From 2a98227306f2223d4accddc433ce71e110fbf750 Mon Sep 17 00:00:00 2001 From: Andrew Case Date: Thu, 26 Sep 2019 23:11:26 -0500 Subject: [PATCH] Mac - have pstree inherit from tasks --- volatility/framework/plugins/mac/pstree.py | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/volatility/framework/plugins/mac/pstree.py b/volatility/framework/plugins/mac/pstree.py index 1b471468c..203b3d527 100644 --- a/volatility/framework/plugins/mac/pstree.py +++ b/volatility/framework/plugins/mac/pstree.py @@ -6,8 +6,7 @@ from volatility.framework import renderers from volatility.framework.configuration import requirements from volatility.framework.interfaces import plugins from volatility.framework.objects import utility -from volatility.plugins.mac import pslist - +from volatility.plugins.mac import tasks class PsTree(plugins.PluginInterface): """Plugin for listing processes in a tree based on their parent process @@ -26,7 +25,7 @@ class PsTree(plugins.PluginInterface): description = 'Memory layer for the kernel', architectures = ["Intel32", "Intel64"]), requirements.SymbolTableRequirement(name = "darwin", description = "Mac kernel symbols"), - requirements.PluginRequirement(name = 'pslist', plugin = pslist.PsList, version = (1, 0, 0)) + requirements.PluginRequirement(name = 'tasks', plugin = tasks.Tasks, version = (1, 0, 0)) ] def _find_level(self, pid): @@ -46,7 +45,7 @@ class PsTree(plugins.PluginInterface): def _generator(self): """Generates the.""" - for proc in pslist.PsList.list_tasks(self.context, self.config['primary'], self.config['darwin']): + for proc in tasks.Tasks.list_tasks(self.context, self.config['primary'], self.config['darwin']): self._processes[proc.p_pid] = proc # Build the child/level maps