diff --git a/volatility/framework/symbols/mac/extensions/__init__.py b/volatility/framework/symbols/mac/extensions/__init__.py
index acf1ae357..adb5b5257 100644
--- a/volatility/framework/symbols/mac/extensions/__init__.py
+++ b/volatility/framework/symbols/mac/extensions/__init__.py
@@ -137,6 +137,7 @@ class vnode(generic.GenericIntelProcess):
 class vm_map_entry(generic.GenericIntelProcess):
 
     def is_suspicious(self, context, config_prefix):
+        """Flags memory regions that are mapped rwx or that map an executable not back from a file on disk"""
         ret = False
 
         perms = self.get_perms()