WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-10 03:37:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

Virtmap: Improve debugging messages and issues ignoring unused memory.

Browse Source
This commit is contained in:
Mike Auty
2019-12-05 00:20:53 +00:00
parent f4522c07d9
commit 4295401afd
2 changed files with 10 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/plugins/windows/poolscanner.py
+2 -1
View File
@@ -367,10 +367,11 @@ class PoolScanner(plugins.PluginInterface):
sections = None
if quick:
vollog.debug("Locating windows allocated sections to scan")
scan_module = context.module(module_name = symbol_table,
layer_name = scan_layer,
offset = context.layers[scan_layer].config['kernel_virtual_offset'])
sections = virtmap.VirtMap.scannable_sections(scan_module)
sections = list(virtmap.VirtMap.scannable_sections(scan_module))
is_windows_10 = cls.is_windows_10(context, symbol_table)
if not is_windows_10: