WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-02 14:28:58 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update plugins using the old PESymbolTable method

Browse Source
This commit is contained in:
Mike Auty
2019-08-09 00:49:05 +01:00
parent 6f7dc1a75e
commit 8ddfe8ce16
2 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/plugins/windows/dlldump.py
+4 -2
View File
@@ -31,7 +31,8 @@ from volatility.framework import interfaces
from volatility.framework import renderers
from volatility.framework.configuration import requirements
from volatility.framework.objects import utility
from volatility.framework.symbols.windows.pe import PEIntermedSymbols
from volatility.framework.symbols import intermed
from volatility.framework.symbols.windows import extensions
vollog = logging.getLogger(__name__)
@@ -54,7 +55,8 @@ class DllDump(interfaces_plugins.PluginInterface):
optional = True)] + pslist.PsList.list_processes_filter_requirements
def _generator(self, procs):
pe_table_name = PEIntermedSymbols.create(self.context, self.config_path, "windows", "pe")
pe_table_name = intermed.IntermediateSymbolTable.create(
self.context, self.config_path, "windows", "pe", class_types = extensions.pe.class_types)
filter_func = lambda _: False
if self.config.get('address', None) is not None:
volatility/framework/plugins/windows/verinfo.py
+4 -2
View File
@@ -28,7 +28,8 @@ import volatility.plugins.windows.modules as modules
from volatility.framework import exceptions, renderers, constants, interfaces
from volatility.framework.configuration import requirements
from volatility.framework.renderers import format_hints
from volatility.framework.symbols.windows.pe import PEIntermedSymbols
from volatility.framework.symbols import intermed
from volatility.framework.symbols.windows import extensions
from volatility.plugins.windows import pslist
vollog = logging.getLogger(__name__)
@@ -107,7 +108,8 @@ class VerInfo(interfaces_plugins.PluginInterface):
session_layers: <generator> of layers in the session to be checked
"""
pe_table_name = PEIntermedSymbols.create(self.context, self.config_path, "windows", "pe")
pe_table_name = intermed.IntermediateSymbolTable.create(
self.context, self.config_path, "windows", "pe", class_types = extensions.pe.class_types)
for mod in mods:
try: