Add in restrictions on automagics should be used for each type of plugin.

2026-10-01 22:14:53 +02:00 · 2017-10-08 20:22:10 +01:00
parent 74c2a47d7f
commit ae9e33292f
2 changed files with 32 additions and 0 deletions
@@ -16,6 +16,18 @@ from volatility.framework.configuration import requirements

 vollog = logging.getLogger(__name__)

+windows_automagic = ['ConstructionMagic',
+                     'LayerStacker',
+                     'NlpDtbfinder',
+                     'WintelHelper',
+                     'KernelPDBScanner']
+
+linux_automagic = ['ConstructionMagic',
+                   'LayerStacker',
+                   'LinuxSymbolCache',
+                   'NlpDtbfinder',
+                   'LinuxSymbolFinder']
+

 def available(context):
    """Returns an ordered list of all subclasses of :class:`~volatility.framework.interfaces.automagic.AutomagicInterface`.