From 5f879649162f571eb3d5931bbbffac58b5a9e47b Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Thu, 28 Apr 2022 15:41:29 +0100 Subject: [PATCH] Linux: Make sure the pslist offset column says that it's virtual --- volatility3/framework/plugins/linux/pslist.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/volatility3/framework/plugins/linux/pslist.py b/volatility3/framework/plugins/linux/pslist.py index dd1832576..0a9090bd4 100644 --- a/volatility3/framework/plugins/linux/pslist.py +++ b/volatility3/framework/plugins/linux/pslist.py @@ -85,4 +85,4 @@ class PsList(interfaces.plugins.PluginInterface): yield task def run(self): - return renderers.TreeGrid([("OFFSET", format_hints.Hex), ("COMM", str), ("PID", int), ("PPID", int)], self._generator()) + return renderers.TreeGrid([("OFFSET (V)", format_hints.Hex), ("COMM", str), ("PID", int), ("PPID", int)], self._generator())