diff --git a/volatility3/cli/text_renderer.py b/volatility3/cli/text_renderer.py index d55201371..d00c00bf4 100644 --- a/volatility3/cli/text_renderer.py +++ b/volatility3/cli/text_renderer.py @@ -10,8 +10,8 @@ import string import sys from functools import wraps from typing import Any, Callable, Dict, List, Optional, Set, Tuple, TypeVar, Union -from volatility3.cli import text_filter +from volatility3.cli import text_filter from volatility3.framework import exceptions, interfaces, renderers from volatility3.framework.renderers import format_hints @@ -598,7 +598,8 @@ class JsonRenderer(CLIRenderer): if self.filter and self.filter.filter(line): return accumulator - if node.parent: + # Only add if the parent hasn't been filtered out + if node.parent and node.parent.path in acc_map: acc_map[node.parent.path]["__children"].append(node_dict) else: final_tree.append(node_dict)