iMHLv2 f2b24da4d9 tweak malfind's injection filter - the criteria it uses to detect potentially malicious memory segments. fixes Issue #278

2012-06-28 19:09:18 +00:00

..

__init__.py

make a future home for malware plugins in volatility/plugins/malware

2012-03-08 19:25:21 +00:00

apihooks.py

add a description to apihooks plugin

2012-06-23 05:44:45 +00:00

callbacks.py

Convert some malware plugins to the table formatting.

2012-05-22 08:27:42 +00:00

cmdhistory.py

Apply basic windows restrictions to most windows plugins.

2012-05-18 09:53:27 +00:00

devicetree.py

bring back the -v option to driverirp that prints a disasm of each function (was in 2.0 version of the plugin from malware.py)

2012-06-23 22:59:11 +00:00

idt.py

the Limit column of GDT plugin should be addrpad

2012-06-25 20:39:38 +00:00

impscan.py

add impscan plugin for x86 and x64

2012-06-18 16:06:11 +00:00

malfind.py

tweak malfind's injection filter - the criteria it uses to detect potentially malicious memory segments. fixes Issue #278

2012-06-28 19:09:18 +00:00

psxview.py

Fix up psxview output formatting.

2012-06-03 17:40:24 +00:00

svcscan.py

Fix up a large number of very minor pylint/indentation/trailing space issues across the tree.

2012-05-14 23:06:56 +00:00

threads.py

Fix a typo/bug in the recent malware threads plugin.

2012-05-14 23:07:20 +00:00

timers.py

leverage the new KDBG.kpcrs() to iterate quickly through all KPCRs in a memory dump. this allows us to display IDT, GDT, and Timers per-processor without relying on kpcrscan which is way too slow to actually be useful

2012-06-05 21:58:24 +00:00