Merge pull request #1942 from volatilityfoundation/issues/issue1875-improve-win11-detection

Improve Win11 DTB detection
This commit is contained in:
ikelos
2026-02-26 10:24:02 +00:00
committed by GitHub
+1 -1
View File
@@ -200,7 +200,7 @@ class WindowsIntelStacker(interfaces.automagic.StackerLayerInterface):
(
"Detecting Self-referential pointer for recent windows",
[DtbSelfRef64bit()],
[(0x150000, 0x150000), (0x550000, 0x1A0000)],
[(0x150000, 0x150000), (0x550000, 0x1A0000), (0x900000, 0x100000)],
),
(
"Older windows fixed location self-referential pointers",