WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-13 21:27:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

Pool: Refactor pool extension to its own file.

Browse Source
This commit is contained in:
Mike Auty
2019-12-04 22:11:42 +00:00
committed by ikelos
parent d0f9cf9a2f
commit 8691c68604
4 changed files with 287 additions and 276 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/plugins/windows/poolscanner.py
+2 -1
View File
@@ -13,6 +13,7 @@ from volatility.framework.layers import scanners
from volatility.framework.renderers import format_hints
from volatility.framework.symbols import intermed
from volatility.framework.symbols.windows import extensions
from volatility.framework.symbols.windows.extensions import pool
from volatility.plugins.windows import handles
vollog = logging.getLogger(__name__)
@@ -433,7 +434,7 @@ class PoolScanner(plugins.PluginInterface):
sub_path = "windows",
filename = pool_header_json_filename,
table_mapping = {'nt_symbols': symbol_table},
class_types = {'_POOL_HEADER': extensions.POOL_HEADER})
class_types = {'_POOL_HEADER': extensions.pool.POOL_HEADER})
module = context.module(new_table_name, layer_name, offset = 0)
return module