diff --git a/volatility/framework/plugins/windows/strings.py b/volatility/framework/plugins/windows/strings.py index 12e9b75c9..2e65ed360 100644 --- a/volatility/framework/plugins/windows/strings.py +++ b/volatility/framework/plugins/windows/strings.py @@ -16,6 +16,7 @@ vollog = logging.getLogger(__name__) class Strings(interfaces.plugins.PluginInterface): + """Reads output from the strings command and indicates which process(es) each string belongs to.""" @classmethod def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]: diff --git a/volatility/framework/plugins/windows/vadyarascan.py b/volatility/framework/plugins/windows/vadyarascan.py index ffa177baa..9245ec920 100644 --- a/volatility/framework/plugins/windows/vadyarascan.py +++ b/volatility/framework/plugins/windows/vadyarascan.py @@ -21,6 +21,7 @@ except ImportError: class VadYaraScan(interfaces.plugins.PluginInterface): + """Scans all the Virtual Address Descriptor memory maps using yara.""" _version = (1, 0, 0) @classmethod diff --git a/volatility/framework/plugins/yarascan.py b/volatility/framework/plugins/yarascan.py index 700d888ad..9f6a3267e 100644 --- a/volatility/framework/plugins/yarascan.py +++ b/volatility/framework/plugins/yarascan.py @@ -34,8 +34,7 @@ class YaraScanner(interfaces.layers.ScannerInterface): class YaraScan(plugins.PluginInterface): - """Runs all relevant plugins that provide time related information and - orders the results by time.""" + """Scans memory using yara rules (string or file).""" @classmethod def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]: