 iMHLv2
|
5285ee84c5
|
update crashinfo to support WindowsCrashDumpSpace64BitMap. update DumpType to include 0x5 bitmap dumps
|
2014-08-03 16:37:55 -05:00 |
|
|
iMHLv2
|
e6ed7078f9
|
sync with r3581 of trunk
|
2014-01-17 14:21:55 -06:00 |
|
|
iMHLv2
|
f699e93a4f
|
sync with r3514
|
2013-10-08 01:04:26 -04:00 |
|
|
iMHLv2
|
d242168adb
|
initial commit of r3513 branch
|
2013-10-07 11:55:04 -04:00 |
|
|
awalters
|
4c7cc26502
|
Standardization of file headers. License clarification. Dumpfiles committed to trunk.
|
2013-10-08 04:16:13 +00:00 |
|
|
iMHLv2
|
948149037e
|
this patch changes inheritance with address spaces. amd64 and ARM no longer inherit from intel, which didn't make sense to begin with. vmware, virtualbox, and crash (and several others) are now run based address spaces instead of base address spaces. AS that are not purely virtual (like amd64 and intel) should not have a vtop(), rather we use a common translate(). patch mostly written by ikelos and aaron, tested by MHL
|
2013-05-13 14:33:43 +00:00 |
|
|
gleeda
|
964c3b32c9
|
making sure that timestamps that are in UTC are declared as so. now we can use the --tz option to change timezones. this is a partial fix, still need a fix for evtlogs and PE files and *nix timestamps. see details at issue 319
|
2013-02-06 00:02:16 +00:00 |
|
|
mike.auty@gmail.com
|
dd3d1cb5b5
|
Speed up crashdump by not searching for an unnecessary virtual space.
|
2012-10-14 01:10:57 +00:00 |
|
|
mike.auty@gmail.com
|
518294754d
|
Merge 2.3-devel into trunk.
|
2012-10-13 21:31:29 +00:00 |
|
|
iMHLv2
|
a4be56b1c7
|
all windows-only plugins should inherit from common.AbstractWindowsCommand instead of commands.Command - so they don't show up in --help output for Linux profiles
|
2012-08-26 17:14:46 +00:00 |
|
|
mike.auty@gmail.com
|
63cd1962d0
|
Minor pylintage.
|
2012-06-10 11:51:02 +00:00 |
|
|
iMHLv2
|
c00de40450
|
add AW's crash dump x64 patch, including the raw2dmp plugin. Fixes Issue #177
|
2012-06-05 19:50:04 +00:00 |
|
|
mike.auty@gmail.com
|
5cb4ab5dda
|
Fix up a large number of very minor pylint/indentation/trailing space issues across the tree.
|
2012-05-14 23:06:56 +00:00 |
|
|
mike.auty@gmail.com
|
d649b5b9b0
|
Fix inconsistency in commands.command class capitalization.
|
2012-02-05 23:36:33 +00:00 |
|
|
mike.auty@gmail.com
|
117e5b466a
|
Move the Volatility-1.4_rc1 branch over to trunk.
|
2011-06-29 21:01:19 +00:00 |
|