mirror of
https://github.com/volatilityfoundation/volatility3.git
synced 2026-09-11 04:07:39 +02:00
Fix up silly typo (and replace another hardcoded bang).
This commit is contained in:
@@ -61,8 +61,8 @@ class _EPROCESS(GenericIntelProcess):
|
||||
if not proc_layer.is_valid(self.Peb):
|
||||
raise StopIteration
|
||||
|
||||
sym_table = self.vol.type_name.split("!")[0]
|
||||
peb = self._context.object("{}{}!_PEB".format(sym_table, constants.BANG), layer_name = proc_layer_name,
|
||||
sym_table = self.vol.type_name.split(constants.BANG)[0]
|
||||
peb = self._context.object("{}{}_PEB".format(sym_table, constants.BANG), layer_name = proc_layer_name,
|
||||
offset = self.Peb)
|
||||
|
||||
for entry in peb.Ldr.InLoadOrderModuleList.to_list(
|
||||
|
||||
Reference in New Issue
Block a user