mirror of
https://github.com/volatilityfoundation/volatility3.git
synced 2026-09-27 12:04:50 +02:00
Automagic: Add a section for where old kernels live
This commit is contained in:
@@ -385,7 +385,7 @@ class WindowsIntelStacker(interfaces.automagic.StackerLayerInterface):
|
||||
hits = context.layers[layer_name].scan(context,
|
||||
PageMapScanner(
|
||||
[DtbSelfRef64bit(), DtbSelfRefPae(), DtbSelfRef32bit()]),
|
||||
sections = [(0x1a0000, 0x550000)],
|
||||
sections = [(0x1a0000, 0x550000), (0x30000, 0x10000)],
|
||||
progress_callback = progress_callback)
|
||||
# Flatten the generator
|
||||
hits = list(hits)
|
||||
|
||||
Reference in New Issue
Block a user