diff --git a/volatility3/framework/layers/registry.py b/volatility3/framework/layers/registry.py index 19e02ac33..57747c14a 100644 --- a/volatility3/framework/layers/registry.py +++ b/volatility3/framework/layers/registry.py @@ -103,7 +103,7 @@ class RegistryHive(linear.LinearlyMappedLayer): The Registry EPROCESS object if it exists, or None """ - kernel = self.context.modules.get("kernel") + kernel = self.context.modules.get(self.config["kernel_module_name"]) if not kernel or not kernel.offset: raise ValueError(