Created linux.proc.Maps plugin.

Added object extensions for the key structures. Also added
constants.linux, which will contain Linux-specific constants
that can't be extracted via dwarf.
This commit is contained in:
Nick L. Petroni, Jr
2017-08-16 16:14:33 -04:00
parent efc2d75a86
commit 5bb2aef9fc
5 changed files with 196 additions and 3 deletions
@@ -0,0 +1,6 @@
"""Volatility 3 Linux Constants
Linux-specific values that aren't found in debug symbols"""
# arch/x86/include/asm/page_types.h
PAGE_SHIFT = 12