WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-08-25 15:42:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1850 from SolitudePy/malware_plugins_category

Browse Source 
Malware categorization: linux.tty_check, linux.netfilter, linux.modxview
This commit is contained in:
ikelos
2025-06-10 21:20:12 +01:00
committed by GitHub
parent 43ed10a4f8 8040c049e0
commit 58f441186c
7 changed files with 1140 additions and 1078 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/plugins/linux/linux.py
+2 -2
View File
@@ -89,7 +89,7 @@ class TestLinuxProcMaps:
class TestLinuxTtyCheck:
def test_linux_generic_tty_check(self, image, volatility, python):
rc, out, _err = test_volatility.runvol_plugin(
"linux.tty_check.tty_check", image, volatility, python
"linux.malware.tty_check.Tty_Check", image, volatility, python
)
assert rc == 0
@@ -504,7 +504,7 @@ class TestLinuxKmesg:
class TestLinuxNetfilter:
def test_linux_generic_netfilter(self, image, volatility, python):
rc, out, _err = test_volatility.runvol_plugin(
"linux.netfilter.Netfilter", image, volatility, python
"linux.malware.netfilter.Netfilter", image, volatility, python
)
# linux-sample-1.bin has no suspicious results for this plugin.