WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-08-25 15:42:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

Mac - have pstree inherit from tasks

Browse Source
This commit is contained in:
Andrew Case
2019-09-26 23:11:26 -05:00
parent b1d07396a0
commit 2a98227306
1 changed files with 3 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/plugins/mac/pstree.py
+3 -4
View File
@@ -6,8 +6,7 @@ from volatility.framework import renderers
from volatility.framework.configuration import requirements
from volatility.framework.interfaces import plugins
from volatility.framework.objects import utility
from volatility.plugins.mac import pslist
from volatility.plugins.mac import tasks
class PsTree(plugins.PluginInterface):
"""Plugin for listing processes in a tree based on their parent process
@@ -26,7 +25,7 @@ class PsTree(plugins.PluginInterface):
description = 'Memory layer for the kernel',
architectures = ["Intel32", "Intel64"]),
requirements.SymbolTableRequirement(name = "darwin", description = "Mac kernel symbols"),
requirements.PluginRequirement(name = 'pslist', plugin = pslist.PsList, version = (1, 0, 0))
requirements.PluginRequirement(name = 'tasks', plugin = tasks.Tasks, version = (1, 0, 0))
]
def _find_level(self, pid):
@@ -46,7 +45,7 @@ class PsTree(plugins.PluginInterface):
def _generator(self):
"""Generates the."""
for proc in pslist.PsList.list_tasks(self.context, self.config['primary'], self.config['darwin']):
for proc in tasks.Tasks.list_tasks(self.context, self.config['primary'], self.config['darwin']):
self._processes[proc.p_pid] = proc
# Build the child/level maps