WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-06 17:57:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

added test for thrdscan plugin

Browse Source
This commit is contained in:
RuBublik
2023-05-21 19:22:22 +03:00
parent fab818b48d
commit 5749b3ef52
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/test_volatility.py
+10
View File
@@ -189,6 +189,16 @@ def test_windows_svcscan(image, volatility, python):
assert rc == 0
def test_windows_thrdscan(image, volatility, python):
rc, out, err = runvol_plugin("windows.thrdscan.ThrdScan", image, volatility, python)
# find pid 4 (of system process) which starts with lowest tids
assert out.find(b"\t4\t8") != -1
assert out.find(b"\t4\t12") != -1
assert out.find(b"\t4\t16") != -1
#assert out.find(b"this raieses AssertionError") != -1
assert rc == 0
def test_windows_privileges(image, volatility, python):
rc, out, err = runvol_plugin(
"windows.privileges.Privs", image, volatility, python, pluginargs=["--pid", "4"]