03-05 17:59:49 -06:00

mbrscan.py

Code Review (style): Use keyword args for clarity

2025-03-05 17:59:49 -06:00

memmap.py

Code Review (style): Use keyword args for clarity

2025-03-05 17:59:49 -06:00

mftscan.py

Shift exposed staticmethods to classmethods

2025-01-26 13:44:33 +00:00

modscan.py

Ensure that new symbol tables are only created when needed. Avoid name collisions leading to inconsistent behaviour. Make API for symbol table acquisition sane.

2025-03-10 03:27:56 +00:00

modules.py

Code Review: Remove redundant kernel module reconstruction

2025-03-05 17:59:49 -06:00

mutantscan.py

Add missing files

2025-03-10 03:39:57 +00:00

netscan.py

Ensure that new symbol tables are only created when needed. Avoid name collisions leading to inconsistent behaviour. Make API for symbol table acquisition sane.

2025-03-10 03:27:56 +00:00

netstat.py

Convert poolscanning APIs to new coding standards

2025-03-08 17:21:27 +00:00

orphan_kernel_threads.py

Code Review (style): Use keyword args for clarity

2025-03-05 17:59:49 -06:00

pe_symbols.py

Update volatility3/framework/plugins/windows/pe_symbols.py

2025-03-08 14:12:11 -06:00

pedump.py

Code Review (style): Use keyword args for clarity

2025-03-05 17:59:49 -06:00

poolscanner.py

Ensure that new symbol tables are only created when needed. Avoid name collisions leading to inconsistent behaviour. Make API for symbol table acquisition sane.

2025-03-10 03:27:56 +00:00

prefetch.py

#1476 - additional exception handling for registry plugins

2025-03-10 13:39:00 -05:00

privileges.py

Code Review (style): Use keyword args for clarity

2025-03-05 17:59:49 -06:00

processghosting.py

Code Review (style): Use keyword args for clarity

2025-03-05 17:59:49 -06:00

pslist.py

Code Review: Remove redundant kernel module reconstruction

2025-03-05 17:59:49 -06:00

psscan.py

Ensure that new symbol tables are only created when needed. Avoid name collisions leading to inconsistent behaviour. Make API for symbol table acquisition sane.

2025-03-10 03:27:56 +00:00

pstree.py

Code Review (style): Use keyword args for clarity

2025-03-05 17:59:49 -06:00

psxview.py

Fix handles API and callers. Bump version number and requirements

2025-03-08 22:49:16 +00:00

scheduled_tasks.py

#1476 - merge develop

2025-03-10 13:56:08 -05:00

sessions.py

Code Review (style): Use keyword args for clarity

2025-03-05 17:59:49 -06:00

shimcachemem.py

Code Review (style): Use keyword args for clarity

2025-03-05 17:59:49 -06:00

sids_and_privileges.json

Core: Rename the top level namespace

2021-01-20 21:21:16 +00:00

skeleton_key_check.py

Remove deepcopy call in pe_symbols. Validate wanted symbol information passed through resolving functions

2025-03-08 19:59:57 +00:00

ssdt.py

Code Review (style): Use keyword args for clarity

2025-03-05 17:59:49 -06:00

strings.py

CodeQL Fix: Unused variable

2025-03-05 17:59:49 -06:00

suspended_threads.py

Remove deepcopy call in pe_symbols. Validate wanted symbol information passed through resolving functions

2025-03-08 19:59:57 +00:00

suspicious_threads.py

Update the list_threads API to current standards and update current callers to new form

2025-03-08 00:34:40 +00:00

svcdiff.py

Code Review (style): Use keyword args for clarity

2025-03-05 17:59:49 -06:00

svclist.py

Code Review (style): Use keyword args for clarity

2025-03-05 17:59:49 -06:00

svcscan.py

Convert poolscanning APIs to new coding standards

2025-03-08 17:21:27 +00:00

symlinkscan.py

Ensure that new symbol tables are only created when needed. Avoid name collisions leading to inconsistent behaviour. Make API for symbol table acquisition sane.

2025-03-10 03:27:56 +00:00

thrdscan.py

Add missing files

2025-03-10 03:39:57 +00:00

threads.py

Update the list_threads API to current standards and update current callers to new form

2025-03-08 00:34:40 +00:00

timers.py

Fix timers and kpcrs bugs, missing smear checks, and API. Closes #1642

2025-03-07 18:24:53 +00:00

truecrypt.py

Prevent truecrypt from throwing a backtrace when the module isn't found and print a warning

2025-03-08 00:22:07 +00:00

unhooked_system_calls.py

Remove deepcopy call in pe_symbols. Validate wanted symbol information passed through resolving functions

2025-03-08 19:59:57 +00:00

unloadedmodules.py

Fix unloaded modules bugs. Change API to fit current formats

2025-03-07 05:05:23 +00:00

vadinfo.py

Code Review (style): Use keyword args for clarity

2025-03-05 17:59:49 -06:00

vadregexscan.py

Code Review (style): Use keyword args for clarity

2025-03-05 17:59:49 -06:00

vadwalk.py

Code Review (style): Use keyword args for clarity

2025-03-05 17:59:49 -06:00

vadyarascan.py

Code Review (style): Use keyword args for clarity

2025-03-05 17:59:49 -06:00

verinfo.py

Fix error handling and reporting around PE reconstruction calls

2025-03-08 00:49:02 +00:00

virtmap.py

Add error checking when accessing the KVO

2025-02-02 16:07:32 +00:00

windowstations.py

Ensure that new symbol tables are only created when needed. Avoid name collisions leading to inconsistent behaviour. Make API for symbol table acquisition sane.

2025-03-10 03:27:56 +00:00