iMHLv2 dec52f7a43 bring back the ability for malfind to ignore VADs whose entire region is either unavailable due to paging or all 0's...this was lost in r2077 because we avoided reading the entire range into memory at once.

2012-07-24 19:37:11 +00:00

..

addrspaces

add AW's crash dump x64 patch, including the raw2dmp plugin. Fixes Issue #177

2012-06-05 19:50:04 +00:00

malware

bring back the ability for malfind to ignore VADs whose entire region is either unavailable due to paging or all 0's...this was lost in r2077 because we avoided reading the entire range into memory at once.

2012-07-24 19:37:11 +00:00

overlays

add a Length property to MMVAD to reduce confusion over the purpose of vad.End and minimize the chance of off-by-one errors when calculating vad lengths. fixes Issue 308

2012-07-24 01:45:52 +00:00

registry

apply (maybe temporary) fixes to two UnicodeEncodeError exceptions in vadinfo and hivelist. fixes issue #295.

2012-07-10 03:20:43 +00:00

__init__.py

Fix pyinstaller plugins support.

2012-07-08 21:19:08 +00:00

bioskbd.py

Fix inconsistency in commands.command class capitalization.

2012-02-05 23:36:33 +00:00

common.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

connections.py

fix some typos in the connections.Connections class pydoc

2012-07-10 14:13:53 +00:00

connscan.py

Fix a minor error in netscan, and pylint the rest of the recently changed code.

2012-07-12 20:00:04 +00:00

crashinfo.py

Minor pylintage.

2012-06-10 11:51:02 +00:00

dlldump.py

prevent the 'NoneObject as string' warning when using regex with dlldump and moddump. we do plan on finding some other solution for all this after 2.1

2012-07-18 15:02:33 +00:00

envars.py

per request, move envars plugin to a separate file in core

2012-06-12 13:26:55 +00:00

fileparam.py

Move the Volatility-1.4_rc1 branch over to trunk.

2011-06-29 21:01:19 +00:00

filescan.py

Fix up filescan output formatting.

2012-06-03 18:01:27 +00:00

getsids.py

Fix up a large number of very minor pylint/indentation/trailing space issues across the tree.

2012-05-14 23:06:56 +00:00

handles.py

Convert handles plugin across to using table formatting.

2012-05-22 08:27:12 +00:00

hibinfo.py

Remove the old handmade KGDTENTRY vtypes. Fixes issue 211.

2012-02-18 11:01:17 +00:00

imagecopy.py

Fixes issue 273.

2012-06-15 22:36:07 +00:00

imageinfo.py

kdbgscan output is now pretty verbose, compared to the previous version which just output P and V offsets. this will help distinguish between FPs and also should contain the necessary fields for auto-selecting the profile when we get to that. reference: issue #268

2012-06-12 22:49:32 +00:00

kdbgscan.py

Apply SanityCheckExceptions that can be disabled/ignored using the --unsafe/-u flag. Fixes issue 243.

2012-07-07 19:19:58 +00:00

kpcrscan.py

kpcrscan is more verbose now

2012-06-18 14:34:14 +00:00

moddump.py

prevent the 'NoneObject as string' warning when using regex with dlldump and moddump. we do plan on finding some other solution for all this after 2.1

2012-07-18 15:02:33 +00:00

modscan.py

Convert over modscan and thrdscan to the table formatting.

2012-05-22 08:27:19 +00:00

modules.py

Convert modules plugin over to table formatting, and clean-up the output and column ordering.

2012-05-22 08:27:34 +00:00

netscan.py

Fix a minor error in netscan, and pylint the rest of the recently changed code.

2012-07-12 20:00:04 +00:00

patcher.py

Convert all *args to *args, **kwargs in __init__ functions.

2012-03-08 20:58:06 +00:00

procdump.py

Fix a minor error in netscan, and pylint the rest of the recently changed code.

2012-07-12 20:00:04 +00:00

pstree.py

the task_info dictionary in pstree is unnecessary

2012-06-18 15:07:54 +00:00

raw2dmp.py

Remove unnecessary .v() calls from raw2dmp and tidy a few bits.

2012-06-10 12:42:37 +00:00

sockets.py

make better use of Plugin.is_valid_profile for blacklisting commands on unsupported profiles. a general, but consistent message is reported to the user 'This command does not support the selected profile'.

2012-07-10 14:11:47 +00:00

sockscan.py

make better use of Plugin.is_valid_profile for blacklisting commands on unsupported profiles. a general, but consistent message is reported to the user 'This command does not support the selected profile'.

2012-07-10 14:11:47 +00:00

ssdt.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

strings.py

Move to consistent output on the strings plugin (always hex).

2012-06-12 13:26:12 +00:00

taskmods.py

add a column to memmap's output to help locate the pages in memdump's dump file. fixes Issue #271

2012-06-24 19:34:44 +00:00

userassist.py

Fix up a large number of very minor pylint/indentation/trailing space issues across the tree.

2012-05-14 23:06:56 +00:00

vadinfo.py

apply a remedy for issue 306 - vaddump on wow64 processes with MM_MAX_COMMIT. we don't want to dump these multi terabyte ranges with no valid pages. see issue 306 for details and analysis...the issue will remain open while we consider other ways to address the problem, however this patch should resolve it well enough for the stability of the 2.1 release

2012-07-24 14:47:37 +00:00

volshell.py

Potential fix for issue 301, and minor pylint on volshell.

2012-07-17 16:09:55 +00:00