volatilityfoundation-volatility

__init__.py

Merge in most of linux-support.

2012-08-16 11:00:06 +00:00

apihooks.py

Linux - add linux_apihooks, update plthooks

2014-07-08 05:11:43 -05:00

arp.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

banner.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

bash_hash.py

Linux - add bash_hash plugin from book vm (new plugin)

2014-03-20 14:30:09 -05:00

bash.py

Linux - update bash recovery to be much faster

2014-06-26 02:41:47 -05:00

check_afinfo.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

check_creds.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

check_evt_arm.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

check_fops.py

Linux - add check_fops from book vm

2014-03-20 14:19:37 -05:00

check_idt.py

Linux - add saving the virt and phys offset of IDT descriptors

2014-01-17 20:33:25 -06:00

check_inline_kernel.py

Linux - update linux_check_inline_kernel

2014-07-08 14:03:47 -05:00

check_modules.py

Linux - update check_modules from book vm

2014-03-20 14:00:16 -05:00

check_syscall_arm.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

check_syscall.py

Linux - update check syscall to not bail if no index file given

2014-04-15 15:36:26 -05:00

common.py

Linux - update dname translation for 3.13+

2014-07-08 13:09:49 -05:00

cpuinfo.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

dentry_cache.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

dmesg.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

dump_map.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

elfs.py

Linux - add linux_elfs and new linux ELF APIs

2014-07-05 22:15:06 -05:00

enumerate_files.py

Linux - update enumerate_files

2014-06-16 03:16:03 -05:00

find_file.py

Linux - close issue 504 with patch from submitter

2014-07-08 08:45:31 -05:00

flags.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

hidden_modules.py

Linux - add all the new plugins from book

2014-03-20 15:10:48 -05:00

ifconfig.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

info_regs.py

Linux - add all the new plugins from book

2014-03-20 15:10:48 -05:00

iomem.py

Linux - update iomem from book vm

2014-03-20 14:03:46 -05:00

kernel_opened_files.py

Linux - update kernel_opened_files

2014-07-09 04:13:45 -05:00

keyboard_notifiers.py

Linux - rename keyboard_notifier to keyboard_notifiers

2014-05-27 09:23:59 -05:00

ldrmodules.py

Linux - switch all code to vm_name

2014-07-08 05:31:12 -05:00

libc_env.py

Linux - update bash_env

2014-06-26 01:47:20 -05:00

library_list.py

Linux - add all the new plugins from book

2014-03-20 15:10:48 -05:00

librarydump.py

Linux - update librarydump

2014-07-14 18:50:07 -05:00

lime.py

Linux - add the new limeinfo plugin

2014-03-20 14:57:56 -05:00

linux_strings.py

refs #15 fix a few bugs in the linux strings plugin

2014-01-28 16:22:54 -06:00

linux_truecrypt.py

add linux true crypt passphrase plugin

2014-05-27 11:05:21 -05:00

linux_volshell.py

Linux - implement set context with physical offset from Jamie

2014-07-15 15:10:03 -05:00

linux_yarascan.py

refs #2 fixing -R and -s args to linux_yarascan and mac_yarascan

2014-05-30 00:22:51 -05:00

list_raw.py

Linux - make linux_list_promisc support (very) old kernels

2014-06-04 14:16:27 -05:00

lsmod.py

Linux - update lsmod option to not conflict with linux_strings

2014-07-01 23:32:45 -05:00

lsof.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

malfind.py

Linux - switch all code to vm_name

2014-07-08 05:31:12 -05:00

mount_cache.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

mount.py

Linux - update linux_mount

2014-07-08 21:32:47 -05:00

netfiler.py

Linux - minor updates to support 3.16

2014-07-15 07:09:30 -05:00

netstat.py

Linux - update linux_netstat to not skip non-named unix sockets and to print inode number

2014-05-27 09:43:16 -05:00

pidhashtable.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

pkt_queues.py

Linux - update pkt quues to new netstat interface

2014-06-25 16:24:49 -05:00

plthook.py

Linux - remove unused code in plthooks

2014-07-14 19:13:36 -05:00

proc_maps_rb.py

Linux - add all the new plugins from book

2014-03-20 15:10:48 -05:00

proc_maps.py

Linux - switch all code to vm_name

2014-07-08 05:31:12 -05:00

procdump.py

Linux - make procdump and librarydump use same functions

2014-07-05 22:34:03 -05:00

process_hollow.py

Linux - fix bug in linux_process_hollow

2014-06-25 16:27:00 -05:00

process_info.py

Linux - edit plugin

2014-07-12 23:31:44 -05:00

process_stack.py

Linux - add all the new plugins from book

2014-03-20 15:10:48 -05:00

psaux.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

psenv.py

Linux - add new psenv plugin from book

2014-03-20 14:50:15 -05:00

pslist_cache.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

pslist.py

Linux - implement set context with physical offset from Jamie

2014-07-15 15:10:03 -05:00

pstree.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

psxview.py

Linux - add psxview from book vm

2014-03-20 14:46:12 -05:00

recover_filesystem.py

Linux - update recover_filesystem

2014-05-27 08:56:07 -05:00

route_cache.py

Linux - linux_route_cache - add optional hostname resolution

2014-05-27 09:20:15 -05:00

sk_buff_cache.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

slab_info.py

Linux - fix bug in dentry cache reported by Golden

2014-05-27 08:04:59 -05:00

threads.py

Linux - add all the new plugins from book

2014-03-20 15:10:48 -05:00

tmpfs.py

Linux - add -L/--listfiles option to linux_find_file

2014-05-27 10:18:44 -05:00

tty_check.py

Linux - tty check

2014-04-15 16:17:31 -05:00

vma_cache.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00