WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-08-30 03:39:51 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1845 from SolitudePy/categorize_linux_malware

Browse Source 
Malware categorization: linux.check_afinfo & linux.hidden_modules
This commit is contained in:
ikelos
2025-06-10 21:05:41 +01:00
committed by GitHub
parent 9596893f1b 5144f26a8e
commit 58e41d754a
6 changed files with 435 additions and 395 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/plugins/linux/linux.py
+2 -2
View File
@@ -426,7 +426,7 @@ class TestLinuxPageCacheInodepages:
class TestLinuxCheckAfinfo:
def test_linux_generic_check_afinfo(self, image, volatility, python):
rc, out, _err = test_volatility.runvol_plugin(
"linux.check_afinfo.Check_afinfo", image, volatility, python
"linux.malware.check_afinfo.Check_afinfo", image, volatility, python
)
# linux-sample-1.bin has no suspicious results.
@@ -525,7 +525,7 @@ class TestLinuxHiddenModules:
# TODO: this check should be specific, against a distinct infected sample
image = LinuxSamples.LINUX_GENERIC.value.path
rc, out, _err = test_volatility.runvol_plugin(
"linux.hidden_modules.Hidden_modules", image, volatility, python
"linux.malware.hidden_modules.Hidden_modules", image, volatility, python
)
# linux-sample-1.bin has no hidden modules.