iMHLv2 081806196c add a plugin to print environment variables for x86 and x64 windows processes

2012-06-05 19:34:47 +00:00

..

addrspaces

add AW's awesome patch for x64 Windbg Crash Format Support. fixes issue #264

2012-05-23 16:37:49 +00:00

malware

add a plugin to print environment variables for x86 and x64 windows processes

2012-06-05 19:34:47 +00:00

overlays

add object class for _KDDEBUGGER_DATA64 with APIs for obtaining the service pack (we no longer need to rely on PEB for this), enumerating KPCRs, and finding _DBGKD_GET_VERSION64

2012-06-05 16:16:03 +00:00

registry

Reformat hivescan plugin output.

2012-06-03 15:58:20 +00:00

__init__.py

Merge branch 'local/noregistry' into local/trunk

2012-03-08 23:39:19 +00:00

bioskbd.py

Fix inconsistency in commands.command class capitalization.

2012-02-05 23:36:33 +00:00

common.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

connections.py

Fix connections plugin offset output.

2012-05-22 08:26:58 +00:00

connscan.py

Remove all unnecessary trailing slashes.

2012-02-26 23:26:52 +00:00

crashinfo.py

Fix up a large number of very minor pylint/indentation/trailing space issues across the tree.

2012-05-14 23:06:56 +00:00

dlldump.py

Convert all *args to *args, **kwargs in __init__ functions.

2012-03-08 20:58:06 +00:00

fileparam.py

Move the Volatility-1.4_rc1 branch over to trunk.

2011-06-29 21:01:19 +00:00

filescan.py

Fix up filescan output formatting.

2012-06-03 18:01:27 +00:00

getsids.py

Fix up a large number of very minor pylint/indentation/trailing space issues across the tree.

2012-05-14 23:06:56 +00:00

handles.py

Convert handles plugin across to using table formatting.

2012-05-22 08:27:12 +00:00

hibinfo.py

Remove the old handmade KGDTENTRY vtypes. Fixes issue 211.

2012-02-18 11:01:17 +00:00

imagecopy.py

Fix up error reporting and file flushing in imagecopy.

2012-05-14 19:27:55 +00:00

imageinfo.py

import kdbgscan as kdbgscan instead of as kdbg, so we can have a variable with the name kdbg. seems like this is better than importing as kdbg and then making a variable named kdbg_obj or something.

2012-06-05 16:54:36 +00:00

kdbgscan.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

kpcrscan.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

moddump.py

Change the moddump offset flag to a base flag to better fit the values. Fixes issue 254.

2012-05-14 20:43:09 +00:00

modscan.py

Convert over modscan and thrdscan to the table formatting.

2012-05-22 08:27:19 +00:00

modules.py

Convert modules plugin over to table formatting, and clean-up the output and column ordering.

2012-05-22 08:27:34 +00:00

netscan.py

add sanity checks to the PoolScanTcpEndpoint results in netscan. these cannot be done with a ScannerCheck because they need to deref pointers in kernel space and we do scanning in physical space

2012-05-18 18:07:00 +00:00

patcher.py

Convert all *args to *args, **kwargs in __init__ functions.

2012-03-08 20:58:06 +00:00

procdump.py

fix a bug in all plugins that inherit from ProcExeDump. in particular, they crash when extracting a PE whose size of headers (nt_header.OptionalHeader.SizeOfHeaders) encompasses one or more pages that are unavailable. use zread instead of read.

2012-04-10 17:09:08 +00:00

pstree.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

sockets.py

Convert sockets plugin to table output.

2012-05-22 08:27:05 +00:00

sockscan.py

Fix up sockscan output formatting.

2012-06-03 17:40:33 +00:00

ssdt.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

strings.py

Convert all *args to *args, **kwargs in __init__ functions.

2012-03-08 20:58:06 +00:00

taskmods.py

Fixes issue 266.

2012-06-03 14:55:44 +00:00

userassist.py

Fix up a large number of very minor pylint/indentation/trailing space issues across the tree.

2012-05-14 23:06:56 +00:00

vadinfo.py

Add in support for the table output in a couple of plugins.

2012-05-22 08:26:41 +00:00

volshell.py

add a simple dq command (print qwords at address) to volshell for x64 addresses

2012-05-21 15:26:52 +00:00