Code

Add linux sockscan plugin#1120

Code

Draft

eve-mem wants to merge 12 commits intovolatilityfoundation:developvolatilityfoundation/volatility3:developfrom eve-mem:linux_sockscaneve-mem/volatility3:linux_sockscanCopy head branch name to clipboard

+431-1

Commits

Commits on Mar 26, 2024

• Linux: add first draft of sockscan plugin

  eve-mem

  committed
  aae3f5b

  Copy full SHA for aae3f5b

Commits on Mar 27, 2024

• Merge branch 'volatilityfoundation:develop' into linux_sockscan

  eve-mem

  authored
  d6afbc0

  Copy full SHA for d6afbc0

• Linux: update sockscan to scan memory layer only once for needles

  eve-mem

  committed
  67291ce

  Copy full SHA for 67291ce

• Linux: add test for sockscan plugin

  eve-mem

  committed
  4f1f480

  Copy full SHA for 4f1f480

Commits on Mar 28, 2024

• Linux: update sockscan family check to use 'is None' rather than '== None' as per CodeQL

  eve-mem

  committed
  2c8b757

  Copy full SHA for 2c8b757

• Linux: update sockscan with checks to reduce possible duplication of results

  eve-mem

  committed
  f3f5650

  Copy full SHA for f3f5650

• Linux: update tests for sockscan to be more generic

  eve-mem

  committed
  fb67d63

  Copy full SHA for fb67d63

Commits on Apr 3, 2024

• Update volatility3/framework/plugins/linux/sockscan.py

  Show description for 3fa6306
  

  ikelos

  and

  digitalisx

  authored
  3fa6306

  Copy full SHA for 3fa6306

Commits on Aug 2, 2024

• Linux: sockscan update based on comments from @gcmoreira, add version, make use of relative_child_offset, fix f string.

  eve-mem

  committed
  e4ea19d

  Copy full SHA for e4ea19d

• Linux: fix black formatting issues

  eve-mem

  committed
  a3393a9

  Copy full SHA for a3393a9

• Linux: Begin to breakdown the functions in sockscan plugin

  eve-mem

  committed
  3c37732

  Copy full SHA for 3c37732

Commits on Sep 27, 2024

• Merge branch 'volatilityfoundation:develop' into linux_sockscan

  eve-mem

  authored
  8a3f6ee

  Copy full SHA for 8a3f6ee