diff --git a/doc/source/simple-plugin.rst b/doc/source/simple-plugin.rst index 7334353be..14ac8930f 100644 --- a/doc/source/simple-plugin.rst +++ b/doc/source/simple-plugin.rst @@ -35,7 +35,7 @@ to be able to run properly. Any that are defined as optional need not necessari return [requirements.TranslationLayerRequirement(name = 'primary', description = 'Memory layer for the kernel', architectures = ["Intel32", "Intel64"]), - requirements.SymbolRequirement(name = "nt_symbols", description = "Windows OS"), + requirements.SymbolTableRequirement(name = "nt_symbols", description = "Windows OS"), requirements.IntRequirement(name = 'pid', description = "Process ID to include (all other processes are excluded)", optional = True)] @@ -66,7 +66,7 @@ layers, for example a plugin that carries out some form of difference or statist :: - requirements.SymbolRequirement(name = "nt_symbols", description = "Windows OS"), + requirements.SymbolTableRequirement(name = "nt_symbols", description = "Windows OS"), This requirement specifies the need for a particular `SymbolTable` (:py:class:~`volatility.framework.interfaces.SymbolTableInterface`) to be loaded. This gets populated by various `Automagic` as the nearest sibling to a particular `TranslationLayerRequirement`. diff --git a/volatility/framework/automagic/pdbscan.py b/volatility/framework/automagic/pdbscan.py index 614376b61..8ce62f767 100644 --- a/volatility/framework/automagic/pdbscan.py +++ b/volatility/framework/automagic/pdbscan.py @@ -181,7 +181,7 @@ class KernelPDBScanner(interfaces.automagic.AutomagicInterface): def recurse_symbol_fulfiller(self, context: interfaces.context.ContextInterface, valid_kernels: ValidKernelsType) -> None: - """Fulfills the SymbolRequirements in `self._symbol_requirements` found by the `recurse_symbol_requirements`. + """Fulfills the SymbolTableRequirements in `self._symbol_requirements` found by the `recurse_symbol_requirements`. This pass will construct any requirements that may need it in the context it was passed diff --git a/volatility/framework/automagic/symbol_finder.py b/volatility/framework/automagic/symbol_finder.py index 6fc86e721..ca2e87988 100644 --- a/volatility/framework/automagic/symbol_finder.py +++ b/volatility/framework/automagic/symbol_finder.py @@ -56,7 +56,7 @@ class SymbolFinder(interfaces.automagic.AutomagicInterface): config_path: str, requirement: interfaces.configuration.RequirementInterface, progress_callback: constants.ProgressCallback = None) -> None: - """Searches for SymbolRequirements and attempt to populate them""" + """Searches for SymbolTableRequirements and attempt to populate them""" # Bomb out early if our details haven't been configured if self.symbol_class is None: diff --git a/volatility/framework/interfaces/automagic.py b/volatility/framework/interfaces/automagic.py index 462ece817..c32d04b99 100644 --- a/volatility/framework/interfaces/automagic.py +++ b/volatility/framework/interfaces/automagic.py @@ -88,7 +88,7 @@ class AutomagicInterface(interfaces.configuration.ConfigurableInterface, metacla shortcut: Only returns requirements that live under unsatisfied requirements Returns: - A list of tuples containing the config_path, sub_config_path and requirement identifying the SymbolRequirements + A list of tuples containing the config_path, sub_config_path and requirement identifying the SymbolTableRequirements """ sub_config_path = interfaces.configuration.path_join(config_path, requirement_root.name) results = [] # type: List[Tuple[str, interfaces.configuration.RequirementInterface]] diff --git a/volatility/framework/plugins/windows/psscan.py b/volatility/framework/plugins/windows/psscan.py index a4d9a3ce5..0e2574729 100644 --- a/volatility/framework/plugins/windows/psscan.py +++ b/volatility/framework/plugins/windows/psscan.py @@ -36,7 +36,7 @@ class PsScan(plugins.PluginInterface, timeliner.TimeLinerInterface): return [ requirements.TranslationLayerRequirement( name = 'primary', description = 'Memory layer for the kernel', architectures = ["Intel32", "Intel64"]), - requirements.SymbolRequirement(name = "nt_symbols", description = "Windows kernel symbols"), + requirements.SymbolTableRequirement(name = "nt_symbols", description = "Windows kernel symbols"), ] @classmethod