iMHLv2 e99622ecd7 fix yarascan to skip MM_MAX_COMMIT on wow64. also see issue #306. we fixed vaddump and svcscan etc a while ago but missed yarascan

2013-01-27 05:26:03 +00:00

..

__init__.py

make a future home for malware plugins in volatility/plugins/malware

2012-03-08 19:25:21 +00:00

apihooks.py

apihooks should handle systems using kiintsystemcall in addition to kifastsystemcall. spotted by mathieu.geli. fixes issue #370

2013-01-03 23:01:12 +00:00

callbacks.py

make better use of Plugin.is_valid_profile for blacklisting commands on unsupported profiles. a general, but consistent message is reported to the user 'This command does not support the selected profile'.

2012-07-10 14:11:47 +00:00

cmdhistory.py

Changed input to search_process_memory to list format as required. fixes issue 371

2013-01-09 16:25:01 +00:00

devicetree.py

fix an issue in devicetree regarding display of attached device names

2012-10-30 20:28:25 +00:00

idt.py

a bug in the idt plugin prevented it from displaying the right interrupt handler address when special gdt selectors are set

2012-11-22 02:55:52 +00:00

impscan.py

the --pid parameter to impscan should be an integer (comma separated strings are not accepted)

2012-11-23 16:32:11 +00:00

malfind.py

fix yarascan to skip MM_MAX_COMMIT on wow64. also see issue #306. we fixed vaddump and svcscan etc a while ago but missed yarascan

2013-01-27 05:26:03 +00:00

psxview.py

fix a typo in psxview column headers s/pspcdid/pspcid/

2012-10-30 20:22:22 +00:00

svcscan.py

bring back the render_dot function for svcscan to find unlinked service records on xp/2003 images

2012-11-22 18:04:20 +00:00

threads.py

add proper spacing to registers in threads output. fixes issue #348

2012-09-17 16:51:25 +00:00

timers.py

make better use of Plugin.is_valid_profile for blacklisting commands on unsupported profiles. a general, but consistent message is reported to the user 'This command does not support the selected profile'.

2012-07-10 14:11:47 +00:00