Home - Waterfall Grid T-Grid Console Builders Recent Builds Buildslaves Changesources - JSON API - About

Console View

Legend:   Passed Failed Warnings Failed Again Running Exception Offline No data

Mike Auty
Minor typing fix.
Mike Auty
Make the config path for plugins dynamic.
Mike Auty
Add in ModuleCollections for identifying symbols.
awalters
Initial changes based on @ikelos review. Also updated crash structs.
Mike Auty
Vastly speed-up intel memory traversals
This uses the exceptions to indicate how much can be skipped in the
virtual intel translation layer.  This means large holes in the memory
can be skipped more quickly.  It also eliminates the is_valid/mapping
loop.
  • vol3-deb9: python3.6: test_windows_dlllist failed -  stdio
  • vol3-win10: test_windows_dlllist failed -  stdio
Michael Ligh
address a few of @ikelos comments in the PR
Mike Auty
Merge branch 'master' of github.com:volatilityfoundation/volatility3
Mike Auty
Add support for filename requirements
At the moment these are no different than strings, but they allow us to
do things like add URI handlers to file names if no scheme is provided,
and eventually do file existence testing.  This also allows the web URI
to allow uploads as a means of passing a file in.

The configuration will only store the filename, because otherwise
someone could add a huge file which would need to be carried around in
the config forever after.  Handling file existence errors is up to the
UI after the volatility library returns a "file not found" type
exception.
Mike Auty
Add an ignore_errors check for positive lengths.
Mike Auty
Remove debugging statement.
Mike Auty
Ensure scanners don't return duplicates in the overlap.
Mike Auty
Fix up the issue @imhlv2 found in schema_validate.
Michael Ligh
commit malfind
Mike Auty
Fix an issue with IntelPAE's mapping domain size.
Mike Auty
Put back in the comments we wanted to keep.
Mike Auty
Fix up slight intel scanner issue.
Mike Auty
Remove the unnecessary Volshell check in timeliner.
Given that volshell's plugins are now separate and not stored in the
core plugins list, there is no need to protect against it (and there are
no other "interactive" plugins, which will likely be barred from being
in the core set).
awalters
Updated to use new create convenience function for IntermediateSymbolTable.
Mike Auty
Clarify logic and fix an issue in intel scanning.
awalters
Windows Crash Layer
Mike Auty
Deal with NULL base blocks in the registry code.
Mike Auty
Change Hex byte rendering so it's always on a new line.
Mike Auty
Simplify intel scanning to ensure overlaps are handled correctly.
Mike Auty
Fix scan_iterator parameter type.
Mike Auty
Fix typo in intel scanning engine.
Mike Auty
Fix strings not being displayed fully because they featured 'non-word' characters.
Mike Auty
Minor documentation tweaks.
Mike Auty
Remove the -f flag before it gains too much use.
Given the single-location parameter is now a URIRequirement, and
can accept normal files (rather than a full URL), but is far more
accurate (it matches exactly what the automagic requests).  If there's
much uproar we can revert this one commit.
Mike Auty
Add in the oft-requested -f flag.
I'm not entirely happy with this, it's an overly specific hard coded
change, but luckily it's only for this CLI, it has no impact on other
UIs, either text based on web based.

I really don't want people to become reliant on this, but also I don't
want to be that guy that stops people being able to do their work
quickly for reasons of correctness.  May future volatility devs forgive
me...
Mike Auty
Fix return types for ModuleCollections.
Michael Ligh
HexBytes() should inherit from bytes not int
Mike Auty
Remove vestigal update_configuration methods.
Mike Auty
Add in initial version of the strings plugin.
Mike Auty
Change the signature for add_process_layer to match linux.
Michael Ligh
malfind is reading chunks, not technically pages, so change PAGE_SIZE to CHUNK_SIZE
Mike Auty
Improve scan chunking for intel layers
We now use mapping to skip unmapped pages when scanning.  This
should be slightly quicker and likely more accurate.  We also now
don't chunk over the size requested by the scanner.  We don't quite
handle overlaps correctly yet (we overlap, but don't prevent
duplicates if the pattern is entirely within the overlap segment).
  • vol3-deb9: python3.6: test_windows_hivelist failed -  stdio
  • vol3-win10: test_windows_hivelist failed -  stdio
Mike Auty
Pylint and fix the _check_header return type.
Mike Auty
Remove TODO that's in the wrong place, and we've just to-done.
Mike Auty
Move around the scanning functions and create an API for the iterators.
Mike Auty
Refactor volshell from a plugin to a standalone program.