WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-28 04:24:53 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix up a is_windows_8_or_later call.

Browse Source
This commit is contained in:
Mike Auty
2019-05-29 14:46:22 +01:00
committed by ikelos
parent 38f249aef2
commit 4ff137bc18
1 changed files with 3 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/plugins/windows/poolscanner.py
+3 -4
View File
@@ -73,8 +73,8 @@ class PoolConstraint:
def os_distinguisher(version_check: Callable[[Tuple[int, ...]], bool],
fallback_checks: List[Tuple[str, Optional[str], bool]],
invert: bool = False) -> Callable[[interfaces.context.ContextInterface, str], bool]:
fallback_checks: List[Tuple[str, Optional[str], bool]]
) -> Callable[[interfaces.context.ContextInterface, str], bool]:
"""Distinguishes a symbol table as being above a particular version or point
This will primarily check the version metadata first and foremost.
@@ -285,8 +285,7 @@ class PoolScanner(plugins.PluginInterface):
cookie = handles.Handles.find_cookie(context = context, layer_name = layer_name, symbol_table = symbol_table)
is_windows_10 = cls.is_windows_10(context = context, symbol_table = symbol_table)
is_windows_8_or_later = cls.is_windows_8_or_later(
context = context, layer_name = layer_name, symbol_table = symbol_table)
is_windows_8_or_later = cls.is_windows_8_or_later(context = context, symbol_table = symbol_table)
# start off with the primary virtual layer
scan_layer = layer_name