iMHLv2 f606ffd282 add API functions to the address space for pointer masking. this is in favor of doing the bit mask in Pointer.__eq__ and Pointer.v() which is how volatility 2.2 did it. fixes issue #369

2013-02-20 02:56:19 +00:00

..

__init__.py

Merge 2.3-devel into trunk.

2012-10-13 21:31:29 +00:00

arp.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

check_syscall_table.py

make the changes described in r3125 to the new mac check_syscall plugin

2013-02-19 23:58:46 +00:00

check_sysctl.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

check_trap_table.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

common.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

dmesg.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

dump_map.py

Mac - fix dump_maps

2013-01-31 23:41:20 +00:00

find_aslr_shift.py

add a description to the mac_find_aslr_shift plugin

2013-02-04 19:52:34 +00:00

ifconfig.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

ip_filters.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

list_zones.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

ls_logins.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

lsmod.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

lsof.py

use the Enumeration strings for f_fglob.fg_type. delete the block comment with the file_type_t enum, because they're in the vtypes

2013-01-31 02:48:51 +00:00

mac_processors.py

remove blank lines at the end of plugins

2013-01-31 02:51:09 +00:00

mac_volshell.py

add an initial mac_volshell plugin

2013-02-04 15:15:05 +00:00

machine_info.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

mount.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

netstat.py

remove unused import in mac_netstat

2013-01-31 04:06:39 +00:00

notifiers.py

remove blank lines at the end of plugins

2013-01-31 02:51:09 +00:00

pgrp_hash_table.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

pid_hash_table.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

print_boot_cmdline.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

proc_maps.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

psaux.py

mac_psaux inherits from mac_pslist so it doesn't need a calculate function at all

2013-01-31 04:00:43 +00:00

pslist.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

pstasks.py

add API functions to the address space for pointer masking. this is in favor of doing the bit mask in Pointer.__eq__ and Pointer.v() which is how volatility 2.2 did it. fixes issue #369

2013-02-20 02:56:19 +00:00

pstree.py

Mac - update pstree

2013-02-11 16:47:12 +00:00

psxview.py

Mac - add psxview

2013-02-08 19:45:28 +00:00

route.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

session_hash_table.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

task_zone.py

Mac - commit zone backend code and update native types for x64 long

2013-02-09 05:02:13 +00:00

trustedbsd.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

version.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

vfs_events.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00