WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-12 20:57:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add in Windows specific constants for kernel modules (whose symbol tables are loaded by automagic).

Browse Source
This commit is contained in:
Mike Auty
2018-08-02 10:59:14 +01:00
parent bca972f28a
commit 105816beeb
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/constants/windows/__init__.py
+5
View File
@@ -0,0 +1,5 @@
"""Volatility 3 Linux Constants
Windows-specific values that aren't found in debug symbols"""
KERNEL_MODULE_NAMES = ["ntkrnlmp", "ntkrnlpa", "ntkrpamp", "ntoskrnl"]