gleeda 7c392f1f86 moving call to get currentcontrolset (we don't need to get it every iteration of the loop)

2014-05-20 21:42:19 -04:00

..

__init__.py

make a future home for malware plugins in volatility/plugins/malware

2012-03-08 19:25:21 +00:00

apihooks.py

apihooks: removing unneeded --memory option inherited from procdump

2014-05-08 12:01:48 -04:00

callbacks.py

update callbacks for win7 x64 (other x64 will need verifying)

2014-03-28 22:11:45 -05:00

cmdhistory.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

devicetree.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

idt.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

impscan.py

disable the #include output in impscan idc format

2014-04-10 18:59:13 -05:00

malfind.py

move the _EPROCESS methods from malware.py into windows.py. remove the MalwareObjectClasesXP profile modification

2014-03-24 18:06:21 -05:00

psxview.py

psxview apply rules patch

2014-01-18 22:27:11 -06:00

svcscan.py

moving call to get currentcontrolset (we don't need to get it every iteration of the loop)

2014-05-20 21:42:19 -04:00

threads.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

timers.py

update timers plugin to work on 64-bit windows (requires pointer decode with patch guard magic)

2014-03-30 11:11:37 +02:00