iMHLv2 cc2037ffe9 kpcrscan is more verbose now

2012-06-18 14:34:14 +00:00

..

addrspaces

add AW's crash dump x64 patch, including the raw2dmp plugin. Fixes Issue #177

2012-06-05 19:50:04 +00:00

malware

per request, avoid changing the number of variables yielded by IDT.calculate() and GDT.calculate() just to access the associated KPCRs. instead access the KPCR using the IDT or GDT entry's obj_parent

2012-06-12 14:07:40 +00:00

overlays

kpcrscan is more verbose now

2012-06-18 14:34:14 +00:00

registry

add a description to the shimcache plugin

2012-06-05 20:03:01 +00:00

__init__.py

Merge branch 'local/noregistry' into local/trunk

2012-03-08 23:39:19 +00:00

bioskbd.py

Fix inconsistency in commands.command class capitalization.

2012-02-05 23:36:33 +00:00

common.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

connections.py

Fix connections plugin offset output.

2012-05-22 08:26:58 +00:00

connscan.py

Remove all unnecessary trailing slashes.

2012-02-26 23:26:52 +00:00

crashinfo.py

Minor pylintage.

2012-06-10 11:51:02 +00:00

dlldump.py

Convert all *args to *args, **kwargs in __init__ functions.

2012-03-08 20:58:06 +00:00

envars.py

per request, move envars plugin to a separate file in core

2012-06-12 13:26:55 +00:00

fileparam.py

Move the Volatility-1.4_rc1 branch over to trunk.

2011-06-29 21:01:19 +00:00

filescan.py

Fix up filescan output formatting.

2012-06-03 18:01:27 +00:00

getsids.py

Fix up a large number of very minor pylint/indentation/trailing space issues across the tree.

2012-05-14 23:06:56 +00:00

handles.py

Convert handles plugin across to using table formatting.

2012-05-22 08:27:12 +00:00

hibinfo.py

Remove the old handmade KGDTENTRY vtypes. Fixes issue 211.

2012-02-18 11:01:17 +00:00

imagecopy.py

Fixes issue 273.

2012-06-15 22:36:07 +00:00

imageinfo.py

kdbgscan output is now pretty verbose, compared to the previous version which just output P and V offsets. this will help distinguish between FPs and also should contain the necessary fields for auto-selecting the profile when we get to that. reference: issue #268

2012-06-12 22:49:32 +00:00

kdbgscan.py

fix a bug from r1866 when kdbgscan is used with no profile

2012-06-13 15:00:37 +00:00

kpcrscan.py

kpcrscan is more verbose now

2012-06-18 14:34:14 +00:00

moddump.py

Change the moddump offset flag to a base flag to better fit the values. Fixes issue 254.

2012-05-14 20:43:09 +00:00

modscan.py

Convert over modscan and thrdscan to the table formatting.

2012-05-22 08:27:19 +00:00

modules.py

Convert modules plugin over to table formatting, and clean-up the output and column ordering.

2012-05-22 08:27:34 +00:00

netscan.py

add sanity checks to the PoolScanTcpEndpoint results in netscan. these cannot be done with a ScannerCheck because they need to deref pointers in kernel space and we do scanning in physical space

2012-05-18 18:07:00 +00:00

patcher.py

Convert all *args to *args, **kwargs in __init__ functions.

2012-03-08 20:58:06 +00:00

procdump.py

fix a bug in all plugins that inherit from ProcExeDump. in particular, they crash when extracting a PE whose size of headers (nt_header.OptionalHeader.SizeOfHeaders) encompasses one or more pages that are unavailable. use zread instead of read.

2012-04-10 17:09:08 +00:00

pstree.py

convert pstree to ikelos' new table format

2012-06-13 16:17:08 +00:00

raw2dmp.py

Remove unnecessary .v() calls from raw2dmp and tidy a few bits.

2012-06-10 12:42:37 +00:00

sockets.py

Convert sockets plugin to table output.

2012-05-22 08:27:05 +00:00

sockscan.py

Fix up sockscan output formatting.

2012-06-03 17:40:33 +00:00

ssdt.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

strings.py

Move to consistent output on the strings plugin (always hex).

2012-06-12 13:26:12 +00:00

taskmods.py

Fixes issue 266.

2012-06-03 14:55:44 +00:00

userassist.py

Fix up a large number of very minor pylint/indentation/trailing space issues across the tree.

2012-05-14 23:06:56 +00:00

vadinfo.py

Add in support for the table output in a couple of plugins.

2012-05-22 08:26:41 +00:00

volshell.py

volshell now supports 64bit disasm, according to current Profile/AS or as specified by the user

2012-06-05 23:38:18 +00:00