mirror of
https://github.com/volatilityfoundation/volatility3.git
synced 2026-09-12 04:37:38 +02:00
Merge pull request #1942 from volatilityfoundation/issues/issue1875-improve-win11-detection
Improve Win11 DTB detection
This commit is contained in:
@@ -200,7 +200,7 @@ class WindowsIntelStacker(interfaces.automagic.StackerLayerInterface):
|
||||
(
|
||||
"Detecting Self-referential pointer for recent windows",
|
||||
[DtbSelfRef64bit()],
|
||||
[(0x150000, 0x150000), (0x550000, 0x1A0000)],
|
||||
[(0x150000, 0x150000), (0x550000, 0x1A0000), (0x900000, 0x100000)],
|
||||
),
|
||||
(
|
||||
"Older windows fixed location self-referential pointers",
|
||||
|
||||
Reference in New Issue
Block a user