From 9c5950e5957f7e6980cc41708830aa74bdb47980 Mon Sep 17 00:00:00 2001
From: SolitudePy <47316655+SolitudePy@users.noreply.github.com>
Date: Wed, 1 Oct 2025 11:29:15 +0300
Subject: [PATCH] Plugins: process_spoofing bump required_framework_version

---
 volatility3/framework/plugins/linux/malware/process_spoofing.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/volatility3/framework/plugins/linux/malware/process_spoofing.py b/volatility3/framework/plugins/linux/malware/process_spoofing.py
index 1048378b9..941f1495e 100644
--- a/volatility3/framework/plugins/linux/malware/process_spoofing.py
+++ b/volatility3/framework/plugins/linux/malware/process_spoofing.py
@@ -20,7 +20,7 @@ vollog = logging.getLogger(__name__)
 class ProcessSpoofing(plugins.PluginInterface):
     """Detects process spoofing by comparing executable path to cmdline & comm fields"""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (2, 27, 0)
     _version = (1, 1, 0)
 
     @classmethod