 iMHLv2
|
ee7050df8d
|
fix the timers plugin on windows 6.1.x samples
|
2014-10-11 17:01:10 -05:00 |
|
|
iMHLv2
|
815157a817
|
add a --listhead option to timers in cases (esp win2003) where disasm fails to locate the list head
|
2014-06-27 20:46:08 -04:00 |
|
|
iMHLv2
|
825691eb32
|
fixes timers plugin on 8.1 and 2012 R2
|
2014-06-27 20:32:21 -04:00 |
|
|
iMHLv2
|
9f33f7b383
|
prevent a stack trace in timers plugin when KiTimerTableListHead is not found
|
2014-06-27 19:24:50 -04:00 |
|
|
iMHLv2
|
871a3cbedf
|
update timers plugin to work on 64-bit windows (requires pointer decode with patch guard magic)
|
2014-03-30 11:11:37 +02:00 |
|
|
iMHLv2
|
e6ed7078f9
|
sync with r3581 of trunk
|
2014-01-17 14:21:55 -06:00 |
|
|
iMHLv2
|
fc13051add
|
fixing the timers plugin for win8 32-bit
|
2013-10-08 18:40:07 -04:00 |
|
|
iMHLv2
|
f699e93a4f
|
sync with r3514
|
2013-10-08 01:04:26 -04:00 |
|
|
iMHLv2
|
d242168adb
|
initial commit of r3513 branch
|
2013-10-07 11:55:04 -04:00 |
|
|
awalters
|
4c7cc26502
|
Standardization of file headers. License clarification. Dumpfiles committed to trunk.
|
2013-10-08 04:16:13 +00:00 |
|
|
iMHLv2
|
f606ffd282
|
add API functions to the address space for pointer masking. this is in favor of doing the bit mask in Pointer.__eq__ and Pointer.v() which is how volatility 2.2 did it. fixes issue #369
|
2013-02-20 02:56:19 +00:00 |
|
|
iMHLv2
|
a2d21d59ef
|
make better use of Plugin.is_valid_profile for blacklisting commands on unsupported profiles. a general, but consistent message is reported to the user 'This command does not support the selected profile'.
|
2012-07-10 14:11:47 +00:00 |
|
|
iMHLv2
|
05c3c015bb
|
leverage the new KDBG.kpcrs() to iterate quickly through all KPCRs in a memory dump. this allows us to display IDT, GDT, and Timers per-processor without relying on kpcrscan which is way too slow to actually be useful
|
2012-06-05 21:58:24 +00:00 |
|
|
mike.auty@gmail.com
|
35e594723a
|
Convert some malware plugins to the table formatting.
|
2012-05-22 08:27:42 +00:00 |
|
|
mike.auty@gmail.com
|
3241df1a19
|
Add in profile checks for some malware plugins.
|
2012-05-22 07:31:04 +00:00 |
|
|
mike.auty@gmail.com
|
4f6681a14d
|
Apply basic windows restrictions to most windows plugins.
|
2012-05-18 09:53:27 +00:00 |
|
|
mike.auty@gmail.com
|
5cb4ab5dda
|
Fix up a large number of very minor pylint/indentation/trailing space issues across the tree.
|
2012-05-14 23:06:56 +00:00 |
|
|
mike.auty@gmail.com
|
848500de99
|
Add in the debug import, and minor pylint/whitespace fixes.
|
2012-03-17 13:23:46 +00:00 |
|
|
iMHLv2
|
5907bd464f
|
fix a bug detecting timers on win2k3sp0...s/major/build/
|
2012-03-16 17:42:29 +00:00 |
|
|
iMHLv2
|
d809b6bafc
|
add callbacks.py and timers.py plugins. fixes issue #228. fixes issue #229.
|
2012-03-09 21:36:46 +00:00 |
|