Memdump and memmap running/tested with grrcon-0a7030d.imh

This commit is contained in:
Steffi Keene
2020-08-12 20:56:15 +01:00
committed by ikelos
parent 2e765c7d70
commit 5166bcbe95
2 changed files with 1 additions and 3 deletions
@@ -12,7 +12,7 @@ from volatility.plugins.windows import pslist, dlllist, ssdt, vadinfo
class Memdump(interfaces.plugins.PluginInterface):
"""Prints the memory map"""
"""Dump the addressable memory for a process"""
@classmethod
def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:
@@ -56,7 +56,6 @@ class Memdump(interfaces.plugins.PluginInterface):
vollog.debug("Unable to write {}'s address {} [ {} ]to {}.dmp".format(process_name, vadd, proc.UniqueProcessId, proc.UniqueProcessId))
continue
try:
result_text = "Writing {} [ {} ] to {}.dmp".format(process_name, proc.UniqueProcessId, proc.UniqueProcessId)
self.produce_file(filedata)
@@ -29,7 +29,6 @@ class Memmap(interfaces.plugins.PluginInterface):
]
def _generator(self, procs):
for proc in procs:
reverse_map = dict()
offset = 0