WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-09 19:27:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

Change thrdscan from looking for kernel processes

Browse Source
This commit is contained in:
Andrew Case
2025-03-26 00:50:34 +00:00
parent e52aea886e
commit 43ab95f4c5
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/plugins/windows/windows.py
+3 -3
View File
@@ -189,9 +189,9 @@ class TestWindowsThrdscan:
"windows.thrdscan.ThrdScan", image, volatility, python
)
assert rc == 0
assert out.find(b"\t4\t8") != -1
assert out.find(b"\t4\t12") != -1
assert out.find(b"\t4\t16") != -1
assert out.find(b"\t1812\t2768\t0x7c810856") != -1
assert out.find(b"\t840\t2964\t0x7c810856") != -1
assert out.find(b"\t2536\t2552\t0x7c810856") != -1
class TestWindowsPrivileges: