iMHLv2 1e8e2d4ecd the metadata memory_model value can be directly assigned to table_name in linux_check_syscall

2013-02-12 20:50:39 +00:00

..

__init__.py

Merge in most of linux-support.

2012-08-16 11:00:06 +00:00

arp.py

Pylint, formatting and styles fixes for all linux plugins.

2012-09-10 15:06:57 +00:00

bash.py

Linux - dont try to extract bash history from processes whose mm pointer is invalid (i.e. no way to get process AS)

2012-09-10 16:34:14 +00:00

check_afinfo.py

Linux - bugfix - update check_afinfo to support centos 2.6.18

2012-09-16 21:59:59 +00:00

check_creds.py

Linux - remove block string comment from check_creds.py. moving the comment to wiki command reference

2012-09-10 16:40:11 +00:00

check_evt_arm.py

some whitespace in linux_check_evt_arm

2013-02-05 20:08:00 +00:00

check_fops.py

Linux - add the ability to specify a specific inode to check_fop

2012-09-12 23:03:24 +00:00

check_idt.py

Pylint, formatting and styles fixes for all linux plugins.

2012-09-10 15:06:57 +00:00

check_modules.py

Linux - PEP8 in check_modules.py, fix plugin description, move block string comment to wiki command reference

2012-09-10 15:47:55 +00:00

check_syscall_arm.py

some whitespace in linux_check_syscall_arm

2013-02-05 20:08:55 +00:00

check_syscall.py

the metadata memory_model value can be directly assigned to table_name in linux_check_syscall

2013-02-12 20:50:39 +00:00

common.py

Linux - bugfix - update calculation of task start time to support 2.6.18 centos

2012-09-16 21:50:47 +00:00

cpuinfo.py

Linux - continue the cleanup of common, update pidhashtable and cpuinfo to reference new code locations

2012-09-10 19:12:19 +00:00

dentry_cache.py

Minor pylint tidy up.

2012-10-14 01:00:31 +00:00

dmesg.py

Pylint, formatting and styles fixes for all linux plugins.

2012-09-10 15:06:57 +00:00

dump_map.py

Linux - switch dump_map to zread

2013-01-22 05:59:19 +00:00

find_file.py

Merge 2.3-devel into trunk.

2012-10-13 21:31:29 +00:00

flags.py

create a Flags object for handling rwx, r-x style output for linux, instead of using the format_perms() method attached to a specific plugin

2013-02-12 20:27:29 +00:00

ifconfig.py

Pylint, formatting and styles fixes for all linux plugins.

2012-09-10 15:06:57 +00:00

iomem.py

Linux - make each plugin get its own address space

2012-09-09 18:18:57 +00:00

keyboard_notifier.py

Linux - add joes plugins for detecting in-kernel keyloggers

2012-10-15 18:28:55 +00:00

linux_volshell.py

add an initial mac_volshell plugin

2013-02-04 15:15:05 +00:00

linux_yarascan.py

add the linux yarascan plugin

2013-02-05 15:53:57 +00:00

lsmod.py

add the linux_moddump plugin

2013-02-05 20:02:31 +00:00

lsof.py

Pylint, formatting and styles fixes for all linux plugins.

2012-09-10 15:06:57 +00:00

mount_cache.py

Linux - update mount_cache to work with 2.6.18

2012-09-17 00:55:46 +00:00

mount.py

Pylint, formatting and styles fixes for all linux plugins.

2012-09-10 15:06:57 +00:00

netstat.py

Linux - make netstat inherit from pslist

2012-11-23 03:15:26 +00:00

pidhashtable.py

Linux - continue the cleanup of common, update pidhashtable and cpuinfo to reference new code locations

2012-09-10 19:12:19 +00:00

pkt_queues.py

Linux - change .next to m.next in pkt_queues

2012-09-11 17:15:08 +00:00

proc_maps.py

remove unnecessary import from proc_maps

2013-02-12 20:44:10 +00:00

psaux.py

Linux - fix psaux table formatting

2012-10-15 17:38:26 +00:00

pslist_cache.py

Pylint, formatting and styles fixes for all linux plugins.

2012-09-10 15:06:57 +00:00

pslist.py

fix a bug in the new dtb printing column for linux_pslist

2013-02-04 04:19:22 +00:00

pstree.py

Linux - prevent a 'NoneObject as string: Pointer cred invalid' from being displayed in pstree output when analyzing a task_struct that are being deallocated or that started after insmod (i.e. the mm and cred pointers aren't valid

2012-09-11 20:16:44 +00:00

psxview.py

Linux - remove unnecesary TODOs and change some to FUTURE

2012-09-10 20:12:35 +00:00

route_cache.py

Linux - bugfix - have route_cache walk the entire chain

2012-09-18 03:32:12 +00:00

sk_buff_cache.py

Minor pylint tidy up.

2012-10-14 01:00:31 +00:00

slab_info.py

Linux - get rid of get_objs_of_type in kmem_cache

2012-09-10 17:49:46 +00:00

tmpfs.py

Linux - move radix tree and getting files into find_file and update tmpfs to use new code

2012-09-12 00:28:36 +00:00

tty_check.py

Linux - add joes plugins for detecting in-kernel keyloggers

2012-10-15 18:28:55 +00:00

vma_cache.py

Linux - add vma_cache

2012-09-10 05:18:35 +00:00