diff --git a/volatility3/framework/plugins/windows/malware/pebmasquerade.py b/volatility3/framework/plugins/windows/malware/pebmasquerade.py index e4bd219e2..8c6c0b4b0 100644 --- a/volatility3/framework/plugins/windows/malware/pebmasquerade.py +++ b/volatility3/framework/plugins/windows/malware/pebmasquerade.py @@ -134,7 +134,7 @@ class PebMasquerade(interfaces.plugins.PluginInterface): vollog.warning( "Error reading EPROCESS.ImageFileName for PID %d: %s", proc.UniqueProcessId, - str(e)[:50], + str(e), ) try: @@ -156,7 +156,7 @@ class PebMasquerade(interfaces.plugins.PluginInterface): vollog.warning( "Error reading SeAuditProcessCreationInfo for PID %d: %s", proc.UniqueProcessId, - str(e)[:50], + str(e), ) try: @@ -176,7 +176,7 @@ class PebMasquerade(interfaces.plugins.PluginInterface): vollog.warning( "Error reading PEB.ImagePathName for PID %d: %s", proc.UniqueProcessId, - str(e)[:50], + str(e), ) try: @@ -192,14 +192,14 @@ class PebMasquerade(interfaces.plugins.PluginInterface): vollog.warning( "Error reading PEB.ProcessParameters.CommandLine for PID %d: %s", proc.UniqueProcessId, - str(e)[:50], + str(e), ) except (AttributeError, exceptions.InvalidAddressException): # Important for cases where PEB does not exist or is inaccessible (e.g SYSTEM process) vollog.debug("Unable to access PEB for PID %d", proc.UniqueProcessId) except Exception as e: vollog.warning( - "Error accessing PEB for PID %d: %s", proc.UniqueProcessId, str(e)[:50] + "Error accessing PEB for PID %d: %s", proc.UniqueProcessId, str(e) ) return ( @@ -245,7 +245,7 @@ class PebMasquerade(interfaces.plugins.PluginInterface): vollog.debug( "Error extracting command line path for PID %d: %s", proc_id, - str(e)[:50], + str(e), ) # Populate notes for enrichment