iMHLv2 f23dfc8f5b when calculating the IDT for each CPU, make sure we use the GDT entries from the same CPU

2012-06-12 13:52:18 +00:00

..

addrspaces

add AW's crash dump x64 patch, including the raw2dmp plugin. Fixes Issue #177

2012-06-05 19:50:04 +00:00

malware

when calculating the IDT for each CPU, make sure we use the GDT entries from the same CPU

2012-06-12 13:52:18 +00:00

overlays

per request, move the KPCR object classes from malware/idt.py to windows/overlays/kpcr_vtypes.py (since they aren't malware specific)

2012-06-12 13:45:01 +00:00

registry

add a description to the shimcache plugin

2012-06-05 20:03:01 +00:00

__init__.py

Merge branch 'local/noregistry' into local/trunk

2012-03-08 23:39:19 +00:00

bioskbd.py

Fix inconsistency in commands.command class capitalization.

2012-02-05 23:36:33 +00:00

common.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

connections.py

Fix connections plugin offset output.

2012-05-22 08:26:58 +00:00

connscan.py

Remove all unnecessary trailing slashes.

2012-02-26 23:26:52 +00:00

crashinfo.py

Minor pylintage.

2012-06-10 11:51:02 +00:00

dlldump.py

Convert all *args to *args, **kwargs in __init__ functions.

2012-03-08 20:58:06 +00:00

envars.py

per request, move envars plugin to a separate file in core

2012-06-12 13:26:55 +00:00

fileparam.py

Move the Volatility-1.4_rc1 branch over to trunk.

2011-06-29 21:01:19 +00:00

filescan.py

Fix up filescan output formatting.

2012-06-03 18:01:27 +00:00

getsids.py

Fix up a large number of very minor pylint/indentation/trailing space issues across the tree.

2012-05-14 23:06:56 +00:00

handles.py

Convert handles plugin across to using table formatting.

2012-05-22 08:27:12 +00:00

hibinfo.py

Remove the old handmade KGDTENTRY vtypes. Fixes issue 211.

2012-02-18 11:01:17 +00:00

imagecopy.py

Fix up error reporting and file flushing in imagecopy.

2012-05-14 19:27:55 +00:00

imageinfo.py

Minor pylintage.

2012-06-10 11:51:02 +00:00

kdbgscan.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

kpcrscan.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

moddump.py

Change the moddump offset flag to a base flag to better fit the values. Fixes issue 254.

2012-05-14 20:43:09 +00:00

modscan.py

Convert over modscan and thrdscan to the table formatting.

2012-05-22 08:27:19 +00:00

modules.py

Convert modules plugin over to table formatting, and clean-up the output and column ordering.

2012-05-22 08:27:34 +00:00

netscan.py

add sanity checks to the PoolScanTcpEndpoint results in netscan. these cannot be done with a ScannerCheck because they need to deref pointers in kernel space and we do scanning in physical space

2012-05-18 18:07:00 +00:00

patcher.py

Convert all *args to *args, **kwargs in __init__ functions.

2012-03-08 20:58:06 +00:00

procdump.py

fix a bug in all plugins that inherit from ProcExeDump. in particular, they crash when extracting a PE whose size of headers (nt_header.OptionalHeader.SizeOfHeaders) encompasses one or more pages that are unavailable. use zread instead of read.

2012-04-10 17:09:08 +00:00

pstree.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

raw2dmp.py

Remove unnecessary .v() calls from raw2dmp and tidy a few bits.

2012-06-10 12:42:37 +00:00

sockets.py

Convert sockets plugin to table output.

2012-05-22 08:27:05 +00:00

sockscan.py

Fix up sockscan output formatting.

2012-06-03 17:40:33 +00:00

ssdt.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

strings.py

Move to consistent output on the strings plugin (always hex).

2012-06-12 13:26:12 +00:00

taskmods.py

Fixes issue 266.

2012-06-03 14:55:44 +00:00

userassist.py

Fix up a large number of very minor pylint/indentation/trailing space issues across the tree.

2012-05-14 23:06:56 +00:00

vadinfo.py

Add in support for the table output in a couple of plugins.

2012-05-22 08:26:41 +00:00

volshell.py

volshell now supports 64bit disasm, according to current Profile/AS or as specified by the user

2012-06-05 23:38:18 +00:00