From 0e596c2112526041727fe9b9e5e1cdc7ad71bde9 Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Wed, 9 Sep 2020 00:29:31 +0100 Subject: [PATCH] Windows: Minor additions based on the framework bump --- volatility/framework/plugins/windows/pstree.py | 4 +++- volatility/framework/plugins/windows/registry/hivelist.py | 1 + 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/volatility/framework/plugins/windows/pstree.py b/volatility/framework/plugins/windows/pstree.py index f323c1b46..a30f22d5b 100644 --- a/volatility/framework/plugins/windows/pstree.py +++ b/volatility/framework/plugins/windows/pstree.py @@ -33,7 +33,9 @@ class PsTree(interfaces.plugins.PluginInterface): description = 'Display physical offsets instead of virtual', default = pslist.PsList.PHYSICAL_DEFAULT, optional = True), - requirements.VersionRequirement(name = 'pslist', component = pslist.PsList, version = (1, 0, 0)), + requirements.VersionRequirement(name = 'pslist', + component = pslist.PsList, + version = (2, 0, 0)), requirements.ListRequirement(name = 'pid', element_type = int, description = "Process ID to include (all other processes are excluded)", diff --git a/volatility/framework/plugins/windows/registry/hivelist.py b/volatility/framework/plugins/windows/registry/hivelist.py index 13c1eac22..81aa6b26a 100644 --- a/volatility/framework/plugins/windows/registry/hivelist.py +++ b/volatility/framework/plugins/windows/registry/hivelist.py @@ -40,6 +40,7 @@ class HiveList(interfaces.plugins.PluginInterface): """Lists the registry hives present in a particular memory image.""" _version = (1, 0, 0) + _required_framework_version = (2, 0, 0) @classmethod def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]: