From 07ddbb60f7db718a8011ae190acac0a3a9f2c03d Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Sat, 11 Jul 2020 10:32:07 +0100 Subject: [PATCH] Linux: Don't forget the pslist pid parameter --- volatility/framework/plugins/linux/pslist.py | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/volatility/framework/plugins/linux/pslist.py b/volatility/framework/plugins/linux/pslist.py index c48815ed7..455b24394 100644 --- a/volatility/framework/plugins/linux/pslist.py +++ b/volatility/framework/plugins/linux/pslist.py @@ -5,7 +5,6 @@ from typing import Callable, Iterable, List, Any from volatility.framework import renderers, interfaces, contexts -from volatility.framework.automagic import linux from volatility.framework.configuration import requirements from volatility.framework.objects import utility @@ -21,7 +20,11 @@ class PsList(interfaces.plugins.PluginInterface): requirements.TranslationLayerRequirement(name = 'primary', description = 'Memory layer for the kernel', architectures = ["Intel32", "Intel64"]), - requirements.SymbolTableRequirement(name = "vmlinux", description = "Linux kernel symbols") + requirements.SymbolTableRequirement(name = "vmlinux", description = "Linux kernel symbols"), + requirements.IntRequirement(name = 'pid', + description = 'Filter on a specific process ID', + default = None, + optional = True) ] @classmethod