update volatility to 2.5.

More information: http://www.volatilityfoundation.org/#!releases/component_71401
ok benoit@.
This commit is contained in:
rpointel 2015-11-01 07:34:30 +00:00
parent 0873fe39b3
commit cac33d2e8c
3 changed files with 95 additions and 10 deletions

View File

@ -2,10 +2,11 @@
COMMENT = memory artifact extraction utility framework
MODPY_EGG_VERSION = 2.4
REVISION = 3
MODPY_EGG_VERSION = 2.5
DISTNAME = volatility-${MODPY_EGG_VERSION}
EXTRACT_SUFX = .zip
CATEGORIES = security
HOMEPAGE = http://www.volatilityfoundation.org/
@ -24,6 +25,8 @@ RUN_DEPENDS = security/distorm3 \
security/yara/python \
graphics/py-Pillow
WRKDIST = ${WRKDIR}/volatility-master
NO_TEST = Yes
post-install:

View File

@ -1,2 +1,2 @@
SHA256 (volatility-2.4.tar.gz) = aE/f/XnKRFMpjuLrABE3z/gCvEs9+qo4xDNTIffMzvE=
SIZE (volatility-2.4.tar.gz) = 2327513
SHA256 (volatility-2.5.zip) = uQ39GLapnhs17w+S8oQizKA76gt7jsQRz7xgPnKqWUs=
SIZE (volatility-2.5.zip) = 3276052

View File

@ -1,4 +1,4 @@
@comment $OpenBSD: PLIST,v 1.2 2014/09/15 08:31:12 sthen Exp $
@comment $OpenBSD: PLIST,v 1.3 2015/11/01 07:34:30 rpointel Exp $
bin/vol.py
lib/python${MODPY_VERSION}/site-packages/volatility/
lib/python${MODPY_VERSION}/site-packages/volatility-${MODPY_EGG_VERSION}-py${MODPY_VERSION}.egg-info/
@ -82,6 +82,8 @@ lib/python${MODPY_VERSION}/site-packages/volatility/plugins/crashinfo.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/crashinfo.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/dlldump.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/dlldump.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/drivermodule.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/drivermodule.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/dumpcerts.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/dumpcerts.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/dumpfiles.py
@ -109,6 +111,8 @@ lib/python${MODPY_VERSION}/site-packages/volatility/plugins/gui/constants.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/gui/constants.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/gui/desktops.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/gui/desktops.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/gui/editbox.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/gui/editbox.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/gui/eventhooks.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/gui/eventhooks.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/gui/gahti.py
@ -219,6 +223,8 @@ lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/find_file.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/find_file.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/flags.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/flags.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/getcwd.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/getcwd.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/hidden_modules.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/hidden_modules.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/ifconfig.py
@ -231,6 +237,8 @@ lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/kernel_opened_
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/kernel_opened_files.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/keyboard_notifiers.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/keyboard_notifiers.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/ld_env.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/ld_env.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/ldrmodules.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/ldrmodules.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/libc_env.py
@ -261,8 +269,10 @@ lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/mount.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/mount.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/mount_cache.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/mount_cache.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/netfiler.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/netfiler.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/netfilter.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/netfilter.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/netscan.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/netscan.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/netstat.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/netstat.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/pidhashtable.py
@ -312,6 +322,8 @@ lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/tty_check.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/vma_cache.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/linux/vma_cache.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/WKdm.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/WKdm.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/__init__.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/__init__.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/adiummsgs.py
@ -342,6 +354,8 @@ lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/check_trap_table
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/check_trap_table.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/common.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/common.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/compressed_swap.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/compressed_swap.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/contacts.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/contacts.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/dead_procs.py
@ -360,6 +374,8 @@ lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/dump_map.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/dump_map.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/find_aslr_shift.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/find_aslr_shift.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/get_profile.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/get_profile.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/gkextmap.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/gkextmap.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/ifconfig.py
@ -374,6 +390,12 @@ lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/librarydump.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/librarydump.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/list_files.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/list_files.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/list_kauth_listeners.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/list_kauth_listeners.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/list_kauth_scopes.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/list_kauth_scopes.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/list_raw.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/list_raw.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/list_zones.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/list_zones.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/lsmod.py
@ -406,6 +428,8 @@ lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/notesapp.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/notesapp.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/notifiers.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/notifiers.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/orphan_threads.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/orphan_threads.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/pgrp_hash_table.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/pgrp_hash_table.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/pid_hash_table.py
@ -418,6 +442,8 @@ lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/procdump.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/procdump.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/psaux.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/psaux.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/psenv.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/psenv.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/pslist.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/pslist.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/pstasks.py
@ -434,6 +460,10 @@ lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/session_hash_tab
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/session_hash_table.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/socket_filters.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/socket_filters.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/threads.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/threads.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/threads_simple.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/threads_simple.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/trustedbsd.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/trustedbsd.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/mac/version.py
@ -459,6 +489,8 @@ lib/python${MODPY_VERSION}/site-packages/volatility/plugins/malware/malfind.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/malware/malfind.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/malware/psxview.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/malware/psxview.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/malware/servicediff.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/malware/servicediff.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/malware/svcscan.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/malware/svcscan.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/malware/threads.py
@ -545,6 +577,12 @@ lib/python${MODPY_VERSION}/site-packages/volatility/plugins/overlays/windows/vis
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/overlays/windows/vista_sp2_x64_vtypes.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/overlays/windows/vista_sp2_x86_vtypes.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/overlays/windows/vista_sp2_x86_vtypes.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/overlays/windows/win10.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/overlays/windows/win10.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/overlays/windows/win10_x64_vtypes.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/overlays/windows/win10_x64_vtypes.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/overlays/windows/win10_x86_vtypes.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/overlays/windows/win10_x86_vtypes.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/overlays/windows/win2003.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/overlays/windows/win2003.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/overlays/windows/win2003_sp0_x86_syscalls.py
@ -579,6 +617,10 @@ lib/python${MODPY_VERSION}/site-packages/volatility/plugins/overlays/windows/win
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/overlays/windows/win7_sp1_x86_vtypes.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/overlays/windows/win8.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/overlays/windows/win8.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/overlays/windows/win81_u1_x64_vtypes.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/overlays/windows/win81_u1_x64_vtypes.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/overlays/windows/win81_u1_x86_vtypes.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/overlays/windows/win81_u1_x86_vtypes.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/overlays/windows/win8_kdbg.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/overlays/windows/win8_kdbg.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/overlays/windows/win8_sp0_x64_syscalls.py
@ -626,8 +668,12 @@ lib/python${MODPY_VERSION}/site-packages/volatility/plugins/raw2dmp.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/registry/
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/registry/__init__.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/registry/__init__.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/registry/amcache.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/registry/amcache.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/registry/auditpol.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/registry/auditpol.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/registry/dumpregistry.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/registry/dumpregistry.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/registry/hivelist.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/registry/hivelist.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/registry/hivescan.py
@ -642,6 +688,8 @@ lib/python${MODPY_VERSION}/site-packages/volatility/plugins/registry/shellbags.p
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/registry/shellbags.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/registry/shimcache.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/registry/shimcache.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/registry/shutdown.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/registry/shutdown.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/registry/userassist.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/registry/userassist.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/sockets.py
@ -668,18 +716,37 @@ lib/python${MODPY_VERSION}/site-packages/volatility/plugins/vmwareinfo.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/vmwareinfo.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/volshell.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/volshell.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/win10cookie.py
lib/python${MODPY_VERSION}/site-packages/volatility/plugins/win10cookie.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/poolscan.py
lib/python${MODPY_VERSION}/site-packages/volatility/poolscan.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/protos.py
lib/python${MODPY_VERSION}/site-packages/volatility/protos.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/registry.py
lib/python${MODPY_VERSION}/site-packages/volatility/registry.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/renderers/
lib/python${MODPY_VERSION}/site-packages/volatility/renderers/__init__.py
lib/python${MODPY_VERSION}/site-packages/volatility/renderers/__init__.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/renderers/basic.py
lib/python${MODPY_VERSION}/site-packages/volatility/renderers/basic.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/renderers/dot.py
lib/python${MODPY_VERSION}/site-packages/volatility/renderers/dot.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/renderers/html.py
lib/python${MODPY_VERSION}/site-packages/volatility/renderers/html.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/renderers/sqlite.py
lib/python${MODPY_VERSION}/site-packages/volatility/renderers/sqlite.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/renderers/text.py
lib/python${MODPY_VERSION}/site-packages/volatility/renderers/text.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/renderers/xlsx.py
lib/python${MODPY_VERSION}/site-packages/volatility/renderers/xlsx.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/scan.py
lib/python${MODPY_VERSION}/site-packages/volatility/scan.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/timefmt.py
lib/python${MODPY_VERSION}/site-packages/volatility/timefmt.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/utils.py
lib/python${MODPY_VERSION}/site-packages/volatility/utils.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/validity.py
lib/python${MODPY_VERSION}/site-packages/volatility/validity.pyc
lib/python${MODPY_VERSION}/site-packages/volatility/win32/
lib/python${MODPY_VERSION}/site-packages/volatility/win32/__init__.py
lib/python${MODPY_VERSION}/site-packages/volatility/win32/__init__.pyc
@ -705,24 +772,39 @@ lib/python${MODPY_VERSION}/site-packages/volatility/win32/xpress.py
lib/python${MODPY_VERSION}/site-packages/volatility/win32/xpress.pyc
share/volatility/
share/volatility/contrib/
share/volatility/contrib/__init__.py
share/volatility/contrib/library_example/
share/volatility/contrib/library_example/libapi.py
share/volatility/contrib/library_example/pslist_json.py
share/volatility/contrib/plugins/
share/volatility/contrib/plugins/__init__.py
share/volatility/contrib/plugins/aspaces/
share/volatility/contrib/plugins/aspaces/__init__.py
share/volatility/contrib/plugins/aspaces/ewf.py
share/volatility/contrib/plugins/disablewarnings.py
share/volatility/contrib/plugins/enumfunc.py
share/volatility/contrib/plugins/example.py
share/volatility/contrib/plugins/malware/
share/volatility/contrib/plugins/malware/__init__.py
share/volatility/contrib/plugins/malware/poisonivy.py
share/volatility/contrib/plugins/malware/zeusscan.py
share/volatility/contrib/plugins/pagecheck.py
share/volatility/contrib/plugins/psdispscan.py
share/volatility/contrib/plugins/scanprof.py
share/volatility/tools/
share/volatility/tools/linux/
share/volatility/tools/linux/Makefile
share/volatility/tools/linux/Makefile.enterprise
share/volatility/tools/linux/kcore/
share/volatility/tools/linux/kcore/Makefile
share/volatility/tools/linux/kcore/elf.h
share/volatility/tools/linux/kcore/getkcore.c
share/volatility/tools/linux/kcore/getkcore.h
share/volatility/tools/linux/module.c
share/volatility/tools/linux/pmem/
share/volatility/tools/linux/pmem/Makefile
share/volatility/tools/linux/pmem/pmem.c
share/volatility/tools/mac/
share/volatility/tools/mac/convert.py
share/volatility/tools/mac/generate_profile_list.py
share/volatility/tools/mac/mac_create_all_profiles.py
share/volatility/tools/vtype_diff.py
share/volatility/tools/windows/
share/volatility/tools/windows/parsesummary.py