From 2fe904a7822e22a04244a8558d69e124b9219e78 Mon Sep 17 00:00:00 2001
From: Michael Ligh <mligh@volexity.com>
Date: Wed, 7 Feb 2018 12:52:30 -0600
Subject: [PATCH 1/2] Ignore Mac metadata files and Volatility's auto-generated
 configs

---
 .gitignore | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.gitignore b/.gitignore
index d3282692a..b0150048b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -14,3 +14,9 @@ workspace.xml
 .mypy_cache
 stubs
 volatility/symbols/windows/*.pdb
+
+# Mac metadata files
+.DS_Store
+
+# Volatility's config 
+config*.json
\ No newline at end of file

From 152dc9a210a99f2d0c21e1715a21aa242b1f47f4 Mon Sep 17 00:00:00 2001
From: Mike Auty <mike.auty@gmail.com>
Date: Wed, 7 Feb 2018 19:56:02 +0000
Subject: [PATCH 2/2] Error check for when we can't find the file_symbol_url.

---
 volatility/framework/automagic/pdbscan.py | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/volatility/framework/automagic/pdbscan.py b/volatility/framework/automagic/pdbscan.py
index e6b9cd752..943197279 100644
--- a/volatility/framework/automagic/pdbscan.py
+++ b/volatility/framework/automagic/pdbscan.py
@@ -12,7 +12,7 @@ import typing
 
 from volatility.framework import exceptions, layers, validity
 from volatility.framework.layers import scanners
-from volatility.framework.symbols import native, intermed
+from volatility.framework.symbols import intermed, native
 
 if __name__ == "__main__":
     import sys
@@ -197,7 +197,10 @@ class KernelPDBScanner(interfaces.automagic.AutomagicInterface):
                     _kvo, kernel = self.valid_kernels[virtual_layer]
                     filter = os.path.join(kernel['pdb_name'], kernel['GUID'] + "-" + str(kernel['age']))
                     # Take the first result of search for the intermediate file
-                    isf_path = intermed.IntermediateSymbolTable.file_symbol_url("windows", filter).__next__()
+                    try:
+                        isf_path = intermed.IntermediateSymbolTable.file_symbol_url("windows", filter).__next__()
+                    except StopIteration:
+                        isf_path = None
                     if isf_path:
                         vollog.debug("Using symbol library: {}".format(filter))
                         clazz = "volatility.framework.symbols.windows.WindowsKernelIntermedSymbols"