WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-08 18:57:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

log which symbol does not exist

Browse Source
This commit is contained in:
Paul Kermann
2022-04-25 09:27:54 +03:00
parent bc04d22a1b
commit 0057f81269
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/plugins/windows/callbacks.py
+8 -1
View File
@@ -190,7 +190,14 @@ class Callbacks(interfaces.plugins.PluginInterface):
elif ntkrnlmp.has_symbol("CallbackListHead") and ntkrnlmp.has_symbol("CmpCallBackCount"):
yield from cls._list_registry_callbacks_new(context, layer_name, symbol_table, callback_table_name)
else:
vollog.debug("Cannot find CmpCallBackVector or CmpCallBackCount or CallbackListHead")
symbols_to_check = ["CmpCallBackVector", "CmpCallBackCount", "CallbackListHead"]
vollog.debug("Failed to get registry callbacks!")
for symbol_name in symbols_to_check:
symbol_status = "does not exist"
if ntkrnlmp.has_symbol(symbol_name):
symbol_status = "exists"
vollog.debug(f"symbol {symbol_name} {symbol_status}.")
return
@classmethod