WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-12 12:47:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix up import style to be consistent.

Browse Source
This commit is contained in:
Mike Auty
2019-10-01 23:46:02 +01:00
parent ba14e10d00
commit 9ac622afa0
15 changed files with 41 additions and 59 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/plugins/linux/malfind.py
+3 -5
View File
@@ -4,8 +4,6 @@
from typing import List
import volatility.framework.interfaces.plugins as interfaces_plugins
import volatility.framework.interfaces.renderers as interfaces_renderers
import volatility.plugins.linux.pslist as pslist
from volatility.framework import constants, interfaces
from volatility.framework import renderers
@@ -14,7 +12,7 @@ from volatility.framework.objects import utility
from volatility.framework.renderers import format_hints
class Malfind(interfaces_plugins.PluginInterface):
class Malfind(interfaces.plugins.PluginInterface):
"""Lists process memory ranges that potentially contain injected code."""
@classmethod
@@ -57,7 +55,7 @@ class Malfind(interfaces_plugins.PluginInterface):
else:
architecture = "intel64"
disasm = interfaces_renderers.Disassembly(data, vma.vm_start, architecture)
disasm = interfaces.renderers.Disassembly(data, vma.vm_start, architecture)
yield (0, (task.pid, process_name, format_hints.Hex(vma.vm_start), format_hints.Hex(vma.vm_end),
vma.get_protection(), format_hints.HexBytes(data), disasm))
@@ -67,7 +65,7 @@ class Malfind(interfaces_plugins.PluginInterface):
return renderers.TreeGrid([("PID", int), ("Process", str), ("Start", format_hints.Hex),
("End", format_hints.Hex), ("Protection", str), ("Hexdump", format_hints.HexBytes),
("Disasm", interfaces_renderers.Disassembly)],
("Disasm", interfaces.renderers.Disassembly)],
self._generator(
pslist.PsList.list_tasks(self.context,
self.config['primary'],
volatility/framework/plugins/linux/pslist.py
+1 -2
View File
@@ -4,14 +4,13 @@
from typing import Callable, Iterable, List, Any
import volatility.framework.interfaces.plugins as interfaces_plugins
from volatility.framework import renderers, interfaces, contexts
from volatility.framework.automagic import linux
from volatility.framework.configuration import requirements
from volatility.framework.objects import utility
class PsList(interfaces_plugins.PluginInterface):
class PsList(interfaces.plugins.PluginInterface):
"""Lists the processes present in a particular linux memory image."""
_version = (1, 0, 0)