iMHLv2 bb1fd5aada fix some invalid assertions in the vmware address space (is not None vs != None) which caused the AS to appear successful when it really failed. also make get_tag a static method so it can be easily accessed from other AS

2014-03-11 10:48:17 -05:00

..

addrspaces

fix some invalid assertions in the vmware address space (is not None vs != None) which caused the AS to appear successful when it really failed. also make get_tag a static method so it can be easily accessed from other AS

2014-03-11 10:48:17 -05:00

gui

determine V or P offset based on self._config.VIRTUAL for scanners

2014-03-03 09:39:11 -06:00

linux

refs #15 fix a few bugs in the linux strings plugin

2014-01-28 16:22:54 -06:00

mac

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

malware

fix a bug in BaseYaraScanner -- apparently type() on <yara.Rules> causes a segfault

2014-01-27 18:58:36 -06:00

overlays

extend support of the qemu address space to elf32 core dumps...involves adding elf32_note to the linux types

2014-03-11 10:43:23 -05:00

registry

adding --machine flag to allow one to differentiate between combined timelines; also a few minor bugfixes

2014-02-28 14:26:25 -05:00

__init__.py

Match the help message to the plugin path separator.

2013-03-27 08:51:26 +00:00

bioskbd.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

common.py

determine V or P offset based on self._config.VIRTUAL for scanners

2014-03-03 09:39:11 -06:00

connections.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

connscan.py

determine V or P offset based on self._config.VIRTUAL for scanners

2014-03-03 09:39:11 -06:00

crashinfo.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

dlldump.py

condense ProcExeDump and ProcMemDump

2014-01-27 18:20:25 -06:00

dumpcerts.py

condense ProcExeDump and ProcMemDump

2014-01-27 18:20:25 -06:00

dumpfiles.py

adding changes for multiple physical offsets and newline delimited json dump summary files

2014-01-29 18:11:35 -05:00

envars.py

add the --silent flag to envars, to mask well known environment variables

2014-01-28 10:16:50 -06:00

evtlogs.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

fileparam.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

filescan.py

determine V or P offset based on self._config.VIRTUAL for scanners

2014-03-03 09:39:11 -06:00

getservicesids.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

getsids.py

resolve user and service sids in getsids

2014-02-27 09:38:26 -06:00

handles.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

heaps.py

add the heaps profile modification

2014-01-17 20:59:31 -06:00

hibinfo.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

hpakinfo.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

iehistory.py

iehistory plugin didn't adhere to --offset correctly

2014-01-23 21:55:47 -08:00

imagecopy.py

allow image copy to work with other OS besides windows

2014-03-10 14:47:08 -05:00

imageinfo.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

kdbgscan.py

refs #12 fixing the --kdbg parameter on win8/2012 x64

2014-01-27 16:02:14 -06:00

kpcrscan.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

machoinfo.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

mbrparser.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

mftparser.py

removed uneeded variable

2014-03-02 19:40:37 -05:00

moddump.py

condense ProcExeDump and ProcMemDump

2014-01-27 18:20:25 -06:00

modscan.py

determine V or P offset based on self._config.VIRTUAL for scanners

2014-03-03 09:39:11 -06:00

modules.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

multiscan.py

add the multiscan plugin

2014-01-17 21:51:48 -06:00

netscan.py

determine V or P offset based on self._config.VIRTUAL for scanners

2014-03-03 09:39:11 -06:00

patcher.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

privileges.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

procdump.py

condense ProcExeDump and ProcMemDump

2014-01-27 18:20:25 -06:00

pstree.py

catch exceptions in pstree when duplicate child/parents are found

2014-03-07 14:56:29 -06:00

raw2dmp.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

sockets.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

sockscan.py

determine V or P offset based on self._config.VIRTUAL for scanners

2014-03-03 09:39:11 -06:00

ssdt.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

strings.py

fix a bug in strings line stripping

2014-01-29 13:02:23 -06:00

taskmods.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

tcaudit.py

support master keys from 6.3a - 7.0a

2013-11-02 18:08:50 -04:00

timeliner.py

adding --machine flag to allow one to differentiate between combined timelines; also a few minor bugfixes

2014-02-28 14:26:25 -05:00

userassist.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

vadinfo.py

extend vadtree dot renderer with colors per heap, stack, mapped files, and executables

2014-01-28 10:18:32 -06:00

vboxinfo.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

verinfo.py

verinfo plugin update

2014-03-07 13:50:31 -06:00

vmwareinfo.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

volshell.py

print some unicode decode errors in volshell dt()

2014-03-07 09:51:08 -06:00