Analyst 5120860a60 fix two bugs that prevented poolscanners from working on 2012 samples ...

in 2012, cookie is None and will raise TypeError, so we need to catch that in addition to AttributeError. also, the Session pointer is always in the native layer

2019-03-25 09:51:55 -05:00

..

extensions

fix two bugs that prevented poolscanners from working on 2012 samples

2019-03-25 09:51:55 -05:00

__init__.py

add the symlinkscan plugin

2019-03-07 09:00:19 -06:00

crash.json

Initial changes based on @ikelos review. Also updated crash structs.

2018-05-02 20:10:14 +01:00

kdbg.json

wininfo, procdump, dlldump, and json for pe & kdbg

2018-06-12 08:40:21 +01:00

kdbg.py

Add in the LICENSE and the README.

2018-12-19 23:55:03 +00:00

pe.json

wininfo, procdump, dlldump, and json for pe & kdbg

2018-06-12 08:40:21 +01:00

pe.py

Add in the LICENSE and the README.

2018-12-19 23:55:03 +00:00

poolheader-x64-win7.json

Add required poolheader types and change the PoolHeaderSymbolTable to match the inheritted constructor signature.

2018-10-24 19:31:22 +01:00

poolheader-x64.json

Add required poolheader types and change the PoolHeaderSymbolTable to match the inheritted constructor signature.

2018-10-24 19:31:22 +01:00

poolheader-x86.json

Add required poolheader types and change the PoolHeaderSymbolTable to match the inheritted constructor signature.

2018-10-24 19:31:22 +01:00

registry.json

add userassist types to registry.json

2018-08-29 21:51:52 +01:00