mirror of
https://github.com/volatilityfoundation/volatility3.git
synced 2026-09-10 03:37:39 +02:00
Add in a heuristic for finding the correct DTB on recent Win10.
This removes again the single_page_map_offset configuration value, and requires that a full/correct config be used to supply a manual DTB value. The expectation is that the single_page_map_offset feature be re-introduced but override *all* scanning (so the scanning doesn't take place even if the stacking does).
This commit is contained in:
@@ -84,7 +84,6 @@ class CommandLine(object):
|
||||
else:
|
||||
ctx.config["automagic.general.single_location"] = "file://" + os.path.abspath(args.file)
|
||||
pass
|
||||
# ctx.config["automagic.general.single_page_map_offset"] = 0x1ab000
|
||||
|
||||
###
|
||||
# BACK TO THE FRAMEWORK
|
||||
|
||||
Reference in New Issue
Block a user