volatilityfoundation-volatility

__init__.py

Merge in most of linux-support.

2012-08-16 11:00:06 +00:00

arp.py

replace all the calls to self.get_profile_symbol() from linux plugins, use self.addr_space.profile.get_symbol() instead

2013-02-19 17:42:25 +00:00

banner.py

Linux - add linux_banner plugin

2013-09-25 15:51:06 +00:00

bash.py

add a condition to the BashTypes profile modification to prevent it from being applied when windows profiles are in use

2013-04-09 19:11:15 +00:00

check_afinfo.py

AbstractLinuxCommand.known_addrs should be a dict initially, not a list and then set to a dict from plugins

2013-08-17 17:31:30 +00:00

check_creds.py

Linux - remove block string comment from check_creds.py. moving the comment to wiki command reference

2012-09-10 16:40:11 +00:00

check_evt_arm.py

Linux - add support for architecutre specific plugins

2013-04-11 20:14:49 +00:00

check_fops.py

AbstractLinuxCommand.known_addrs should be a dict initially, not a list and then set to a dict from plugins

2013-08-17 17:31:30 +00:00

check_idt.py

Linux - simplify logic in check_idt

2013-09-26 18:11:25 +00:00

check_modules.py

Linux - PEP8 in check_modules.py, fix plugin description, move block string comment to wiki command reference

2012-09-10 15:47:55 +00:00

check_syscall_arm.py

Linux - add support for architecutre specific plugins

2013-04-11 20:14:49 +00:00

check_syscall.py

Linux - add table address to generator in check syscall

2013-09-26 19:28:22 +00:00

common.py

AbstractLinuxCommand.known_addrs should be a dict initially, not a list and then set to a dict from plugins

2013-08-17 17:31:30 +00:00

cpuinfo.py

Linux - add support for architecutre specific plugins

2013-04-11 20:14:49 +00:00

dentry_cache.py

add **kwargs for all linux plugins

2013-03-07 15:28:36 +00:00

dmesg.py

replace all the calls to self.get_profile_symbol() from linux plugins, use self.addr_space.profile.get_symbol() instead

2013-02-19 17:42:25 +00:00

dump_map.py

fix linux_dump_maps plugin: inherit from proc_maps for -p option, replace --outfile with --dump-dir so we can write multiple VMAs to separate files, use table_header/table_row for a summary. spotted by Edwin Smulders

2013-03-07 15:58:19 +00:00

find_file.py

Linux - make linux_find_file more API family

2013-09-25 23:51:10 +00:00

flags.py

create a Flags object for handling rwx, r-x style output for linux, instead of using the format_perms() method attached to a specific plugin

2013-02-12 20:27:29 +00:00

ifconfig.py

replace all the calls to self.get_profile_symbol() from linux plugins, use self.addr_space.profile.get_symbol() instead

2013-02-19 17:42:25 +00:00

iomem.py

replace all the calls to self.get_profile_symbol() from linux plugins, use self.addr_space.profile.get_symbol() instead

2013-02-19 17:42:25 +00:00

keyboard_notifier.py

replace all the calls to self.get_profile_symbol() from linux plugins, use self.addr_space.profile.get_symbol() instead

2013-02-19 17:42:25 +00:00

linux_volshell.py

Linux - add modules function to linux_volshell

2013-05-30 16:53:24 +00:00

linux_yarascan.py

add a description to the linux_volshell command

2013-02-22 15:33:48 +00:00

lsmod.py

add **kwargs for all linux plugins

2013-03-07 15:28:36 +00:00

lsof.py

Pylint, formatting and styles fixes for all linux plugins.

2012-09-10 15:06:57 +00:00

mount_cache.py

add **kwargs for all linux plugins

2013-03-07 15:28:36 +00:00

mount.py

replace all the calls to self.get_profile_symbol() from linux plugins, use self.addr_space.profile.get_symbol() instead

2013-02-19 17:42:25 +00:00

netstat.py

fix an exception in linux_netstat on a missing inet_sock.inet_dport. reported by Edwin Smulders. at the same time, create some APIs for linux's inet_sock object. fixes issue #434

2013-07-17 14:30:28 +00:00

pidhashtable.py

fix a typo in an error message - linux_pidhashtable

2013-03-29 22:41:10 +00:00

pkt_queues.py

add **kwargs for all linux plugins

2013-03-07 15:28:36 +00:00

proc_maps.py

yet another attempt to fix the negative numbers in vm_area_struct for linux when using proc_maps

2013-04-02 11:24:23 +00:00

psaux.py

move the linux command line function to the object class rather than the plugin

2013-07-03 19:03:08 +00:00

pslist_cache.py

add **kwargs for all linux plugins

2013-03-07 15:28:36 +00:00

pslist.py

move the linux get_task_start_time() API out of AbstractLinuxCommand - put it in the task_struct object class

2013-02-19 17:58:44 +00:00

pstree.py

remove some whitespace in linux_pstree

2013-03-07 15:37:31 +00:00

psxview.py

Linux - remove unnecesary TODOs and change some to FUTURE

2012-09-10 20:12:35 +00:00

route_cache.py

Linux - fix route cache plugin for >= 3.6

2013-08-20 07:50:50 +00:00

sk_buff_cache.py

add **kwargs for all linux plugins

2013-03-07 15:28:36 +00:00

slab_info.py

replace all the calls to self.get_profile_symbol() from linux plugins, use self.addr_space.profile.get_symbol() instead

2013-02-19 17:42:25 +00:00

tmpfs.py

add **kwargs for all linux plugins

2013-03-07 15:28:36 +00:00

tty_check.py

Linux - cleanup check tty

2013-09-26 22:25:35 +00:00

vma_cache.py

add **kwargs for all linux plugins

2013-03-07 15:28:36 +00:00