WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-08 18:57:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

Automagic: Only traverse down intel layers

Browse Source
This commit is contained in:
Mike Auty
2021-08-24 21:59:18 +01:00
parent 27c5dfdffd
commit b90fd6bbb2
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/automagic/symbol_finder.py
+3 -1
View File
@@ -93,8 +93,10 @@ class SymbolFinder(interfaces.automagic.AutomagicInterface):
'raw_unicode_escape'))] # type: Iterable[Any]
else:
# Swap to the physical layer for scanning
# Only traverse down a layer if it's an intel layer
# TODO: Fix this so it works for layers other than just Intel
layer = context.layers[layer.config['memory_layer']]
if isinstance(layer, layers.intel.Intel):
layer = context.layers[layer.config['memory_layer']]
banner_list = layer.scan(context = context, scanner = mss, progress_callback = progress_callback)
for _, banner in banner_list: