atcuno 805a6a377c Update mac_dump_maps

2020-03-03 12:21:49 -06:00

..

__init__.py

Merge 2.3-devel into trunk.

2012-10-13 21:31:29 +00:00

adiummsgs.py

mac plugins: adding back pretty printing

2015-03-18 11:43:50 +00:00

apihooks_kernel.py

fixing address

2015-06-29 14:29:17 -04:00

apihooks.py

Mac - fix apihooks backtrace

2016-05-30 10:53:25 -05:00

arp.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

bash_env.py

Mac - revamp process environment variable gathering

2015-11-09 08:55:30 -06:00

bash_hash.py

Mac - bash_hash more corruption protection

2016-02-01 16:23:19 -06:00

bash.py

Mac - fix bash

2015-06-04 14:31:14 -05:00

calendar.py

mac plugins: adding back pretty printing

2015-03-18 11:43:50 +00:00

check_fop.py

Mac - update check_fop through Sierra

2017-08-18 12:48:45 -05:00

check_mig_table.py

Mac - update vtype generation for typedefs and update check_mig_table to use new type when available

2017-08-18 15:05:16 -05:00

check_syscall_shadow.py

mac plugins: adding back pretty printing

2015-03-18 11:43:50 +00:00

check_syscall_table.py

Mac - protect system call enumeration from smear

2017-04-29 16:41:49 -05:00

check_sysctl.py

mac plugins: adding back pretty printing

2015-03-18 11:43:50 +00:00

check_trap_table.py

Mac - make check_trap_table support Yosemite

2015-08-11 15:06:42 -05:00

classes.py

Mac - Add plugins from DFRWS 2015

2016-08-13 21:36:55 -05:00

common.py

Mac - bug fixes for 10.7 support

2015-01-21 15:42:00 -06:00

compressed_swap.py

Mac - add compressed swap parsing

2015-07-27 14:48:08 -05:00

contacts.py

mac plugins: adding back pretty printing

2015-03-18 11:43:50 +00:00

dead_procs.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

dead_sockets.py

Mac - add mac_dead_sockets and mac_moddump

2014-04-25 20:21:13 -04:00

dead_vnodes.py

Mac - update plugin descriptions

2014-08-03 17:24:58 -05:00

devfs.py

Mac - Add plugins from DFRWS 2015

2016-08-13 21:36:55 -05:00

dlyd_maps.py

mac plugins: adding back pretty printing

2015-03-18 11:43:50 +00:00

dmesg.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

dump_files.py

Mac - add mac_recover_filesystem and update file recovery API

2014-06-09 20:49:30 -05:00

dump_map.py

Update mac_dump_maps

2020-03-03 12:21:49 -06:00

find_aslr_shift.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

get_profile.py

Mac - update get_profile

2018-05-09 09:44:57 -05:00

gkextmap.py

Mac - add new threads plugin

2014-12-14 10:14:37 -06:00

ifconfig.py

Update bash and env processing for speed and ifconfig for new versions

2018-05-14 16:15:39 -05:00

interest_handlers.py

Mac - Add plugins from DFRWS 2015

2016-08-13 21:36:55 -05:00

ip_filters.py

Mac - update ip filters to the latest api

2015-08-17 12:05:27 -05:00

kevents.py

Mac - Add plugins from DFRWS 2015

2016-08-13 21:36:55 -05:00

keychaindump.py

mac plugins: adding back pretty printing

2015-03-18 11:43:50 +00:00

ldrmodules.py

mac plugins: adding back pretty printing

2015-03-18 11:43:50 +00:00

librarydump.py

adding pretty print back to more mac plugins

2015-03-18 11:57:00 +00:00

list_files.py

Mac - list_files smear protection

2019-10-01 10:20:28 -05:00

list_kauth_listeners.py

adding pretty print back to more mac plugins

2015-03-18 11:57:00 +00:00

list_kauth_scopes.py

adding pretty print back to more mac plugins

2015-03-18 11:57:00 +00:00

list_raw.py

adding pretty print back to more mac plugins

2015-03-18 11:57:00 +00:00

list_zones.py

Mac - update zone enumeration and handling

2017-08-18 15:57:48 -05:00

lsmod_iokit.py

Mac - protect lsmod_iokit from mem corruption

2015-11-02 23:10:26 -06:00

lsmod.py

Mac - protect lsmod from smear

2017-04-29 16:49:47 -05:00

lsof.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

mac_strings.py

fixing address

2015-06-29 14:29:17 -04:00

mac_volshell.py

Linux & Mac - Fix volshell with -p is used

2014-07-17 15:54:20 -05:00

mac_yarascan.py

Fix the offset printed when using mac_yarascan -R

2018-12-24 07:31:10 +00:00

machine_info.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

malfind.py

Mac - make malfind disassembly match bits of process

2015-08-13 21:14:13 -05:00

memdump.py

add mac_memdump and mac_calendar plugins

2014-05-03 14:26:32 -05:00

moddump.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

mount.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

netconns.py

Mac - update netconns and scanning

2016-06-09 14:11:28 -05:00

netstat.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

notesapp.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

notifiers.py

Mac - better protect notifiers from smear

2019-04-30 08:41:03 -05:00

orphan_threads.py

fixing pydocs for mac_orphan_threads

2015-10-14 10:38:58 -05:00

pgrp_hash_table.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

pid_hash_table.py

fix mac psxview offsets by calling dereference() in pid hash (like pslist and tasks already do)

2015-03-09 23:51:02 -05:00

print_boot_cmdline.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

proc_maps.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

procdump.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

psaux.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

psenv.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

pslist.py

added ppid to pslist unified and test output

2018-03-24 17:25:09 -04:00

pstasks.py

Mac - smear protection on process maps walking and task enumeration

2019-02-27 13:51:49 -06:00

pstree.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

psxview.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

recover_filesystem.py

Mac - stop recover file system from changing file system permissions

2015-12-21 12:45:13 -06:00

route.py

Mac - route cache smear protection

2019-05-21 14:37:01 -05:00

session_hash_table.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

socket_filters.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

threads_simple.py

Mac - update threads_simple to print the current priority instead of the base

2017-08-18 16:10:44 -05:00

threads.py

Mac - update vm_map alias member mapping

2017-08-18 16:03:50 -05:00

timers.py

Mac - Add plugins from DFRWS 2015

2016-08-13 21:36:55 -05:00

trustedbsd.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

version.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

vfsevents.py

Mac - Add plugins from DFRWS 2015

2016-08-13 21:36:55 -05:00

WKdm.py

Mac - add compressed swap parsing

2015-07-27 14:48:08 -05:00