diff --git a/volatility/cli/__init__.py b/volatility/cli/__init__.py index 68fe5526f..e3aacac4a 100644 --- a/volatility/cli/__init__.py +++ b/volatility/cli/__init__.py @@ -47,9 +47,13 @@ class CommandLine(object): # UI fills in the config: ctx = contexts.Context() ctx.config["pslist.primary.memory_layer.filename"] = "/run/media/mike/disk/memory/xp-laptop-2005-07-04-1430.img" - # ctx.config["pslist.primary.page_map_offset"] = 0x39000 ctx.config["pslist.offset"] = 0x823c87c0 + # ctx.config["pslist.primary.memory_layer.filename"] = "/run/media/mike/disk/memory/private/mhl-dreamon.dmp" + # ctx.config["pslist.offset"] = 0x823c87c0 + + # ctx.config["pslist.primary.page_map_offset"] = 0x39000 + config_path = plugin.__name__.lower() windows = True