mirror of
https://github.com/volatilityfoundation/volatility3.git
synced 2026-08-22 22:32:22 +02:00
Memdump and memmap running/tested with grrcon-0a7030d.imh
This commit is contained in:
@@ -12,7 +12,7 @@ from volatility.plugins.windows import pslist, dlllist, ssdt, vadinfo
|
||||
|
||||
|
||||
class Memdump(interfaces.plugins.PluginInterface):
|
||||
"""Prints the memory map"""
|
||||
"""Dump the addressable memory for a process"""
|
||||
|
||||
@classmethod
|
||||
def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:
|
||||
@@ -56,7 +56,6 @@ class Memdump(interfaces.plugins.PluginInterface):
|
||||
vollog.debug("Unable to write {}'s address {} [ {} ]to {}.dmp".format(process_name, vadd, proc.UniqueProcessId, proc.UniqueProcessId))
|
||||
continue
|
||||
|
||||
|
||||
try:
|
||||
result_text = "Writing {} [ {} ] to {}.dmp".format(process_name, proc.UniqueProcessId, proc.UniqueProcessId)
|
||||
self.produce_file(filedata)
|
||||
|
||||
@@ -29,7 +29,6 @@ class Memmap(interfaces.plugins.PluginInterface):
|
||||
]
|
||||
|
||||
def _generator(self, procs):
|
||||
|
||||
for proc in procs:
|
||||
reverse_map = dict()
|
||||
offset = 0
|
||||
|
||||
Reference in New Issue
Block a user