WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-12 12:47:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

Windows Versions: Add version check for win10 17735 or later

Browse Source
This commit is contained in:
David McDonald
2025-03-05 17:59:38 -06:00
parent 76e459b62e
commit ced9056754
2 changed files with 18838 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/symbols/windows/gui/gui-win10-17735-x64.json
+18830
View File
File diff suppressed because it is too large Load Diff
volatility3/framework/symbols/windows/versions.py
+8
View File
@@ -203,6 +203,14 @@ is_win10_17134_or_later = OsDistinguisher(
],
)
is_win10_17735_or_later = OsDistinguisher(
version_check=lambda x: x >= (10, 0, 17735),
fallback_checks=[
("_EPROCESS", "VmProcessorHost", True),
("_EPROCESS", "VdmObjects", False),
],
)
is_win10_17763_or_later = OsDistinguisher(
version_check=lambda x: x >= (10, 0, 17763),
fallback_checks=[