volatilityfoundation-volatility

addrspaces

fix linux elf AS to not falsely trigger - by asserting on the number of runs

2014-10-14 13:52:22 -05:00

gui

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

linux

Linux - update apihooks

2014-10-16 16:51:03 -05:00

mac

Mac - update plugin descriptions

2014-08-03 17:24:58 -05:00

malware

update devicetree plugin's naming convention

2014-10-12 21:56:55 -05:00

overlays

Linux - fix proc_maps for Android without vdso support

2014-10-06 14:27:18 -05:00

registry

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

__init__.py

Match the help message to the plugin path separator.

2013-03-27 08:51:26 +00:00

bigpagepools.py

refs #62 updates to the big pools plugin

2014-08-05 10:16:41 -05:00

bioskbd.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

cmdline.py

add pydocs plugin description for cmdline

2014-07-28 19:50:46 -05:00

common.py

determine V or P offset based on self._config.VIRTUAL for scanners

2014-03-03 09:39:11 -06:00

connections.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

connscan.py

determine V or P offset based on self._config.VIRTUAL for scanners

2014-03-03 09:39:11 -06:00

crashinfo.py

update crashinfo to support WindowsCrashDumpSpace64BitMap. update DumpType to include 0x5 bitmap dumps

2014-08-03 16:37:55 -05:00

dlldump.py

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

dumpcerts.py

condense ProcExeDump and ProcMemDump

2014-01-27 18:20:25 -06:00

dumpfiles.py

Added another soundness check to SharedCacheMap: Issue #57

2014-08-04 11:44:16 -04:00

envars.py

add the --silent flag to envars, to mask well known environment variables

2014-01-28 10:16:50 -06:00

evtlogs.py

moving remove_printable into utils since it's in more than one place

2014-07-10 15:21:50 -04:00

fileparam.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

filescan.py

determine V or P offset based on self._config.VIRTUAL for scanners

2014-03-03 09:39:11 -06:00

getservicesids.py

changing email

2014-07-08 18:36:25 -04:00

getsids.py

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

handles.py

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

heaps.py

add the heaps profile modification

2014-01-17 20:59:31 -06:00

hibinfo.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

hpakinfo.py

better fixes to the hpak extract / decompress function

2014-06-16 12:27:31 -05:00

iehistory.py

iehistory plugin didn't adhere to --offset correctly

2014-01-23 21:55:47 -08:00

imagecopy.py

enhance debug output for image copy errors

2014-06-21 09:48:59 -05:00

imageinfo.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

joblinks.py

adding back full path

2014-07-10 13:14:07 -04:00

kdbgscan.py

refs #74 enhance kdbgscan performance for win8/2012 x64

2014-08-18 19:23:49 -05:00

kpcrscan.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

machoinfo.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

mbrparser.py

changing email

2014-07-08 18:36:25 -04:00

mftparser.py

fix in mftparser

2014-10-16 17:58:02 -04:00

moddump.py

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

modscan.py

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

modules.py

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

multiscan.py

change how the multiscanner's list of scanners is initialized

2014-09-03 22:11:35 -05:00

netscan.py

determine V or P offset based on self._config.VIRTUAL for scanners

2014-03-03 09:39:11 -06:00

notepad.py

add the notepad plugin

2014-07-12 10:27:20 -05:00

objtypescan.py

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

patcher.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

patchguard.py

update timers plugin to work on 64-bit windows (requires pointer decode with patch guard magic)

2014-03-30 11:11:37 +02:00

pooltracker.py

only apply PoolTrackTagOverlay to windows profiles

2014-07-12 17:57:36 -05:00

privileges.py

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

procdump.py

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

pstree.py

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

raw2dmp.py

refs #89 fixing raw2dmp - make sure to set the DumpType since its now an assertion in the crash AS

2014-09-17 19:10:37 -05:00

sockets.py

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

sockscan.py

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

ssdt.py

sync with r3581 of trunk

2014-01-17 14:21:55 -06:00

strings.py

oops, virtual addresses in strings output should still be in hex

2014-03-13 11:35:27 -05:00

taskmods.py

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

tcaudit.py

making true crypt plugins easier to call from external scripts

2014-09-05 08:37:36 -05:00

timeliner.py

small fix

2014-08-18 10:13:17 -04:00

vadinfo.py

show file device names in vadinfo output

2014-10-16 10:04:17 -05:00

vboxinfo.py

Change all the existing converted plugins over to the new mechanism.

2014-10-25 18:32:33 +01:00

verinfo.py

move some PE file version information code to APIs

2014-07-13 22:07:34 -05:00

vmwareinfo.py

override is_valid_profile for vmwareinfo since its applies to linux/mac

2014-06-20 13:31:48 -05:00

volshell.py

refs #54 displaying types with dynamic attributes (i.e. callable offsets) is not supported in volshell

2014-08-16 14:49:54 -05:00