WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-08-29 11:19:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

Windows Modules: Update dependents

Browse Source 
This updates the ssdt, truecrypt, drivermodule, driverirp, and verinfo
plugins to use the new method signatures from the Modules plugin, and
updates the requirement version numbers as well.

Co-authored-by: Andrew Case <andrew@dfir.org>
This commit is contained in:
David McDonald
2025-03-05 17:59:38 -06:00
co-authored by Andrew Case
parent 73baf67d27
commit 13550aef3f
5 changed files with 8 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/plugins/windows/driverirp.py
+1 -1
View File
@@ -65,7 +65,7 @@ class DriverIrp(interfaces.plugins.PluginInterface):
name="driverscan", plugin=driverscan.DriverScan, version=(2, 0, 0)
),
requirements.PluginRequirement(
name="modules", plugin=modules.Modules, version=(2, 1, 0)
name="modules", plugin=modules.Modules, version=(3, 0, 0)
),
]
volatility3/framework/plugins/windows/drivermodule.py
+1 -1
View File
@@ -32,7 +32,7 @@ class DriverModule(interfaces.plugins.PluginInterface):
name="driverscan", plugin=driverscan.DriverScan, version=(2, 0, 0)
),
requirements.PluginRequirement(
name="modules", plugin=modules.Modules, version=(2, 1, 0)
name="modules", plugin=modules.Modules, version=(3, 0, 0)
),
]
volatility3/framework/plugins/windows/ssdt.py
+1 -1
View File
@@ -32,7 +32,7 @@ class SSDT(plugins.PluginInterface):
architectures=["Intel32", "Intel64"],
),
requirements.PluginRequirement(
name="modules", plugin=modules.Modules, version=(2, 0, 0)
name="modules", plugin=modules.Modules, version=(3, 0, 0)
),
]
volatility3/framework/plugins/windows/truecrypt.py
+2 -2
View File
@@ -33,7 +33,7 @@ class Passphrase(interfaces.plugins.PluginInterface):
architectures=["Intel32", "Intel64"],
),
requirements.VersionRequirement(
name="modules", component=modules.Modules, version=(2, 0, 0)
name="modules", component=modules.Modules, version=(3, 0, 0)
),
requirements.IntRequirement(
name="min-length",
@@ -121,7 +121,7 @@ class Passphrase(interfaces.plugins.PluginInterface):
def _generator(self):
kernel = self.context.modules[self.config["kernel"]]
mods: Iterable[ObjectInterface] = modules.Modules.list_modules(
self.context, kernel.layer_name, kernel.symbol_table_name
self.context, self.config["kernel"]
)
truecrypt_module_base = next(
mod.DllBase
volatility3/framework/plugins/windows/verinfo.py
+3 -5
View File
@@ -46,7 +46,7 @@ class VerInfo(interfaces.plugins.PluginInterface):
name="pslist", plugin=pslist.PsList, version=(2, 0, 0)
),
requirements.PluginRequirement(
name="modules", plugin=modules.Modules, version=(2, 0, 0)
name="modules", plugin=modules.Modules, version=(3, 0, 0)
),
requirements.BooleanRequirement(
name="extensive",
@@ -259,13 +259,11 @@ class VerInfo(interfaces.plugins.PluginInterface):
self.context, kernel.layer_name, kernel.symbol_table_name
)
mods = modules.Modules.list_modules(
self.context, kernel.layer_name, kernel.symbol_table_name
)
mods = modules.Modules.list_modules(self.context, self.config["kernel"])
# populate the session layers for kernel modules
session_layers = modules.Modules.get_session_layers(
self.context, kernel.layer_name, kernel.symbol_table_name
self.context, self.config["kernel"]
)
return renderers.TreeGrid(