volatilityfoundation-volatility

addrspaces

Add very minor optimizations of not reconstructing the long/longlong structures on each read, as suggested by bcostanzo in pull request #88 .

2014-11-25 17:27:48 +00:00

gui

Merge branch 'unified-output'

2014-11-25 20:04:03 +00:00

linux

Linux - protect against corruption in mount data structures

2014-12-29 17:09:21 -06:00

mac

Mac - update ifconfig

2014-12-21 17:24:16 -06:00

malware

converted idt and gdt

2014-12-05 11:33:38 -05:00

overlays

Linux - update time handling for olderish kernels

2014-12-29 17:08:50 -06:00

registry

Merge branch 'unified-output'

2014-11-25 20:04:03 +00:00

__init__.py

Match the help message to the plugin path separator.

2013-03-27 08:51:26 +00:00

bigpagepools.py

converted bigpagepools

2014-11-17 15:28:33 -05:00

bioskbd.py

converted bioskbd

2014-11-25 16:22:38 -05:00

cmdline.py

Merge branch 'unified-stream-output' into unified-output

2014-11-13 16:21:31 -05:00

common.py

determine V or P offset based on self._config.VIRTUAL for scanners

2014-03-03 09:39:11 -06:00

connections.py

converting connections

2014-11-13 14:04:24 -05:00

connscan.py

converted connscan

2014-11-13 14:09:58 -05:00

crashinfo.py

update crashinfo to support WindowsCrashDumpSpace64BitMap. update DumpType to include 0x5 bitmap dumps

2014-08-03 16:37:55 -05:00

dlldump.py

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

drivermodule.py

Windows - add drivermodules

2014-10-30 14:16:45 -05:00

dumpcerts.py

condense ProcExeDump and ProcMemDump

2014-01-27 18:20:25 -06:00

dumpfiles.py

Added another soundness check to SharedCacheMap: Issue #57

2014-08-04 11:44:16 -04:00

envars.py

converted envars

2014-11-14 15:35:20 -05:00

evtlogs.py

small fix to evtlogs

2014-11-11 17:21:36 -05:00

fileparam.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

filescan.py

converting psscan, filescan, driverscan, mutantscan and symlinkscan

2014-11-11 11:37:57 -05:00

getservicesids.py

converted getservicesids

2014-11-14 15:31:13 -05:00

getsids.py

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

handles.py

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

heaps.py

add the heaps profile modification

2014-01-17 20:59:31 -06:00

hibinfo.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

hpakinfo.py

better fixes to the hpak extract / decompress function

2014-06-16 12:27:31 -05:00

iehistory.py

converted iehistory

2014-11-25 17:49:19 -05:00

imagecopy.py

enhance debug output for image copy errors

2014-06-21 09:48:59 -05:00

imageinfo.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

joblinks.py

converted joblinks

2014-11-13 13:51:43 -05:00

kdbgscan.py

refs #74 enhance kdbgscan performance for win8/2012 x64

2014-08-18 19:23:49 -05:00

kpcrscan.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

machoinfo.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

mbrparser.py

changing email

2014-07-08 18:36:25 -04:00

mftparser.py

more changes

2015-01-05 16:54:45 -05:00

moddump.py

moddump: moving debug error to rendering function

2014-12-29 13:47:07 -05:00

modscan.py

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

modules.py

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

multiscan.py

change how the multiscanner's list of scanners is initialized

2014-09-03 22:11:35 -05:00

netscan.py

converted netscan

2014-11-14 11:27:20 -05:00

notepad.py

add the notepad plugin

2014-07-12 10:27:20 -05:00

objtypescan.py

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

patcher.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

patchguard.py

update timers plugin to work on 64-bit windows (requires pointer decode with patch guard magic)

2014-03-30 11:11:37 +02:00

pooltracker.py

converted pooltracker

2014-11-17 12:12:37 -05:00

privileges.py

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

procdump.py

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

pstree.py

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

raw2dmp.py

refs #89 fixing raw2dmp - make sure to set the DumpType since its now an assertion in the crash AS

2014-09-17 19:10:37 -05:00

sockets.py

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

sockscan.py

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

ssdt.py

converted ssdt

2014-11-14 11:19:30 -05:00

strings.py

making strings more robust when encountering string files with empty lines

2014-11-26 12:49:57 -05:00

taskmods.py

taskmods small fix. Thanks Beni U for reporting

2015-01-02 09:25:13 -05:00

tcaudit.py

spelling correction

2014-12-15 15:24:44 -05:00

timeliner.py

removed unneeded import

2014-12-29 15:10:31 -05:00

vadinfo.py

show file device names in vadinfo output

2014-10-16 10:04:17 -05:00

vboxinfo.py

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

verinfo.py

removed nonessential

2014-11-17 15:29:52 -05:00

vmwareinfo.py

override is_valid_profile for vmwareinfo since its applies to linux/mac

2014-06-20 13:31:48 -05:00

volshell.py

refs #54 displaying types with dynamic attributes (i.e. callable offsets) is not supported in volshell

2014-08-16 14:49:54 -05:00