From 74f14920971cb533a921d0acab99c516984cbfb4 Mon Sep 17 00:00:00 2001 From: memoryforensics1 <61626429+memoryforensics1@users.noreply.github.com> Date: Wed, 2 Sep 2020 11:10:45 +0300 Subject: [PATCH] fix --- volatility/framework/symbols/windows/extensions/__init__.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/volatility/framework/symbols/windows/extensions/__init__.py b/volatility/framework/symbols/windows/extensions/__init__.py index 74265abd4..586322e5b 100644 --- a/volatility/framework/symbols/windows/extensions/__init__.py +++ b/volatility/framework/symbols/windows/extensions/__init__.py @@ -400,7 +400,7 @@ class ETHREAD(objects.StructType): """Return the EPROCESS that owns this thread.""" return self.ThreadsProcess.dereference(kernel_layer) - def get_cross_thread_flags(self) -> str: + def get_cross_thread_flags(self) -> str: dictCrossThreadFlags = {'PS_CROSS_THREAD_FLAGS_TERMINATED': 0, 'PS_CROSS_THREAD_FLAGS_DEADTHREAD': 1, 'PS_CROSS_THREAD_FLAGS_HIDEFROMDBG': 2,