 Mike Auty
|
d3d133fe7e
|
Change all the existing converted plugins over to the new mechanism.
|
2014-10-25 18:32:33 +01:00 |
|
|
iMHLv2
|
0e1394b156
|
convert getsids to unified output
|
2014-10-01 10:16:15 -05:00 |
|
|
iMHLv2
|
cb09d6a88e
|
resolve user and service sids in getsids
|
2014-02-27 09:38:26 -06:00 |
|
|
iMHLv2
|
e6ed7078f9
|
sync with r3581 of trunk
|
2014-01-17 14:21:55 -06:00 |
|
|
iMHLv2
|
f699e93a4f
|
sync with r3514
|
2013-10-08 01:04:26 -04:00 |
|
|
iMHLv2
|
d242168adb
|
initial commit of r3513 branch
|
2013-10-07 11:55:04 -04:00 |
|
|
awalters
|
4c7cc26502
|
Standardization of file headers. License clarification. Dumpfiles committed to trunk.
|
2013-10-08 04:16:13 +00:00 |
|
|
mike.auty@gmail.com
|
5cb4ab5dda
|
Fix up a large number of very minor pylint/indentation/trailing space issues across the tree.
|
2012-05-14 23:06:56 +00:00 |
|
|
iMHLv2
|
d352ffdf7f
|
add a get_token() method to _EPROCESS. add a _TOKEN object class with get_sids() method. modify the getsids.py plugin to use these new APIs. the _TOKEN object class will later be subclassed in the Vista profile when we add the privileges plugin. also adds sanity checks to _TOKEN objects and thus Fixes Issue #176.
|
2012-03-13 15:06:02 +00:00 |
|
|
gleeda
|
3fcb3f3cff
|
added two more known sids (http://support.microsoft.com/kb/956572)
|
2011-09-02 21:40:38 +00:00 |
|
|
iMHLv2
|
e9019d2005
|
Move EX_FAST_REF to windows.py so its accessible to XP profiles. Fix getsids plugin to properly treat EPROCESS.Token as an EX_FAST_REF
|
2011-08-08 17:52:39 +00:00 |
|
|
mike.auty@gmail.com
|
117e5b466a
|
Move the Volatility-1.4_rc1 branch over to trunk.
|
2011-06-29 21:01:19 +00:00 |
|