From cf3ad1a6ebf13eca492d7764d8520d70fa56b0ac Mon Sep 17 00:00:00 2001 From: AsafEitani Date: Tue, 23 Feb 2021 12:28:17 +0200 Subject: [PATCH] changing PID field names Changing the pid name field of the result to match the PID of all other plugins --- volatility3/framework/plugins/windows/svcscan.py | 2 +- volatility3/framework/plugins/windows/vadyarascan.py | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/volatility3/framework/plugins/windows/svcscan.py b/volatility3/framework/plugins/windows/svcscan.py index 4820e5735..1a035901a 100644 --- a/volatility3/framework/plugins/windows/svcscan.py +++ b/volatility3/framework/plugins/windows/svcscan.py @@ -160,7 +160,7 @@ class SvcScan(interfaces.plugins.PluginInterface): return renderers.TreeGrid([ ('Offset', format_hints.Hex), ('Order', int), - ('Pid', int), + ('PID', int), ('Start', str), ('State', str), ('Type', str), diff --git a/volatility3/framework/plugins/windows/vadyarascan.py b/volatility3/framework/plugins/windows/vadyarascan.py index cdb349cf8..248a2545b 100644 --- a/volatility3/framework/plugins/windows/vadyarascan.py +++ b/volatility3/framework/plugins/windows/vadyarascan.py @@ -83,5 +83,5 @@ class VadYaraScan(interfaces.plugins.PluginInterface): yield (start, end - start) def run(self): - return renderers.TreeGrid([('Offset', format_hints.Hex), ('Pid', int), ('Rule', str), ('Component', str), + return renderers.TreeGrid([('Offset', format_hints.Hex), ('PID', int), ('Rule', str), ('Component', str), ('Value', bytes)], self._generator())