Code

Dump raw guest VM memory feature#621

Code

Merged

chivay merged 29 commits intoCERT-Polska:masterCERT-Polska/drakvuf-sandbox:masterfrom desecnd:dump-memorydesecnd/drakvuf-sandbox:dump-memoryCopy head branch name to clipboardSep 3, 2021

+132-2

Commits

Commits on Aug 5, 2021

• added pre/post sample RAM dump

  desecnd

  committed
  9d73ce1

Commits on Aug 11, 2021

• moved code to _memory_dump function, added config dump path

  desecnd

  committed
  cb69ac3

Commits on Aug 13, 2021

• added native outdir destination for dumps & config boolean option raw_memory_dump

  desecnd

  committed
  123e364

Commits on Aug 16, 2021

• removed unnecessary format string syntax

  desecnd

  committed
  403429d

• added raw_memory_dump option to drakrun config

  desecnd

  committed
  0fa0de9

Commits on Aug 19, 2021

• added pre/post sample RAM dump

  desecnd

  committed
  34e952d

• moved code to _memory_dump function, added config dump path

  desecnd

  committed
  271b772

• added native outdir destination for dumps & config boolean option raw_memory_dump

  desecnd

  committed
  c72ddbd

• removed unnecessary format string syntax

  desecnd

  committed
  a94f833

• added raw_memory_dump option to drakrun config

  desecnd

  committed
  86ac6e6

• fixed bad formating with black

  desecnd

  committed
  5847e13

Commits on Aug 30, 2021

• added snapshot hash information to metadata.json

  desecnd

  committed
  dd6a6f3

• added gzip compression and tempfile usage to _memory_dump function

  desecnd

  committed
  d0ef7f5

• changed file_sha256 method to private

  desecnd

  committed
  17cd968

• fixed log format to uppercase

  desecnd

  committed
  8cd3faa

• merged metadata snapshot-hash and gzip compression

  desecnd

  committed
  acaa119

Commits on Aug 31, 2021

• format - fix no empty line after shebang

  desecnd

  committed
  a10bbf1

• Merge branch 'master' into dump-memory

  desecnd

  authored
  ada9395

• Fixed formatting with black

  desecnd

  committed
  655af70

Commits on Sep 1, 2021

• moved memory_dump to VirtualMachine class

  desecnd

  committed
  c2a75b2

• moved snapshot hash functionality to init_drakrun

  desecnd

  committed
  f87f8de

• updated drakrun config.ini raw_memory_dump option description

  desecnd

  committed
  6a849fe

Commits on Sep 3, 2021

• added explicit .gz extension to function parameter

  desecnd

  committed
  526cded

• Added draksetup memdump export functionality

  desecnd

  committed
  c26e477

• removed bare except

  desecnd

  committed
  8b10e43

• fixed string format

  desecnd

  committed
  174a2a4

• added pause to vm.restore

  desecnd

  committed
  514a0e1

• moved file-hashing code to auxiliary function file_sha256 in util.py

  desecnd

  committed
  7f28ac1

• fixed typo's and misleading names in file_sha256 function

  desecnd

  committed
  71a02d5