From 17707cb576a3bb60ea06ac1842a07c2447da0a2e Mon Sep 17 00:00:00 2001 From: mmadersbacher Date: Tue, 18 Aug 2026 19:29:19 +0200 Subject: [PATCH] Fix architecture typo blocking scheduled_tasks on 32-bit images The kernel requirement listed "Intel33". Intel layers only ever report Intel32 or Intel64, so on a 32-bit image the requirement could never be satisfied and the plugin aborted with a misleading "Unsatisfied requirement ... kernel.layer_name" instead of running. --- .../framework/plugins/windows/registry/scheduled_tasks.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/volatility3/framework/plugins/windows/registry/scheduled_tasks.py b/volatility3/framework/plugins/windows/registry/scheduled_tasks.py index a3e5fabe2..325061bbd 100644 --- a/volatility3/framework/plugins/windows/registry/scheduled_tasks.py +++ b/volatility3/framework/plugins/windows/registry/scheduled_tasks.py @@ -1119,7 +1119,7 @@ class ScheduledTasks(interfaces.plugins.PluginInterface, timeliner.TimeLinerInte requirements.ModuleRequirement( name="kernel", description="Windows kernel", - architectures=["Intel33", "Intel64"], + architectures=["Intel32", "Intel64"], ), requirements.VersionRequirement( name="hivelist", component=hivelist.HiveList, version=(2, 0, 0)