From 52207e09332f4322c33139aee63d9e104e0a05f6 Mon Sep 17 00:00:00 2001 From: Eve Date: Mon, 4 Sep 2023 17:44:24 +0100 Subject: [PATCH] Add extra debug information for layer stacker to show file size of the physical file --- volatility3/framework/automagic/stacker.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/volatility3/framework/automagic/stacker.py b/volatility3/framework/automagic/stacker.py index e611b5f06..d966d99fa 100644 --- a/volatility3/framework/automagic/stacker.py +++ b/volatility3/framework/automagic/stacker.py @@ -156,6 +156,9 @@ class LayerStacker(interfaces.automagic.AutomagicInterface): self._cached = context.config.get(path, None), context.config.branch( path ) + vollog.debug( + f"physical_layer maximum_address: {physical_layer.maximum_address}" + ) vollog.debug(f"Stacked layers: {stacked_layers}") @classmethod