Windows Timeliner: Add basic test

This is enough to ensure that the return code is nonzero and there was
some valid output.
This commit is contained in:
David McDonald
2025-05-15 17:28:26 -05:00
parent e0abdd92f2
commit 90a3829ee7
+8
View File
@@ -58,6 +58,14 @@ class TestWindowsPslist:
}
assert test_volatility.match_output_row(expected_row, json.loads(out))
class TestWindowsTimeliner:
def test_windows_specific_timeliner(self, volatility, python):
image = WindowsSamples.WINDOWSXP_GENERIC.value.path
rc, out, _err = test_volatility.runvol_plugin(
"timeliner.Timeliner", image, volatility, python
)
assert rc == 0
assert out.count(b"\n") > 10
class TestWindowsPsscan:
def test_windows_specific_psscan(self, volatility, python):