Plugins: categorize linux.netfilter as a malware plugin

2026-08-17 20:35:40 +02:00 · 2025-06-10 19:22:12 +03:00
parent 6c35bc3fa0
commit 77801e4cb0
4 changed files with 818 additions and 799 deletions
@@ -501,7 +501,7 @@ class TestLinuxKmesg:
 class TestLinuxNetfilter:
    def test_linux_generic_netfilter(self, image, volatility, python):
        rc, out, _err = test_volatility.runvol_plugin(
-            "linux.netfilter.Netfilter", image, volatility, python
+            "linux.malware.netfilter.Netfilter", image, volatility, python
        )

        # linux-sample-1.bin has no suspicious results for this plugin.