mirror of
https://github.com/volatilityfoundation/volatility3.git
synced 2026-08-29 19:29:42 +02:00
Automagic: Changing stacking order for linux/mac
The linux/mac stackers are more accurate (based on banners) than the windows stacker (based on offsets). As such in cases where both would match, we should go for the more accurate match first (linux/mac) over windows. In most cases this will make no difference because of the exclusion lists, so only one stacker will run, but in cases such as volshell where all stackers are run, this may help with certain edge cases.
This commit is contained in:
@@ -14,7 +14,7 @@ vollog = logging.getLogger(__name__)
|
||||
|
||||
|
||||
class LinuxIntelStacker(interfaces.automagic.StackerLayerInterface):
|
||||
stack_order = 45
|
||||
stack_order = 35
|
||||
exclusion_list = ['mac', 'windows']
|
||||
|
||||
@classmethod
|
||||
|
||||
@@ -15,7 +15,7 @@ vollog = logging.getLogger(__name__)
|
||||
|
||||
|
||||
class MacIntelStacker(interfaces.automagic.StackerLayerInterface):
|
||||
stack_order = 45
|
||||
stack_order = 35
|
||||
exclusion_list = ['windows', 'linux']
|
||||
|
||||
@classmethod
|
||||
|
||||
Reference in New Issue
Block a user