From 69be2157fbc5b2cb22811d068d88745ed2afcd84 Mon Sep 17 00:00:00 2001 From: superponible Date: Tue, 26 May 2020 21:57:20 -0500 Subject: [PATCH] fix typo --- volatility/framework/plugins/windows/bigpools.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/volatility/framework/plugins/windows/bigpools.py b/volatility/framework/plugins/windows/bigpools.py index e115b45a0..7f56090fc 100644 --- a/volatility/framework/plugins/windows/bigpools.py +++ b/volatility/framework/plugins/windows/bigpools.py @@ -69,7 +69,7 @@ class BigPools(interfaces.plugins.PluginInterface): big_page_table_size = ntkrnlmp.object(object_type = "unsigned long", offset = big_page_table_size_offset) try: - big_page_table_type = ntkrnlmp.get_type("_POOL_TRACKER_BIG_PAGED") + big_page_table_type = ntkrnlmp.get_type("_POOL_TRACKER_BIG_PAGES") except exceptions.SymbolError: # We have to manually load a symbol table is_vista_or_later = cls.is_vista_or_later(context, symbol_table)