WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-02 13:28:45 +02:00
Code Issues Packages Projects Releases Wiki Activity

Linux: Don't forget the pslist pid parameter

Browse Source
This commit is contained in:
Mike Auty
2020-07-11 10:32:15 +01:00
parent 2427a7c988
commit 07ddbb60f7
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/plugins/linux/pslist.py
+5 -2
View File
@@ -5,7 +5,6 @@
from typing import Callable, Iterable, List, Any
from volatility.framework import renderers, interfaces, contexts
from volatility.framework.automagic import linux
from volatility.framework.configuration import requirements
from volatility.framework.objects import utility
@@ -21,7 +20,11 @@ class PsList(interfaces.plugins.PluginInterface):
requirements.TranslationLayerRequirement(name = 'primary',
description = 'Memory layer for the kernel',
architectures = ["Intel32", "Intel64"]),
requirements.SymbolTableRequirement(name = "vmlinux", description = "Linux kernel symbols")
requirements.SymbolTableRequirement(name = "vmlinux", description = "Linux kernel symbols"),
requirements.IntRequirement(name = 'pid',
description = 'Filter on a specific process ID',
default = None,
optional = True)
]
@classmethod