From 0d3b155766ce4803ab718bfcb2e296bc7ba0dd41 Mon Sep 17 00:00:00 2001 From: Andrew Case Date: Sat, 8 Mar 2025 00:50:51 +0000 Subject: [PATCH] Change debug to warning to always notify user --- volatility3/framework/plugins/windows/iat.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/volatility3/framework/plugins/windows/iat.py b/volatility3/framework/plugins/windows/iat.py index acd3aaea2..f2ba8e576 100644 --- a/volatility3/framework/plugins/windows/iat.py +++ b/volatility3/framework/plugins/windows/iat.py @@ -74,7 +74,7 @@ class IAT(interfaces.plugins.PluginInterface): pe_data.seek(offset) pe_data.write(data) except (exceptions.InvalidAddressException, ValueError) as excp: - vollog.debug( + vollog.warning( f"Exception triggered when reconstructing PE file for process {proc.UniqueProcessId} at address {peb.ImageBaseAddress:#x} due to {excp}. Output file may be corrupt and/or truncated." )