gleeda 6c7d95bdac Merge pull request #243 from bridgeythegeek/master ...

Add editbox plugin; strings optionally reports ImageFileName.

2016-01-18 16:49:18 -05:00

..

vtypes

comment out 2 unnamed (and unused) vtypes that conflict with other vtypes

2015-10-18 18:27:03 -05:00

__init__.py

add the win32k suite. reviewed and tested by gleeda, aw, and ikelos

2012-09-05 02:09:58 +00:00

atoms.py

more pretty print

2015-03-18 11:14:55 +00:00

clipboard.py

converted clipboard

2015-03-30 13:07:12 -04:00

constants.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

desktops.py

converted deskscan

2015-04-08 14:28:56 -04:00

editbox.py

add Adam Bridge's edit box plugin (see https://github.com/volatilityfoundation/volatility/pull/243)

2015-10-14 11:38:00 -05:00

eventhooks.py

remove the profile restriction from event hooks

2014-06-20 23:47:13 -05:00

gahti.py

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

gditimers.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

messagehooks.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

screenshot.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

sessions.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

userhandles.py

lift the profile restriction from clipboard and user handles

2014-06-20 22:46:11 -05:00

win32k_core.py

fix the atoms & atomscan plugins on win7sp1x64 samples with a recent patch that changed the offset of NumBuckets

2015-07-07 19:07:17 -05:00

windows.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

windowstations.py

refs #73 avoid windows stations with no desktops. ignore desktops without names

2014-08-16 13:42:52 -05:00