From ade126a4c6509fab9936aee8e39edd70e71ec183 Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Fri, 4 Oct 2019 23:22:12 +0100 Subject: [PATCH] Update documentation to be more accurate about ZIP symbol files. --- doc/source/symbol-tables.rst | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/doc/source/symbol-tables.rst b/doc/source/symbol-tables.rst index 7d51cc31c..22baf8162 100644 --- a/doc/source/symbol-tables.rst +++ b/doc/source/symbol-tables.rst @@ -17,7 +17,8 @@ Symbol table JSON files live, by default, under the :file:`volatility/symbols`, usually be set within the user interface. These files can also be compressed into ZIP files, which volatility will process in order to locate symbol files. -Inside the ZIP file, the directory structure should match the uncompressed directory, starting :file:`/symbols//`. +The ZIP file must be named after the appropriate operating system (such as `linux.zip`, `mac.zip` or `windows.zip`). +Inside the ZIP file, the directory structure should match the uncompressed operating system directory. Windows symbol tables ---------------------