mirror of
https://github.com/volatilityfoundation/volatility3.git
synced 2026-09-22 09:34:52 +02:00
Create a windows.registry category.
This commit is contained in:
@@ -0,0 +1 @@
|
||||
"""Windows registry plugins"""
|
||||
+1
-1
@@ -81,7 +81,7 @@ class PrintKey(plugins.PluginInterface):
|
||||
"""Walks through a registry, hive by hive"""
|
||||
if self.config.get('offset', None) is None:
|
||||
try:
|
||||
import volatility.plugins.windows.hivelist as hivelist
|
||||
import volatility.plugins.windows.registry.hivelist as hivelist
|
||||
hive_offsets = [hive.vol.offset for hive in hivelist.HiveList.list_hives(self.context,
|
||||
self.config['primary'],
|
||||
self.config['nt_symbols'])]
|
||||
+1
-1
@@ -210,7 +210,7 @@ class UserAssist(interfaces_plugins.PluginInterface):
|
||||
# get all the user hive offsets or use the one specified
|
||||
if self.config.get('offset', None) is None:
|
||||
try:
|
||||
import volatility.plugins.windows.hivelist as hivelist
|
||||
import volatility.plugins.windows.registry.hivelist as hivelist
|
||||
hive_offsets = [hive.vol.offset for hive in
|
||||
hivelist.HiveList.list_hives(context = self.context,
|
||||
layer_name = self.config['primary'],
|
||||
Reference in New Issue
Block a user