 atcuno
|
dff594ed3d
|
Linux - add joes plugins for detecting in-kernel keyloggers
|
2012-10-15 18:28:55 +00:00 |
|
|
atcuno
|
10d7e59428
|
Linux - fix psaux table formatting
|
2012-10-15 17:38:26 +00:00 |
|
|
atcuno
|
a97cc4b40f
|
Linux - fix bug report 352, improper distorm check
|
2012-10-15 17:16:52 +00:00 |
|
|
atcuno
|
509290364b
|
Linux - add group ID to pslist and psaux
|
2012-10-15 16:18:30 +00:00 |
|
|
mike.auty@gmail.com
|
49ec1e7a21
|
Minor pylint tidy up.
|
2012-10-14 01:00:31 +00:00 |
|
|
mike.auty@gmail.com
|
518294754d
|
Merge 2.3-devel into trunk.
|
2012-10-13 21:31:29 +00:00 |
|
|
iMHLv2
|
002a9a7e13
|
fix a linux command that uses @staticmethod to set config options...they carry through to windows commands
|
2012-09-29 22:22:58 +00:00 |
|
|
atcuno
|
26910f2ccc
|
Linux - bugfix - have route_cache walk the entire chain
|
2012-09-18 03:32:12 +00:00 |
|
|
atcuno
|
8ac0c534e7
|
Linux - bugfix - allow module sections to be printed from old kernels
|
2012-09-17 02:22:29 +00:00 |
|
|
atcuno
|
fc1ae9f29b
|
Linux - bugfix - protect against corrupt unallocated sk_buff structures
|
2012-09-17 01:27:20 +00:00 |
|
|
atcuno
|
05cb633d45
|
Linux - update mount_cache to work with 2.6.18
|
2012-09-17 00:55:46 +00:00 |
|
|
atcuno
|
1f611157a4
|
Linux - bugfix - update dentry_cache to support old cache name
|
2012-09-16 22:53:48 +00:00 |
|
|
atcuno
|
56736d1d7f
|
Linux - bugfix - update check_afinfo to support centos 2.6.18
|
2012-09-16 21:59:59 +00:00 |
|
|
atcuno
|
74a915194d
|
Linux - bugfix - update calculation of task start time to support 2.6.18 centos
|
2012-09-16 21:50:47 +00:00 |
|
|
atcuno
|
c26b9e534d
|
Linux - add the ability to specify a specific inode to check_fop
|
2012-09-12 23:03:24 +00:00 |
|
|
atcuno
|
48ff833f38
|
Linux - bugfix - make return values consistent in address_in_module
|
2012-09-12 18:28:50 +00:00 |
|
|
atcuno
|
4e8db59dc9
|
Linux - add table name column to check_syscall to differentiate between 32 and 64 bit
|
2012-09-12 00:54:58 +00:00 |
|
|
atcuno
|
cbdef36153
|
Linux - move radix tree and getting files into find_file and update tmpfs to use new code
|
2012-09-12 00:28:36 +00:00 |
|
|
iMHLv2
|
d9095a0c28
|
Linux - prevent messages like 'NoneObject as string: Invalid Address 0xFFFFA047A640, instantiating int' from being displayed with linux_lsmod -P option
|
2012-09-11 20:35:40 +00:00 |
|
|
iMHLv2
|
f1e4666e40
|
Linux - prevent a 'NoneObject as string: Pointer cred invalid' from being displayed in pstree output when analyzing a task_struct that are being deallocated or that started after insmod (i.e. the mm and cred pointers aren't valid
|
2012-09-11 20:16:44 +00:00 |
|
|
iMHLv2
|
af56d92f5e
|
Linux - change the 'What' column in check_afinfo and check_fop to 'Symbol Name'
|
2012-09-11 19:50:27 +00:00 |
|
|
atcuno
|
f4c765cb4e
|
Linux - ensure find_file does not follow invalid directories
|
2012-09-11 19:38:05 +00:00 |
|
|
iMHLv2
|
0ae2b04635
|
Linux - fix plugin description for linux_sk_buff
|
2012-09-11 19:02:26 +00:00 |
|
|
atcuno
|
565a8fda39
|
Linux - change .next to m.next in pkt_queues
|
2012-09-11 17:15:08 +00:00 |
|
|
iMHLv2
|
258f9983cc
|
Linux - add a missing import to sk_buff_cache
|
2012-09-10 23:29:56 +00:00 |
|
|
mike.auty@gmail.com
|
e139eece1a
|
Linux - Fix an error in common.py and shrink a function slightly.
|
2012-09-10 20:45:52 +00:00 |
|
|
atcuno
|
30d782dbd8
|
Linux - remove unnecesary TODOs and change some to FUTURE
|
2012-09-10 20:12:35 +00:00 |
|
|
atcuno
|
39150fc6b5
|
Linux - proc_maps remove an unneeded fixme
|
2012-09-10 20:07:06 +00:00 |
|
|
atcuno
|
fa98736e2a
|
Linux - further cleanup of common for verify_ops, change check_fop and check_afinfo to use
|
2012-09-10 19:40:59 +00:00 |
|
|
atcuno
|
add23cbc31
|
Linux - continue the cleanup of common, update pidhashtable and cpuinfo to reference new code locations
|
2012-09-10 19:12:19 +00:00 |
|
|
atcuno
|
60d3ac6ac4
|
Linux - make get_page_contents use zread
|
2012-09-10 18:52:26 +00:00 |
|
|
atcuno
|
84cab784ea
|
Linux - get rid of phys_addr_of_page for page overlay to_paddr
|
2012-09-10 18:11:53 +00:00 |
|
|
atcuno
|
2a3eb5b70c
|
Linux - remove old sparse code from common
|
2012-09-10 18:05:06 +00:00 |
|
|
atcuno
|
2c345784c0
|
Linux - get rid of get_objs_of_type in kmem_cache
|
2012-09-10 17:49:46 +00:00 |
|
|
atcuno
|
17a6ab5240
|
Linux - clean up tmpfs
|
2012-09-10 17:48:32 +00:00 |
|
|
atcuno
|
f1302f9573
|
Linux - be extra careful with unallocated processes start time
|
2012-09-10 17:35:05 +00:00 |
|
|
atcuno
|
295ff64f4a
|
Linux - clean up pidhashtable
|
2012-09-10 17:33:52 +00:00 |
|
|
iMHLv2
|
3239057d15
|
Linux - remove block string comment from check_creds.py. moving the comment to wiki command reference
|
2012-09-10 16:40:11 +00:00 |
|
|
iMHLv2
|
dd682fa319
|
Linux - dont try to extract bash history from processes whose mm pointer is invalid (i.e. no way to get process AS)
|
2012-09-10 16:34:14 +00:00 |
|
|
iMHLv2
|
9015d18aab
|
Linux - remove FIXME from bash, its already been fixed
|
2012-09-10 16:28:35 +00:00 |
|
|
iMHLv2
|
1194873e05
|
Linux - PEP8 in check_modules.py, fix plugin description, move block string comment to wiki command reference
|
2012-09-10 15:47:55 +00:00 |
|
|
iMHLv2
|
6353f251a4
|
Linux - add a description to the bash plugin
|
2012-09-10 15:43:59 +00:00 |
|
|
mike.auty@gmail.com
|
e017034023
|
Pylint, formatting and styles fixes for all linux plugins.
|
2012-09-10 15:06:57 +00:00 |
|
|
atcuno
|
0210d741f2
|
Linux - typo in check_modules
|
2012-09-10 08:19:20 +00:00 |
|
|
atcuno
|
86d1cb2a76
|
Linux - add check_modules
|
2012-09-10 08:13:07 +00:00 |
|
|
atcuno
|
89850fb8ce
|
Linux - quick fix to slabinfo
|
2012-09-10 07:01:09 +00:00 |
|
|
atcuno
|
3b48439cc8
|
Linux - cleanups in bash from mhl
|
2012-09-10 06:36:32 +00:00 |
|
|
atcuno
|
b8dd3e43d4
|
Linux - add sk_buff_cache
|
2012-09-10 06:04:21 +00:00 |
|
|
atcuno
|
46b55cd531
|
Linux - add support to slabinfo if cache name is not the structure type
|
2012-09-10 05:35:01 +00:00 |
|
|
atcuno
|
6703733b9a
|
Linux - add vma_cache
|
2012-09-10 05:18:35 +00:00 |
|