WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-06 17:57:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add offset information in pslist plugin for Linux

Browse Source
This commit is contained in:
cpuu
2022-02-18 13:25:46 +09:00
parent a2b0bdfe25
commit 8bcb7b4227
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/plugins/linux/pslist.py
+3 -2
View File
@@ -6,6 +6,7 @@ from typing import Callable, Iterable, List, Any
from volatility3.framework import renderers, interfaces
from volatility3.framework.configuration import requirements
from volatility3.framework.objects import utility
from volatility3.framework.renderers import format_hints
class PsList(interfaces.plugins.PluginInterface):
@@ -57,7 +58,7 @@ class PsList(interfaces.plugins.PluginInterface):
if task.parent:
ppid = task.parent.pid
name = utility.array_to_string(task.comm)
yield (0, (pid, ppid, name))
yield (0, (format_hints.Hex(task.vol.offset), name, pid, ppid))
@classmethod
def list_tasks(
@@ -84,4 +85,4 @@ class PsList(interfaces.plugins.PluginInterface):
yield task
def run(self):
return renderers.TreeGrid([("PID", int), ("PPID", int), ("COMM", str)], self._generator())
return renderers.TreeGrid([("OFFSET", format_hints.Hex), ("COMM", str), ("PID", int), ("PPID", int)], self._generator())