WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-26 11:34:49 +02:00
Code Issues Packages Projects Releases Wiki Activity

Refactor windows code to windows basic to avoid import loops.

Browse Source
This commit is contained in:
Mike Auty
2016-01-16 20:09:18 +00:00
parent 7db739279f
commit a8d6fd5647
4 changed files with 141 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test_rig.py
+3 -2
View File
@@ -7,6 +7,7 @@ Created on 10 Mar 2013
import logging
import pdb
import volatility.framework.symbols.windows.basic
from volatility import framework
from volatility.framework import contexts
from volatility.framework import layers, plugins
@@ -25,8 +26,8 @@ def utils_load_as():
virtual_types = xp_sp2_x86_vtypes.ntkrnlmp_types
ntkrnlmp = vtypes.VTypeSymbolTable('ntkrnlmp', virtual_types, ctx.symbol_space.natives)
ntkrnlmp.set_structure_class('_ETHREAD', windows._ETHREAD)
ntkrnlmp.set_structure_class('_LIST_ENTRY', windows._LIST_ENTRY)
ntkrnlmp.set_structure_class('_ETHREAD', volatility.framework.symbols.windows.basic._ETHREAD)
ntkrnlmp.set_structure_class('_LIST_ENTRY', volatility.framework.symbols.windows.basic._LIST_ENTRY)
ctx.symbol_space.append(ntkrnlmp)
# contexts.windows.WindowsContextModifier(ctx.config).modify_context(ctx)