WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-08-17 20:35:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

Windows: Convert mftscan plugins to LayerData output

Browse Source
This commit is contained in:
Mike Auty
2025-03-23 00:41:43 +00:00
parent 1d5d981be1
commit 2304ea4cbe
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/plugins/windows/mftscan.py
+3 -3
View File
@@ -223,7 +223,7 @@ class MFTScan(interfaces.plugins.PluginInterface, timeliner.TimeLinerInterface):
content = attr.get_resident_filecontent()
if content:
content = format_hints.HexBytes(content)
content = interfaces.renderers.LayerData.from_object(content)
else:
content = renderers.NotAvailableValue()
@@ -387,7 +387,7 @@ class ADS(interfaces.plugins.PluginInterface):
("MFT Type", str),
("Filename", str),
("ADS Filename", str),
("Hexdump", format_hints.HexBytes),
("Hexdump", interfaces.renderers.LayerData),
],
self._generator(),
)
@@ -453,7 +453,7 @@ class ResidentData(interfaces.plugins.PluginInterface):
("Record Number", int),
("MFT Type", str),
("Filename", str),
("Hexdump", format_hints.HexBytes),
("Hexdump", interfaces.renderers.LayerData),
],
self._generator(),
)