iMHLv2 d96cbdd0a2 update apihooks to detect JMP FAR instructions. contributed and tested on an SSDT root kit by Stewart McIntyre

2014-07-04 11:43:44 -05:00

..

plugins

update apihooks to detect JMP FAR instructions. contributed and tested on an SSDT root kit by Stewart McIntyre

2014-07-04 11:43:44 -05:00

win32

small fix for issue #41

2014-07-03 23:00:20 -04:00

__init__.py

Move the Volatility-1.4_rc1 branch over to trunk.

2011-06-29 21:01:19 +00:00

addrspace.py

reverting forced profile

2014-05-21 22:58:16 -04:00

cache.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

commands.py

minor fix and clarification in comment

2014-04-17 19:22:09 -04:00

conf.py

sync with r3514

2013-10-08 01:04:26 -04:00

constants.py

bump to 2.4 beta

2014-01-23 21:53:39 -08:00

debug.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

dwarf.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

exceptions.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

fmtspec.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

obj.py

removing uneeded code

2014-06-25 17:50:07 -04:00

poolscan.py

add the CheckPoolSize check back, it used by some backward compatible plugins

2014-06-17 12:33:00 -05:00

protos.py

Move the Volatility-1.4_rc1 branch over to trunk.

2011-06-29 21:01:19 +00:00

registry.py

sync with r3514

2013-10-08 01:04:26 -04:00

scan.py

remove the scan.PoolScanner its been replaced by poolscan.PoolScanner

2014-03-26 15:33:37 -05:00

timefmt.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

utils.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00