WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-07 18:27:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

Windows: remove size from filescan output as it is not the file size but the object size

Browse Source
This commit is contained in:
Eve
2024-07-12 09:14:49 +01:00
parent 1d4a27ea41
commit c3cf319f7e
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/plugins/windows/filescan.py
+3 -3
View File
@@ -13,7 +13,7 @@ from volatility3.plugins.windows import poolscanner
class FileScan(interfaces.plugins.PluginInterface):
"""Scans for file objects present in a particular windows memory image."""
_required_framework_version = (2, 0, 0)
_required_framework_version = (2, 0, 1)
@classmethod
def get_requirements(cls):
@@ -67,10 +67,10 @@ class FileScan(interfaces.plugins.PluginInterface):
except exceptions.InvalidAddressException:
continue
yield (0, (format_hints.Hex(fileobj.vol.offset), file_name, fileobj.Size))
yield (0, (format_hints.Hex(fileobj.vol.offset), file_name))
def run(self):
return renderers.TreeGrid(
[("Offset", format_hints.Hex), ("Name", str), ("Size", int)],
[("Offset", format_hints.Hex), ("Name", str)],
self._generator(),
)