Commit Graph

21 Commits

Author SHA1 Message Date
Andrew C 103f33980e Mac - move lsof to overlay 2014-12-01 13:35:01 -06:00
Andrew C 559a21e6f2 Mac - mac_lsof - ensure use of correct number of file descriptors 2014-04-25 20:16:11 -04:00
iMHLv2 e6ed7078f9 sync with r3581 of trunk 2014-01-17 14:21:55 -06:00
iMHLv2 f699e93a4f sync with r3514 2013-10-08 01:04:26 -04:00
iMHLv2 d242168adb initial commit of r3513 branch 2013-10-07 11:55:04 -04:00
atcuno 933d6500f5 Mac - update fileglob.fg_type to support 10.9 - spotted by Cem Gurkok 2013-11-01 23:25:25 +00:00
awalters 4c7cc26502 Standardization of file headers. License clarification. Dumpfiles committed to trunk. 2013-10-08 04:16:13 +00:00
atcuno 067d3f8788 Mac - move vnode path cacluation to object class 2013-09-27 23:57:04 +00:00
atcuno ad5432270c Mac - move vnode path cacluation to object class 2013-09-27 23:52:52 +00:00
atcuno 7263494669 Mac - change lsof instantiation to inherit command line options 2013-06-05 01:41:58 +00:00
atcuno 05c21e5725 Mac - update lsof to print PID and netstat to handle updated generator from lsof 2013-04-10 01:51:23 +00:00
iMHLv2 1a42b3dfb1 add a FIXME comment to mac_lsof to say when and why we should replace the current code 2013-04-03 16:15:04 +00:00
atcuno 82e2a77165 Mac - fix lsof for 10.6.x 2013-04-03 03:41:13 +00:00
atcuno b5cbcf597c Mac - have lsof inherit from tasks instead of pslist 2013-03-31 21:53:10 +00:00
iMHLv2 883582ac28 use the Enumeration strings for f_fglob.fg_type. delete the block comment with the file_type_t enum, because they're in the vtypes 2013-01-31 02:48:51 +00:00
iMHLv2 333709c3e6 use the Enumeration strings for f_fglob.fg_type. delete the block comment with the file_type_t enum, because they're in the vtypes 2013-01-31 02:48:44 +00:00
iMHLv2 ea9d38e6fb edit a majority of mac plugins to remove calls to common.get_string. replace the functionality by using overlays of the String type 2013-01-30 05:06:13 +00:00
iMHLv2 8fa77d223d use dereference_as in several places in mac_netstat. fix some whitespace. move some family specific function calls under the if/else block for those families 2013-01-29 16:03:17 +00:00
iMHLv2 636643b630 use dereference_as() in mac_lsof. replace xrange(0, max) with enumerate(). yield object instead of object.a and object.b 2013-01-29 15:43:45 +00:00
iMHLv2 ae931cacfd change some relative imports to absolute (i.e. import x -> import volatility.plugins.mac.x as x) 2013-01-29 03:34:10 +00:00
atcuno e325909cc3 Mac - update lsof 2013-01-21 06:27:10 +00:00