Skip to content

v1.0.1

Latest

Choose a tag to compare

@daffainfo daffainfo released this 12 Sep 06:08

Notes

  • Windows kernel symbols are fetched from the Microsoft symbol server and converted, as the README said. v1.0.0 could not analyse a Windows image without Python Volatility 3 installed alongside.
  • Short plugin names work, so windows.pslist no longer needs the full windows.pslist.PsList.
  • The small symbol tables are built into the binary, so plugins like linux.bash work with nothing installed.
  • Malformed AVML and ELF files return an error instead of crashing.
  • Release binaries are built from the tag they are attached to.