volatilityfoundation / volatility3

Volatility 3.0 development
http://volatilityfoundation.org/
Other
2.6k stars 447 forks source link

Missing Plugin -> threads #118

Closed mrratherford closed 2 months ago

mrratherford commented 4 years ago

As of volatility version 2 there were the three plugins: threads, timers and devicetree. I didn't find these plugins in the new version. Do you have plans to bring them back in or are these plugins by community developers?

ikelos commented 4 years ago

I believe we just haven't gotten to those yet, I think they were all core plugins of volatility2. I've given this to the developer that made the previous ones, so we can find out directly the intention for those... 5:)

mrratherford commented 4 years ago

Thanks for your quick reply!

digitalisx commented 2 years ago

Hello @mrratherford, This time, I developed DeviceTree Plugin, one of the requests covered in this issue. It was finally merged in the develop branch, so I would appreciate it if you could give me feedback after using it. 🙌

superponible commented 3 months ago

@ikelos I submitted a PR for this.

Some work based on original implementation at https://github.com/digitalisx/volatility3/tree/feature/timers.

The byte manipulation functions from https://github.com/volatilityfoundation/volatility3/pull/718/files#diff-e13d09e5ccbff35e090d1c91ba6ba0d3d59548f89b38ce97025d2e203b130975 were brought over. I put them in utility.py to be available for both if that other PR gets merged. Not sure if that's the right place.

ikelos commented 3 months ago

The byte manipulation functions from https://github.com/volatilityfoundation/volatility3/pull/718/files#diff-e13d09e5ccbff35e090d1c91ba6ba0d3d59548f89b38ce97025d2e203b130975 were brought over. I put them in utility.py to be available for both if that other PR gets merged. Not sure if that's the right place.

Sounds good, but I'll take a look during the review. Thanks for the heads-up about the prior code, that'll save me scratching my head trying to recall! 5;D

digitalisx commented 3 months ago

Timers plugin has been implemented well, I can happily close the existing draft PR. :) Thanks @superponible