From a5dfc6acb3264e4c13b9d20f1fe66917eb3e848b Mon Sep 17 00:00:00 2001 From: David McDonald Date: Thu, 3 Apr 2025 18:06:23 -0500 Subject: [PATCH] Bump required framework version on all three MFTScan plugins --- volatility3/framework/plugins/windows/mftscan.py | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/volatility3/framework/plugins/windows/mftscan.py b/volatility3/framework/plugins/windows/mftscan.py index 6aa0142c0..aab32593a 100644 --- a/volatility3/framework/plugins/windows/mftscan.py +++ b/volatility3/framework/plugins/windows/mftscan.py @@ -18,7 +18,7 @@ vollog = logging.getLogger(__name__) class MFTScan(interfaces.plugins.PluginInterface, timeliner.TimeLinerInterface): """Scans for MFT FILE objects present in a particular windows memory image.""" - _required_framework_version = (2, 0, 0) + _required_framework_version = (2, 26, 0) _version = (3, 0, 0) @@ -269,7 +269,7 @@ class MFTScan(interfaces.plugins.PluginInterface, timeliner.TimeLinerInterface): class ADS(interfaces.plugins.PluginInterface): """Scans for Alternate Data Stream""" - _required_framework_version = (2, 22, 0) + _required_framework_version = (2, 26, 0) _version = (2, 0, 0) @@ -373,7 +373,7 @@ class ADS(interfaces.plugins.PluginInterface): class ResidentData(interfaces.plugins.PluginInterface): """Scans for MFT Records with Resident Data""" - _required_framework_version = (2, 22, 0) + _required_framework_version = (2, 26, 0) _version = (2, 0, 0)