Andrew Case 447d2c4932 Merge pull request #297 from williamshowalter/mac-getprofile-10.11 ...

Mac - Updated mac_get_profile for El Capitan point releases

2016-05-09 12:37:11 -07:00

..

__init__.py

Merge 2.3-devel into trunk.

2012-10-13 21:31:29 +00:00

adiummsgs.py

mac plugins: adding back pretty printing

2015-03-18 11:43:50 +00:00

apihooks_kernel.py

fixing address

2015-06-29 14:29:17 -04:00

apihooks.py

mac plugins: adding back pretty printing

2015-03-18 11:43:50 +00:00

arp.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

bash_env.py

Mac - revamp process environment variable gathering

2015-11-09 08:55:30 -06:00

bash_hash.py

Mac - bash_hash more corruption protection

2016-02-01 16:23:19 -06:00

bash.py

Mac - fix bash

2015-06-04 14:31:14 -05:00

calendar.py

mac plugins: adding back pretty printing

2015-03-18 11:43:50 +00:00

check_mig_table.py

mac plugins: adding back pretty printing

2015-03-18 11:43:50 +00:00

check_syscall_shadow.py

mac plugins: adding back pretty printing

2015-03-18 11:43:50 +00:00

check_syscall_table.py

mac plugins: adding back pretty printing

2015-03-18 11:43:50 +00:00

check_sysctl.py

mac plugins: adding back pretty printing

2015-03-18 11:43:50 +00:00

check_trap_table.py

Mac - make check_trap_table support Yosemite

2015-08-11 15:06:42 -05:00

common.py

Mac - bug fixes for 10.7 support

2015-01-21 15:42:00 -06:00

compressed_swap.py

Mac - add compressed swap parsing

2015-07-27 14:48:08 -05:00

contacts.py

mac plugins: adding back pretty printing

2015-03-18 11:43:50 +00:00

dead_procs.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

dead_sockets.py

Mac - add mac_dead_sockets and mac_moddump

2014-04-25 20:21:13 -04:00

dead_vnodes.py

Mac - update plugin descriptions

2014-08-03 17:24:58 -05:00

dlyd_maps.py

mac plugins: adding back pretty printing

2015-03-18 11:43:50 +00:00

dmesg.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

dump_files.py

Mac - add mac_recover_filesystem and update file recovery API

2014-06-09 20:49:30 -05:00

dump_map.py

Mac - add compressed swap parsing

2015-07-27 14:48:08 -05:00

find_aslr_shift.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

get_profile.py

Mac - Updated mac_get_profile for El Capitan point releases and later Yosemite builds.

2016-04-19 09:58:32 -05:00

gkextmap.py

Mac - add new threads plugin

2014-12-14 10:14:37 -06:00

ifconfig.py

Mac - update ifconfig

2014-12-21 17:24:16 -06:00

ip_filters.py

Mac - update ip filters to the latest api

2015-08-17 12:05:27 -05:00

keychaindump.py

mac plugins: adding back pretty printing

2015-03-18 11:43:50 +00:00

ldrmodules.py

mac plugins: adding back pretty printing

2015-03-18 11:43:50 +00:00

librarydump.py

adding pretty print back to more mac plugins

2015-03-18 11:57:00 +00:00

list_files.py

final set of changes to mac_list_files 1) add a static method API 2) add a show orphans option 3) add recursive lookups for parents that aren't in the vnode list 4) fix missing and extra slashes in file paths

2016-02-02 22:19:02 -08:00

list_kauth_listeners.py

adding pretty print back to more mac plugins

2015-03-18 11:57:00 +00:00

list_kauth_scopes.py

adding pretty print back to more mac plugins

2015-03-18 11:57:00 +00:00

list_raw.py

adding pretty print back to more mac plugins

2015-03-18 11:57:00 +00:00

list_zones.py

adding pretty print back to more mac plugins

2015-03-18 11:57:00 +00:00

lsmod_iokit.py

Mac - protect lsmod_iokit from mem corruption

2015-11-02 23:10:26 -06:00

lsmod.py

adding pretty print back to more mac plugins

2015-03-18 11:57:00 +00:00

lsof.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

mac_strings.py

fixing address

2015-06-29 14:29:17 -04:00

mac_volshell.py

Linux & Mac - Fix volshell with -p is used

2014-07-17 15:54:20 -05:00

mac_yarascan.py

add --max-size (default: 1GB) option to mac yarascan and dump_maps. warn when larger maps are skipped

2015-06-30 09:49:16 -05:00

machine_info.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

malfind.py

Mac - make malfind disassembly match bits of process

2015-08-13 21:14:13 -05:00

memdump.py

add mac_memdump and mac_calendar plugins

2014-05-03 14:26:32 -05:00

moddump.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

mount.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

netconns.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

netstat.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

notesapp.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

notifiers.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

orphan_threads.py

fixing pydocs for mac_orphan_threads

2015-10-14 10:38:58 -05:00

pgrp_hash_table.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

pid_hash_table.py

fix mac psxview offsets by calling dereference() in pid hash (like pslist and tasks already do)

2015-03-09 23:51:02 -05:00

print_boot_cmdline.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

proc_maps.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

procdump.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

psaux.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

psenv.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

pslist.py

Mac - unify pslist and tasks code, add T option

2016-04-26 10:25:48 -05:00

pstasks.py

Mac - unify pslist and tasks code, add T option

2016-04-26 10:25:48 -05:00

pstree.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

psxview.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

recover_filesystem.py

Mac - stop recover file system from changing file system permissions

2015-12-21 12:45:13 -06:00

route.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

session_hash_table.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

socket_filters.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

threads_simple.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

threads.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

trustedbsd.py

mac: finished adding back pretty printing

2015-03-18 13:24:29 +00:00

version.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

WKdm.py

Mac - add compressed swap parsing

2015-07-27 14:48:08 -05:00