 Bastian Neuburger
|
595ef3c388
|
Use read_long_long_phys for LinuxAMD64PagedMemory address space insted of read_long_phys
|
2017-04-13 06:38:51 +02:00 |
|
|
atcuno
|
a7c78fce91
|
Linux - add back render text to threads
|
2015-09-09 21:21:50 -05:00 |
|
|
gleeda
|
ec3fdeede0
|
Merge pull request #224 from martarek/More_Unified_Outputs
Added unified outputs and additionnal output info useful in finding some rootkits on Android
|
2015-08-28 12:07:23 -04:00 |
|
|
gleeda
|
cde51b9f94
|
fixing address
|
2015-06-29 14:29:17 -04:00 |
|
|
B Lebel
|
aeaeda538a
|
Added unified outputs to some modules. Also, added "offset" to the output allowing easier manual exploration of the file. Finally added "addr_limit" output to threads as it can be used to detect processess that leverage exploits to expand the addr_limit in order to modify kernel objects (e.g. Towelroot on Android).
|
2015-06-04 11:33:02 -04:00 |
|
|
Andrew C
|
3d4c4992d2
|
Linux - update description strings
|
2014-08-03 17:12:11 -05:00 |
|
|
Andrew Case
|
9e9c23dddf
|
Linux - update process thread gathering to be an overlay
|
2014-07-25 08:40:23 -07:00 |
|
|
atcuno
|
cec9ed2aa3
|
Linux - add all the new plugins from book
|
2014-03-20 15:10:48 -05:00 |
|