From 23e61d9756294778040188697283e1a58392c19a Mon Sep 17 00:00:00 2001
From: Mike Auty <mike.auty@gmail.com>
Date: Thu, 22 Dec 2016 16:00:46 +0000
Subject: [PATCH] Add in a little more information to the debug log.

---
 volatility/framework/automagic/windows.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/volatility/framework/automagic/windows.py b/volatility/framework/automagic/windows.py
index e8bcbaf8e..f80bb0275 100644
--- a/volatility/framework/automagic/windows.py
+++ b/volatility/framework/automagic/windows.py
@@ -197,6 +197,7 @@ class WintelHelper(interfaces.automagic.AutomagicInterface, interfaces.automagic
                                     name = new_layer_name)
             break
         if layer is None:
+            vollog.debug("Self-referential pointer not in well-known location, moving to recent windows heuristic")
             # There is a very high chance that the DTB will live in this narrow segment, assuming we couldn't find it previously
             hits = context.memory[layer_name].scan(context, PageMapScanner([DtbSelfRef64bit()]), min_address = 0x1a0000,
                                                    max_address = 0x1f0000)