From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 27EE615808B for ; Tue, 5 Apr 2022 03:33:54 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 700CAE0943; Tue, 5 Apr 2022 03:33:50 +0000 (UTC) Received: from smtp.gentoo.org (woodpecker.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 07CB3E0932 for ; Tue, 5 Apr 2022 03:33:50 +0000 (UTC) Received: from oystercatcher.gentoo.org (unknown [IPv6:2a01:4f8:202:4333:225:90ff:fed9:fc84]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 886E9341399 for ; Tue, 5 Apr 2022 03:33:48 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 727E2398 for ; Tue, 5 Apr 2022 03:33:45 +0000 (UTC) From: "Sam James" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Sam James" Message-ID: <1649129056.e9333203c1f3a669342184cc1eca695da4b0f519.sam@gentoo> Subject: [gentoo-commits] repo/gentoo:master commit in: app-forensics/volatility3/ X-VCS-Repository: repo/gentoo X-VCS-Files: app-forensics/volatility3/Manifest app-forensics/volatility3/metadata.xml app-forensics/volatility3/volatility3-2.0.0.ebuild X-VCS-Directories: app-forensics/volatility3/ X-VCS-Committer: sam X-VCS-Committer-Name: Sam James X-VCS-Revision: e9333203c1f3a669342184cc1eca695da4b0f519 X-VCS-Branch: master Date: Tue, 5 Apr 2022 03:33:45 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply X-Archives-Salt: 16ae1d5e-57aa-4f74-9ca1-33d898fd3828 X-Archives-Hash: e196ccd462bb9b4a848dac8d85fc7e91 commit: e9333203c1f3a669342184cc1eca695da4b0f519 Author: Mario Haustein hrz tu-chemnitz de> AuthorDate: Sun Jan 16 13:19:31 2022 +0000 Commit: Sam James gentoo org> CommitDate: Tue Apr 5 03:24:16 2022 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e9333203 app-forensics/volatility3: new ebuild Package-Manager: Portage-3.0.28, Repoman-3.0.3 Signed-off-by: Mario Haustein hrz.tu-chemnitz.de> Signed-off-by: Sam James gentoo.org> app-forensics/volatility3/Manifest | 1 + app-forensics/volatility3/metadata.xml | 29 ++++++++++++++++++++ app-forensics/volatility3/volatility3-2.0.0.ebuild | 31 ++++++++++++++++++++++ 3 files changed, 61 insertions(+) diff --git a/app-forensics/volatility3/Manifest b/app-forensics/volatility3/Manifest new file mode 100644 index 000000000000..696d54487e62 --- /dev/null +++ b/app-forensics/volatility3/Manifest @@ -0,0 +1 @@ +DIST volatility3-2.0.0.tar.gz 427713 BLAKE2B c88f44ad033094c7dbab703d3b5f296bb5329bfb13e375715d79616d042d68f828a895b34be07b48368f33dfab80f063f98bfd1a27c07b6ab2b40ba850dfd673 SHA512 e3ed4f05641af5315f01edd4d0afb608b2d1c8fea49a8d8b4e16b47fd10a3cd25f5c39750374801ec72c5ee8ddc3680f6a68d88a09a40faf166fd8ef1098bbef diff --git a/app-forensics/volatility3/metadata.xml b/app-forensics/volatility3/metadata.xml new file mode 100644 index 000000000000..edbcd55f84f9 --- /dev/null +++ b/app-forensics/volatility3/metadata.xml @@ -0,0 +1,29 @@ + + + + + mario.haustein@hrz.tu-chemnitz.de + Mario Haustein + + + sam@gentoo.org + Sam James + + + Volatility is the world's most widely used framework for extracting + digital artifacts from volatile memory (RAM) samples. The extraction + techniques are performed completely independent of the system being + investigated but offer visibility into the runtime state of the system. + + + support plugins that decrypt passwords, password hashes, etc. + support plugins that perform malware analysis and disassemble code + improve error messages regarding improperly configured ISF files + support memory acquisition via leechcore + support AVMLs native compression format + support YARA pattern matching engine + + + volatilityfoundation/volatility3 + + diff --git a/app-forensics/volatility3/volatility3-2.0.0.ebuild b/app-forensics/volatility3/volatility3-2.0.0.ebuild new file mode 100644 index 000000000000..e36930a8b1a5 --- /dev/null +++ b/app-forensics/volatility3/volatility3-2.0.0.ebuild @@ -0,0 +1,31 @@ +# Copyright 1999-2022 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +PYTHON_COMPAT=( python3_{8..10} ) + +inherit distutils-r1 + +MY_PV=${PV//_beta/-beta.} + +DESCRIPTION="Framework for analyzing volatile memory" +HOMEPAGE="https://github.com/volatilityfoundation/volatility3/ https://www.volatilityfoundation.org/" +SRC_URI="https://github.com/volatilityfoundation/volatility3/archive/v${MY_PV}.tar.gz -> ${P}.tar.gz" +S="${WORKDIR}"/${PN}-${MY_PV} + +LICENSE="GPL-2+" +SLOT="0" +KEYWORDS="~amd64 ~x86" +IUSE="crypt disasm jsonschema leechcore snappy yara" + +RDEPEND=" + >=dev-python/pefile-2017.8.1[${PYTHON_USEDEP}] + crypt? ( >=dev-python/pycryptodome-3[${PYTHON_USEDEP}] ) + disasm? ( >=dev-libs/capstone-3.0.5[python,${PYTHON_USEDEP}] ) + jsonschema? ( >=dev-python/jsonschema-2.3.0[${PYTHON_USEDEP}] ) + leechcore? ( >=dev-python/leechcorepyc-2.4.0[${PYTHON_USEDEP}] ) + snappy? ( >=dev-python/snappy-0.6.0[${PYTHON_USEDEP}] ) + yara? ( >=dev-python/yara-python-3.8.0[${PYTHON_USEDEP}] ) +" +DEPEND="${RDEPEND}"