WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-23 18:14:51 +02:00
Code Issues Packages Projects Releases Wiki Activity

Change Unparsable to NotApplicable for situations we expect.

Browse Source
This commit is contained in:
Mike Auty
2018-03-10 21:43:46 +00:00
parent 30673d428a
commit 1a80dbf935
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/symbols/windows/extensions/__init__.py
+3 -3
View File
@@ -189,7 +189,7 @@ class _EPROCESS(generic.GenericIntelProcess):
try:
if hasattr(self, "Session"):
if self.Session == 0:
return renderers.UnparsableValue()
return renderers.NotApplicableValue()
layer_name = self.vol.layer_name
symbol_table_name = self.get_symbol_table().name
@@ -209,14 +209,14 @@ class _EPROCESS(generic.GenericIntelProcess):
def get_create_time(self):
unix_time = self.CreateTime.QuadPart // 10000000
if unix_time == 0:
return renderers.UnparsableValue()
return renderers.NotApplicableValue()
unix_time = unix_time - 11644473600
return str(datetime.datetime.utcfromtimestamp(unix_time))
def get_exit_time(self):
unix_time = self.ExitTime.QuadPart // 10000000
if unix_time == 0:
return renderers.UnparsableValue()
return renderers.NotApplicableValue()
unix_time = unix_time - 11644473600
return str(datetime.datetime.utcfromtimestamp(unix_time))