WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-06 17:57:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add: code comment for windows version

Browse Source
This commit is contained in:
Donghyun Kim
2022-05-10 12:31:56 +09:00
parent f4dd582f15
commit 1125be122e
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/symbols/windows/extensions/__init__.py
+1
View File
@@ -450,6 +450,7 @@ class ETHREAD(objects.StructType):
def owning_process(self) -> interfaces.objects.ObjectInterface:
"""Return the EPROCESS that owns this thread."""
if(self.has_member("ThreadsProcess")):
return self.ThreadsProcess.dereference().cast("_EPROCESS")
elif(self.has_member("Tcb") and self.Tcb.has_member("Process")):