WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-08-17 20:35:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

add PluginRequirements for ssdt and svcscan. add missing _version to svcscan

Browse Source
This commit is contained in:
Michael Ligh
2019-09-08 16:08:48 +01:00
committed by ikelos
parent 1d7f2a9582
commit 4e3db7a3de
2 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/plugins/windows/callbacks.py
+3 -1
View File
@@ -25,7 +25,9 @@ class Callbacks(interfaces_plugins.PluginInterface):
requirements.TranslationLayerRequirement(name = 'primary',
description = 'Memory layer for the kernel',
architectures = ["Intel32", "Intel64"]),
requirements.SymbolTableRequirement(name = "nt_symbols", description = "Windows kernel symbols")
requirements.SymbolTableRequirement(name = "nt_symbols", description = "Windows kernel symbols"),
requirements.PluginRequirement(name = 'ssdt', plugin = ssdt.SSDT, version = (1, 0, 0)),
requirements.PluginRequirement(name = 'svcscan', plugin = svcscan.SvcScan, version = (1, 0, 0))
]
@staticmethod
volatility/framework/plugins/windows/svcscan.py
+2
View File
@@ -19,6 +19,8 @@ vollog = logging.getLogger(__name__)
class SvcScan(interfaces.plugins.PluginInterface):
"""Scans for windows services."""
_version = (1, 0, 0)
is_vista_or_later = poolscanner.os_distinguisher(
version_check = lambda x: x >= (6, 0), fallback_checks = [("KdCopyDataBlock", None, True)])