WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-02 14:28:58 +02:00
Code Issues Packages Projects Releases Wiki Activity

pool scanner update: we only ask for specific object types, so no need to filter the results anymore

Browse Source
This commit is contained in:
Analyst
2019-03-04 11:00:42 -06:00
parent e1701947f8
commit 901a38d40b
4 changed files with 8 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/plugins/windows/driverscan.py
+2 -3
View File
@@ -53,9 +53,8 @@ class DriverScan(plugins.PluginInterface):
symbol_table,
constraints):
constraint, mem_object, _header = result
if constraint.object_type == "Driver":
yield mem_object
_constraint, mem_object, _header = result
yield mem_object
def _generator(self):
for driver in self.scan_drivers(self.context,
volatility/framework/plugins/windows/filescan.py
+2 -3
View File
@@ -53,9 +53,8 @@ class FileScan(plugins.PluginInterface):
symbol_table,
constraints):
constraint, mem_object, _header = result
if constraint.object_type == "File":
yield mem_object
_constraint, mem_object, _header = result
yield mem_object
def _generator(self):
for fileobj in self.scan_files(self.context,
volatility/framework/plugins/windows/mutantscan.py
+2 -3
View File
@@ -53,9 +53,8 @@ class MutantScan(plugins.PluginInterface):
symbol_table,
constraints):
constraint, mem_object, _header = result
if constraint.object_type == "Mutant":
yield mem_object
_constraint, mem_object, _header = result
yield mem_object
def _generator(self):
for mutant in self.scan_mutants(self.context,
volatility/framework/plugins/windows/psscan.py
+2 -3
View File
@@ -55,9 +55,8 @@ class PsScan(plugins.PluginInterface, timeliner.TimeLinerInterface):
symbol_table,
constraints):
constraint, mem_object, _header = result
if constraint.object_type == "Process":
yield mem_object
_constraint, mem_object, _header = result
yield mem_object
def _generator(self):
for proc in self.scan_processes(