iMHLv2 2f75029a83 make ApiHooks.check_syscall() a @staticmethod, so it can easily be used by other plugins

2013-05-29 18:17:34 +00:00

..

__init__.py

make a future home for malware plugins in volatility/plugins/malware

2012-03-08 19:25:21 +00:00

apihooks.py

make ApiHooks.check_syscall() a @staticmethod, so it can easily be used by other plugins

2013-05-29 18:17:34 +00:00

callbacks.py

add API functions to the address space for pointer masking. this is in favor of doing the bit mask in Pointer.__eq__ and Pointer.v() which is how volatility 2.2 did it. fixes issue #369

2013-02-20 02:56:19 +00:00

cmdhistory.py

fix the source and target length calculations for aliases in cmdscan/consoles plugins. the length is total bytes of the unicode string (not characters), and the string is not null terminated

2013-02-13 15:57:39 +00:00

devicetree.py

add API functions to the address space for pointer masking. this is in favor of doing the bit mask in Pointer.__eq__ and Pointer.v() which is how volatility 2.2 did it. fixes issue #369

2013-02-20 02:56:19 +00:00

idt.py

rework the detection of idt hooks using gdt selectors. ignore gdt entries that aren't for code segments

2013-03-25 17:46:53 +00:00

impscan.py

fix a bug in impscan.enum_apis() which adds mod.Dllbase to func_addr without checking if func_addr is None/NoneObject (which it will be in the exported function is forwarded). also make the NoneObject reason more descriptive so we get useful debugging information when encountering forwarded exports. spotted by carl pulley. fixes issue #403.

2013-04-09 14:59:43 +00:00

malfind.py

share the iterfind() function between windows, linux, and mac by placing it in the commonly accessible utils.py file

2013-04-09 19:07:36 +00:00

psxview.py

fix a typo in psxview column headers s/pspcdid/pspcid/

2012-10-30 20:22:22 +00:00

svcscan.py

bring back the render_dot function for svcscan to find unlinked service records on xp/2003 images

2012-11-22 18:04:20 +00:00

threads.py

remove an unnecessary for loop in threads plugin. spotted by carl pulley. fixes issue #406

2013-04-12 04:11:54 +00:00

timers.py

add API functions to the address space for pointer masking. this is in favor of doing the bit mask in Pointer.__eq__ and Pointer.v() which is how volatility 2.2 did it. fixes issue #369

2013-02-20 02:56:19 +00:00