WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-25 19:14:52 +02:00
Code Issues Packages Projects Releases Wiki Activity

add KTHREAD struct

Browse Source
This commit is contained in:
memoryforensics1
2020-09-02 10:52:53 +01:00
committed by ikelos
parent 6487eb5596
commit 489dd0cf77
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/symbols/windows/__init__.py
+1
View File
@@ -14,6 +14,7 @@ class WindowsKernelIntermedSymbols(intermed.IntermediateSymbolTable):
# Set-up windows specific types
self.set_type_class('_ETHREAD', extensions.ETHREAD)
self.set_type_class('_KTHREAD', extensions.KTHREAD)
self.set_type_class('_LIST_ENTRY', extensions.LIST_ENTRY)
self.set_type_class('_EPROCESS', extensions.EPROCESS)
self.set_type_class('_UNICODE_STRING', extensions.UNICODE_STRING)