volatilityfoundation-volatility

__init__.py

2012-10-13 21:31:29 +00:00

arp.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

check_syscall_table.py

make the changes described in r3125 to the new mac check_syscall plugin

2013-02-19 23:58:46 +00:00

check_sysctl.py

increase the width of the mac_check_sysctl name column

2013-03-31 22:18:54 +00:00

check_trap_table.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

common.py

remove the last remaining plugins that reference commands.command - change to commands.Command

2013-03-07 16:09:49 +00:00

dead_procs.py

rename the file containing the mac_dead_procs plugin

2013-03-31 21:45:04 +00:00

dmesg.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

dump_map.py

Mac - fix dump_maps

2013-01-31 23:41:20 +00:00

find_aslr_shift.py

Mac - change header of find_aslr_shift

2013-03-30 00:03:56 +00:00

ifconfig.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

ip_filters.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

list_zones.py

Mac - update list zones to support < 10.8.x

2013-03-31 16:04:37 +00:00

ls_logins.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

lsmod.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

lsof.py

Mac - have lsof inherit from tasks instead of pslist

2013-03-31 21:53:10 +00:00

mac_volshell.py

Mac - update volshell to inherit from mac_tasks

2013-03-31 21:56:51 +00:00

machine_info.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

mount.py

Mac - expand print size for larger mount points

2013-03-29 23:23:12 +00:00

netstat.py

prevent 'NoneObject as string: Pointer f_fglob invalid' message when using mac_netstat

2013-04-01 01:11:25 +00:00

notifiers.py

remove blank lines at the end of plugins

2013-01-31 02:51:09 +00:00

pgrp_hash_table.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

pid_hash_table.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

print_boot_cmdline.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

proc_maps.py

prevent a 'NoneObject as string: Pointer v_name invalid' message when using the mac_proc_maps plugin

2013-04-01 01:26:05 +00:00

psaux.py

Mac - have psaux inherfit from pstasks

2013-03-31 22:09:23 +00:00

pslist.py

dont debug.error from inside mac_pslist.calculate(), because it causes mac_psxview to terminate early. just debug.warning and break the loop

2013-04-01 00:23:02 +00:00

pstasks.py

Mac - implement pid filtering logic in mac_tasks

2013-03-31 22:04:31 +00:00

pstree.py

small change to mac_pstree to remove while 1:

2013-04-01 16:54:44 +00:00

psxview.py

make mac_tasks inherit from mac_pslist so it prints the same columns as other process-related plugins. this requires changing what mac_tasks.calculate() yields from task objects to proc objects, and consequently we must update mac_psxview to expect proc objects

2013-03-31 21:32:17 +00:00

route.py

prevent mac_route from looping in some cases. replace while 1 with while rn.is_valid()

2013-04-01 16:36:32 +00:00

session_hash_table.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

trustedbsd.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

version.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00

vfs_events.py

Mac - remove the AbstractMacCommand.get_profile_symbol(), replace all the calls to that API with direct calls to AddressSpace.profile.get_symbol()

2013-02-19 23:54:47 +00:00