iMHLv2 26563fdccc add sanity checks to the PoolScanTcpEndpoint results in netscan. these cannot be done with a ScannerCheck because they need to deref pointers in kernel space and we do scanning in physical space

2012-05-18 18:07:00 +00:00

..

addrspaces

Add in gleeda's awesome hibernation patch!

2012-04-06 22:40:55 +00:00

malware

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

overlays

the paged vs non-paged logic is reversed in CheckPoolType for Vista/2008/7. fixes Issue #257.

2012-05-17 14:06:16 +00:00

registry

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

__init__.py

Merge branch 'local/noregistry' into local/trunk

2012-03-08 23:39:19 +00:00

bioskbd.py

Fix inconsistency in commands.command class capitalization.

2012-02-05 23:36:33 +00:00

common.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

connections.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

connscan.py

Remove all unnecessary trailing slashes.

2012-02-26 23:26:52 +00:00

crashinfo.py

Fix up a large number of very minor pylint/indentation/trailing space issues across the tree.

2012-05-14 23:06:56 +00:00

dlldump.py

Convert all *args to *args, **kwargs in __init__ functions.

2012-03-08 20:58:06 +00:00

fileparam.py

Move the Volatility-1.4_rc1 branch over to trunk.

2011-06-29 21:01:19 +00:00

filescan.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

getsids.py

Fix up a large number of very minor pylint/indentation/trailing space issues across the tree.

2012-05-14 23:06:56 +00:00

handles.py

Fix up a large number of very minor pylint/indentation/trailing space issues across the tree.

2012-05-14 23:06:56 +00:00

hibinfo.py

Remove the old handmade KGDTENTRY vtypes. Fixes issue 211.

2012-02-18 11:01:17 +00:00

imagecopy.py

Fix up error reporting and file flushing in imagecopy.

2012-05-14 19:27:55 +00:00

imageinfo.py

change how the PEB.CSDVersion string in imageinfo and the function name string in _LDR_DATA_TABLE_ENTRY.getprocaddress() are handled

2012-04-10 01:07:11 +00:00

kdbgscan.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

kpcrscan.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

moddump.py

Change the moddump offset flag to a base flag to better fit the values. Fixes issue 254.

2012-05-14 20:43:09 +00:00

modscan.py

update modscan, filescan, and driverscan to suppress NoneObject as string warnings (see r1563).

2012-03-23 14:17:51 +00:00

modules.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

netscan.py

add sanity checks to the PoolScanTcpEndpoint results in netscan. these cannot be done with a ScannerCheck because they need to deref pointers in kernel space and we do scanning in physical space

2012-05-18 18:07:00 +00:00

patcher.py

Convert all *args to *args, **kwargs in __init__ functions.

2012-03-08 20:58:06 +00:00

procdump.py

fix a bug in all plugins that inherit from ProcExeDump. in particular, they crash when extracting a PE whose size of headers (nt_header.OptionalHeader.SizeOfHeaders) encompasses one or more pages that are unavailable. use zread instead of read.

2012-04-10 17:09:08 +00:00

pstree.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

sockets.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

sockscan.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

ssdt.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

strings.py

Convert all *args to *args, **kwargs in __init__ functions.

2012-03-08 20:58:06 +00:00

taskmods.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

userassist.py

Fix up a large number of very minor pylint/indentation/trailing space issues across the tree.

2012-05-14 23:06:56 +00:00

vadinfo.py

Fix up a large number of very minor pylint/indentation/trailing space issues across the tree.

2012-05-14 23:06:56 +00:00

volshell.py

Fix up a large number of very minor pylint/indentation/trailing space issues across the tree.

2012-05-14 23:06:56 +00:00