iMHLv2 8bd862b2aa fix a UnicodeEncodeError when dlldump prints module names

2012-07-07 23:24:27 +00:00

..

addrspaces

add AW's crash dump x64 patch, including the raw2dmp plugin. Fixes Issue #177

2012-06-05 19:50:04 +00:00

malware

Apply SanityCheckExceptions that can be disabled/ignored using the --unsafe/-u flag. Fixes issue 243.

2012-07-07 19:19:58 +00:00

overlays

Apply SanityCheckExceptions that can be disabled/ignored using the --unsafe/-u flag. Fixes issue 243.

2012-07-07 19:19:58 +00:00

registry

Move hivedump to the printkey module, since it prints registry data, rather than having anything to do with crypto. Fixes issue 276.

2012-06-25 18:59:25 +00:00

__init__.py

Merge branch 'local/noregistry' into local/trunk

2012-03-08 23:39:19 +00:00

bioskbd.py

Fix inconsistency in commands.command class capitalization.

2012-02-05 23:36:33 +00:00

common.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

connections.py

Fix connections plugin offset output.

2012-05-22 08:26:58 +00:00

connscan.py

Remove all unnecessary trailing slashes.

2012-02-26 23:26:52 +00:00

crashinfo.py

Minor pylintage.

2012-06-10 11:51:02 +00:00

dlldump.py

fix a UnicodeEncodeError when dlldump prints module names

2012-07-07 23:24:27 +00:00

envars.py

per request, move envars plugin to a separate file in core

2012-06-12 13:26:55 +00:00

fileparam.py

Move the Volatility-1.4_rc1 branch over to trunk.

2011-06-29 21:01:19 +00:00

filescan.py

Fix up filescan output formatting.

2012-06-03 18:01:27 +00:00

getsids.py

Fix up a large number of very minor pylint/indentation/trailing space issues across the tree.

2012-05-14 23:06:56 +00:00

handles.py

Convert handles plugin across to using table formatting.

2012-05-22 08:27:12 +00:00

hibinfo.py

Remove the old handmade KGDTENTRY vtypes. Fixes issue 211.

2012-02-18 11:01:17 +00:00

imagecopy.py

Fixes issue 273.

2012-06-15 22:36:07 +00:00

imageinfo.py

kdbgscan output is now pretty verbose, compared to the previous version which just output P and V offsets. this will help distinguish between FPs and also should contain the necessary fields for auto-selecting the profile when we get to that. reference: issue #268

2012-06-12 22:49:32 +00:00

kdbgscan.py

Apply SanityCheckExceptions that can be disabled/ignored using the --unsafe/-u flag. Fixes issue 243.

2012-07-07 19:19:58 +00:00

kpcrscan.py

kpcrscan is more verbose now

2012-06-18 14:34:14 +00:00

moddump.py

Apply SanityCheckExceptions that can be disabled/ignored using the --unsafe/-u flag. Fixes issue 243.

2012-07-07 19:19:58 +00:00

modscan.py

Convert over modscan and thrdscan to the table formatting.

2012-05-22 08:27:19 +00:00

modules.py

Convert modules plugin over to table formatting, and clean-up the output and column ordering.

2012-05-22 08:27:34 +00:00

netscan.py

add sanity checks to the PoolScanTcpEndpoint results in netscan. these cannot be done with a ScannerCheck because they need to deref pointers in kernel space and we do scanning in physical space

2012-05-18 18:07:00 +00:00

patcher.py

Convert all *args to *args, **kwargs in __init__ functions.

2012-03-08 20:58:06 +00:00

procdump.py

Apply SanityCheckExceptions that can be disabled/ignored using the --unsafe/-u flag. Fixes issue 243.

2012-07-07 19:19:58 +00:00

pstree.py

the task_info dictionary in pstree is unnecessary

2012-06-18 15:07:54 +00:00

raw2dmp.py

Remove unnecessary .v() calls from raw2dmp and tidy a few bits.

2012-06-10 12:42:37 +00:00

sockets.py

Convert sockets plugin to table output.

2012-05-22 08:27:05 +00:00

sockscan.py

Fix up sockscan output formatting.

2012-06-03 17:40:33 +00:00

ssdt.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

strings.py

Move to consistent output on the strings plugin (always hex).

2012-06-12 13:26:12 +00:00

taskmods.py

add a column to memmap's output to help locate the pages in memdump's dump file. fixes Issue #271

2012-06-24 19:34:44 +00:00

userassist.py

Fix up a large number of very minor pylint/indentation/trailing space issues across the tree.

2012-05-14 23:06:56 +00:00

vadinfo.py

fix a bug in vaddump and introduce a VolMagic for getting the maximum address in an AS based on the size of a native addr

2012-06-28 13:36:48 +00:00

volshell.py

volshell now supports 64bit disasm, according to current Profile/AS or as specified by the user

2012-06-05 23:38:18 +00:00