From 92696068c08a12e9b5f9d7891c82f417c4727185 Mon Sep 17 00:00:00 2001 From: Donghyun Kim Date: Fri, 22 Jul 2022 18:55:34 +0900 Subject: [PATCH] Add: test for vadwalk plugin --- test/test_volatility.py | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/test/test_volatility.py b/test/test_volatility.py index a55dffb27..2b7fdaf07 100644 --- a/test/test_volatility.py +++ b/test/test_volatility.py @@ -199,6 +199,16 @@ def test_windows_callbacks(image, volatility, python): assert out.count(b"KeBugCheckReasonCallbackListHead ") > 5 assert rc == 0 +def test_windows_vadwalk(image, volatility, python): + rc, out, err = runvol_plugin("windows.vadwalk.VadWalk", image, volatility, python) + + assert out.find(b"Vad") != -1 + assert out.find(b"VadS") != -1 + assert out.find(b"Vadl") != -1 + assert out.find(b"VadF") != -1 + assert out.find(b"0x0") != -1 + assert rc == 0 + # LINUX def test_linux_pslist(image, volatility, python):