WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-28 20:44:52 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix: job detail info to zero

Browse Source
This commit is contained in:
Donghyun Kim
2022-08-09 15:18:11 +09:00
parent ea65649548
commit 65e7b5302c
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/plugins/windows/joblinks.py
+2 -2
View File
@@ -58,8 +58,8 @@ class JobLinks(interfaces.plugins.PluginInterface):
for entry in job.ProcessListHead.to_list(proc.vol.type_name, "JobLinks"):
yield (1, (
format_hints.Hex(offset), utility.array_to_string(entry.ImageFileName), entry.UniqueProcessId,
entry.InheritedFromUniqueProcessId, entry.get_session_id(), renderers.NotApplicableValue(), entry.get_is_wow64(),
renderers.NotApplicableValue(), renderers.NotApplicableValue(), renderers.NotApplicableValue(),
entry.InheritedFromUniqueProcessId, entry.get_session_id(), 0, entry.get_is_wow64(),
0, 0, 0,
"Yes",
entry.get_peb().ProcessParameters.ImagePathName.get_string()
))