Michael Ligh 3344ac2ad7 refs #183 memdump's debug message reports a process offset instead of file offset

2015-10-12 13:19:45 -05:00

..

addrspaces

fixing address

2015-06-29 14:29:17 -04:00

gui

Merge pull request #185 from bridgeythegeek/master

2015-08-28 12:04:07 -04:00

linux

Linux - add back render text to threads

2015-09-09 21:21:50 -05:00

mac

Mac - update bash env var handling

2015-08-24 23:40:28 -05:00

malware

add servicediff for identifying hidden/unlinked services by comparing the records in memory to the records in the registry

2015-10-09 11:34:41 -04:00

overlays

adding back the old kpcr trick

2015-09-01 10:01:20 +02:00

registry

use the existing API for registry path names in several places

2015-07-08 18:32:48 -05:00

__init__.py

Match the help message to the plugin path separator.

2013-03-27 08:51:26 +00:00

bigpagepools.py

fixing address

2015-06-29 14:29:17 -04:00

bioskbd.py

more pretty print

2015-03-18 11:14:55 +00:00

cmdline.py

more pretty print

2015-03-18 11:14:55 +00:00

common.py

determine V or P offset based on self._config.VIRTUAL for scanners

2014-03-03 09:39:11 -06:00

connections.py

adding back pretty printing.

2015-03-18 09:59:02 +00:00

connscan.py

adding back pretty printing.

2015-03-18 09:59:02 +00:00

crashinfo.py

converted crashinfo

2015-02-23 09:08:10 -05:00

dlldump.py

adding back pretty printing.

2015-03-18 09:59:02 +00:00

drivermodule.py

Unified output for drivermodule plugin.

2015-05-18 10:57:30 -04:00

dumpcerts.py

need to check for yara before using it

2015-08-26 15:48:43 -04:00

dumpfiles.py

removing unneeded comments

2015-03-16 11:44:14 +00:00

envars.py

adding back pretty printing.

2015-03-18 09:59:02 +00:00

evtlogs.py

adding back pretty printing.

2015-03-18 09:59:02 +00:00

fileparam.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

filescan.py

adding back pretty printing.

2015-03-18 09:59:02 +00:00

getservicesids.py

adding back pretty printing.

2015-03-18 09:59:02 +00:00

getsids.py

update the well known SIDs for windows in getsids.py

2015-09-29 14:12:09 -05:00

handles.py

adding back pretty printing.

2015-03-18 09:59:02 +00:00

heaps.py

fixing address

2015-06-29 14:29:17 -04:00

hibinfo.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

hpakinfo.py

better fixes to the hpak extract / decompress function

2014-06-16 12:27:31 -05:00

iehistory.py

refs #206 limit iehistory scan to vads that contain index.dat

2015-04-02 09:17:49 -05:00

imagecopy.py

Update imagecopy.py to provide bytes copied stats

2015-02-27 17:35:24 +00:00

imageinfo.py

Unified output for imageinfo plugin.

2015-05-13 16:35:19 -04:00

joblinks.py

adding back pretty printing.

2015-03-18 09:59:02 +00:00

kdbgscan.py

typo fix

2015-08-31 10:30:29 +02:00

kpcrscan.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

machoinfo.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

mbrparser.py

converting mbrparser

2015-03-17 11:54:58 +00:00

mftparser.py

changes to mftparser

2015-06-08 20:11:03 -04:00

moddump.py

prevent the inherited --name option from displaying for moddump

2015-09-05 17:28:47 +02:00

modscan.py

adding back pretty printing.

2015-03-18 09:59:02 +00:00

modules.py

adding back pretty printing.

2015-03-18 09:59:02 +00:00

multiscan.py

Remove invalid callbacks from multiscan for Windows XP and earlier

2015-04-10 18:41:48 +02:00

netscan.py

adding back pretty printing.

2015-03-18 09:59:02 +00:00

notepad.py

add the notepad plugin

2014-07-12 10:27:20 -05:00

objtypescan.py

adding back pretty printing.

2015-03-18 09:59:02 +00:00

patcher.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

patchguard.py

update timers plugin to work on 64-bit windows (requires pointer decode with patch guard magic)

2014-03-30 11:11:37 +02:00

pooltracker.py

fixing address

2015-06-29 14:29:17 -04:00

privileges.py

adding back pretty printing.

2015-03-18 09:59:02 +00:00

procdump.py

adding back pretty printing.

2015-03-18 09:59:02 +00:00

pstree.py

adding back pretty printing.

2015-03-18 09:59:02 +00:00

raw2dmp.py

refs #89 fixing raw2dmp - make sure to set the DumpType since its now an assertion in the crash AS

2014-09-17 19:10:37 -05:00

sockets.py

adding back pretty printing.

2015-03-18 09:59:02 +00:00

sockscan.py

adding back pretty printing.

2015-03-18 09:59:02 +00:00

ssdt.py

abort the parsing of windows ssdt structures if we encounter an invalid descriptor

2015-06-26 18:18:14 -05:00

strings.py

fix a bug in strings translation

2015-01-04 15:50:31 -06:00

taskmods.py

refs #183 memdump's debug message reports a process offset instead of file offset

2015-10-12 13:19:45 -05:00

tcaudit.py

spelling correction

2014-12-15 15:24:44 -05:00

timeliner.py

removed unneeded import

2014-12-29 15:10:31 -05:00

vadinfo.py

fix a bug info vadtree's dot renderer wrt fill color

2015-10-07 16:20:19 -04:00

vboxinfo.py

add qemuinfo plugin

2015-04-01 22:24:11 -05:00

verinfo.py

small fix spotted by Beni U.

2015-02-02 11:08:43 -05:00

vmwareinfo.py

override is_valid_profile for vmwareinfo since its applies to linux/mac

2014-06-20 13:31:48 -05:00

volshell.py

refs #54 displaying types with dynamic attributes (i.e. callable offsets) is not supported in volshell

2014-08-16 14:49:54 -05:00