WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-13 21:27:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'upstream/develop' into linux_pslist_pstree_improvements

Browse Source
This commit is contained in:
Gustavo Moreira
2022-04-29 07:03:44 +10:00
parent 9aba96a197 5f87964916
commit 7b30d46908
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/plugins/linux/pslist.py
+3 -2
View File
@@ -6,6 +6,7 @@ from typing import Callable, Iterable, List, Any, Tuple
from volatility3.framework import renderers, interfaces
from volatility3.framework.configuration import requirements
from volatility3.framework.objects import utility
from volatility3.framework.renderers import format_hints
class PsList(interfaces.plugins.PluginInterface):
@@ -81,7 +82,7 @@ class PsList(interfaces.plugins.PluginInterface):
elif task.is_user_thread:
name = f"{{{name}}}"
task_fields = (pid, tid, ppid, name)
task_fields = (format_hints.Hex(task.vol.offset), pid, tid, ppid, name)
return task_fields
def _generator(
@@ -147,5 +148,5 @@ class PsList(interfaces.plugins.PluginInterface):
decorate_comm = self.config.get('decorate_comm')
filter_func = self.create_pid_filter(pids)
columns = [("PID", int), ("TID", int), ("PPID", int), ("COMM", str)]
columns = [("OFFSET (V)", format_hints.Hex), ("PID", int), ("TID", int), ("PPID", int), ("COMM", str)]
return renderers.TreeGrid(columns, self._generator(filter_func, include_threads, decorate_comm))