mirror of
https://github.com/volatilityfoundation/volatility3.git
synced 2026-08-17 20:35:40 +02:00
black and ruff
This commit is contained in:
@@ -166,14 +166,14 @@ class ProcessSpoofing(plugins.PluginInterface):
|
||||
) -> Tuple[Optional[str], Optional[str], Optional[str], Optional[str], bool]:
|
||||
"""
|
||||
Extract all process name sources for comparison
|
||||
|
||||
|
||||
Returns:
|
||||
Tuple of (exe_path, exe_basename, cmdline_basename, comm)
|
||||
"""
|
||||
exe_path = cls.get_executable_path(context, task)
|
||||
exe_basename = PurePosixPath(exe_path).name if exe_path else None
|
||||
if exe_basename and exe_basename.endswith(" (deleted)"):
|
||||
exe_basename = exe_basename[:-len(" (deleted)")]
|
||||
exe_basename = exe_basename[: -len(" (deleted)")]
|
||||
cmdline_basename = cls.get_cmdline_basename(context, task)
|
||||
comm = cls.get_comm(task)
|
||||
|
||||
|
||||
Reference in New Issue
Block a user