diff --git a/volatility/framework/symbols/linux/extensions/bash.py b/volatility/framework/symbols/linux/extensions/bash.py index b52a19f4e..d59fcfb33 100644 --- a/volatility/framework/symbols/linux/extensions/bash.py +++ b/volatility/framework/symbols/linux/extensions/bash.py @@ -40,7 +40,7 @@ class hist_entry(objects.Struct): # Convert the string into an integer (number of seconds) return int(time_string) - def time_object(self): + def get_time_object(self): nsecs = self.time_as_integer # Build a timestamp object from the integer return utility.unixtime_to_datetime(nsecs) diff --git a/volatility/plugins/linux/bash.py b/volatility/plugins/linux/bash.py index fa5752102..a4f110bd1 100644 --- a/volatility/plugins/linux/bash.py +++ b/volatility/plugins/linux/bash.py @@ -68,7 +68,7 @@ class Bash(plugins.PluginInterface): history_entries.append(hist) for hist in sorted(history_entries, key = attrgetter('time_as_integer')): - yield (0, (task.pid, task_name, hist.time_object(), hist.get_command())) + yield (0, (task.pid, task_name, hist.get_time_object(), hist.get_command())) def run(self): filter = pslist.PsList.create_filter([self.config.get('pid', None)])