WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-13 13:17:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

Split layer gathering and add KeyError checks

Browse Source
This commit is contained in:
Andrew Case
2024-10-14 13:48:00 -05:00
parent 9b8eea015a
commit 2c73d8812a
1 changed files with 11 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/plugins/windows/mftscan.py
+11 -1
View File
@@ -44,7 +44,17 @@ class MFTScan(interfaces.plugins.PluginInterface, timeliner.TimeLinerInterface):
]
def enumerate_mft_records(self, attr_callback):
phys_layer = self.context.layers[self.config["primary"]].config["memory_layer"]
try:
primary = self.context.layers[self.config["primary"]]
except KeyError:
vollog.error("Unable to obtain primary layer for scanning. Please file a bug on GitHub about this issue.")
return
try:
phys_layer = primary.config["memory_layer"]
except KeyError:
vollog.error("Unable to obtain memory layer from primary layer. Please file a bug on GitHub about this issue.")
return
layer = self.context.layers[phys_layer]