Mac - add docs to plugins missing descriptions

volatility/plugins/mac/ip_filters.py

@@ -28,6 +28,8 @@ import common
 from lsmod import mac_lsmod as mac_lsmod
 
 class mac_ip_filters(mac_lsmod):
+    """ Reports any hooked IP filters """
+
     def check_filter(self, context, fname, ptr, kernel_symbol_addresses, kmods):
         if ptr == None:
             return

volatility/plugins/mac/lsmod.py

@@ -25,6 +25,8 @@ import volatility.obj as obj
 import common
 
 class mac_lsmod(common.AbstractMacCommand):
+    """ Lists loaded kernel modules """
+
     def calculate(self):
         common.set_plugin_members(self)
 

volatility/plugins/mac/pslist.py

@@ -25,6 +25,8 @@ import volatility.obj as obj
 import common
 
 class mac_pslist(common.AbstractMacCommand):
+    """ List Running Processes """
+
     def __init__(self, config, *args):
         common.AbstractMacCommand.__init__(self, config, *args)
         self._config.add_option('PID', short_option = 'p', default = None, help = 'Operate on these Process IDs (comma-separated)', action = 'store', type = 'str')

volatility/plugins/mac/trustedbsd.py

@@ -29,6 +29,8 @@ import common
 from lsmod import mac_lsmod as mac_lsmod
 
 class mac_trustedbsd(mac_lsmod):
+    """ Lists malicious trustedbsd policies """
+
     def get_members(self):
         h = self.profile.types['mac_policy_ops']
         h = h.keywords["members"]

volatility/plugins/mac/vfs_events.py

@@ -25,6 +25,8 @@ import volatility.obj as obj
 import common
 
 class mac_vfs_events(common.AbstractMacCommand):
+    """ Lists Mac VFS Events """
+
     def calculate(self):
         common.set_plugin_members(self)