ko1N

Results 40 issues of ko1N

Since we cannot currently add lazy pe parsing through pelite it would be nice to offer the end-user a separate feature that in addition to polite also enables lazy goblin...

enhancement

Since it is sometimes necessary to query specific values (e.g. the win32 major/minor version numbers) we require a mechanism to get those values even when just using Plugins. For the...

enhancement

The signatures could be described as a structure of atoms (similiar to CasualX's pelite signature scanner). Instead of symbols we could have a "function"-like syntax for specific parts of the...

enhancement

It would be a nice addition to let the end user load rekall profiles instead of going through the entire pdb or offset toml initialization. This would make it easier...

enhancement

Currently, the read/write Pod functions will not work properly if the endianness of the target system is mismatched. We should make sure to swap the bytes if possible through the...

bug

When a connector is instantiated for a target and the target is not available anymore this just results in regular read errors. We should improve error handling in this case...

bug
enhancement
help wanted

Since we are already using criterion it should be easy to add our Project to it and also add a badge.

documentation

On Windows LeechCore is using a custom usleep function which does not cause a thread suspend. On Linux the regular usleep() function is used which causes a thread suspend and...