From c4c7aa2b13374efdcc64ed7f2d192c8f662a5dc1 Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Wed, 6 Oct 2021 21:44:04 +0100 Subject: [PATCH] Windows: Remove regression introduced during rebase --- volatility3/framework/plugins/windows/poolscanner.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/volatility3/framework/plugins/windows/poolscanner.py b/volatility3/framework/plugins/windows/poolscanner.py index d64bb64f1..c5d60ce03 100644 --- a/volatility3/framework/plugins/windows/poolscanner.py +++ b/volatility3/framework/plugins/windows/poolscanner.py @@ -296,7 +296,7 @@ class PoolScanner(plugins.PluginInterface): mem_objects = header.get_object(constraint = constraint, use_top_down = is_windows_8_or_later, - native_layer_name = 'primary', + native_layer_name = layer_name, kernel_symbol_table = symbol_table) for mem_object in mem_objects: