Core: Roll the version number back to 1.0.0

volatility3/cli/__init__.py

@@ -87,7 +87,7 @@ class CommandLine:
         """Executes the command line module, taking the system arguments,
         determining the plugin to run and then running it."""
 
-        volatility3.framework.require_interface_version(2, 0, 0)
+        volatility3.framework.require_interface_version(1, 0, 0)
 
         renderers = dict([(x.name.lower(), x) for x in framework.class_subclasses(text_renderer.CLIRenderer)])
 

volatility3/cli/volshell/__init__.py

@@ -42,7 +42,7 @@ class VolShell(cli.CommandLine):
         determining the plugin to run and then running it."""
         sys.stdout.write("Volshell (Volatility 3 Framework) {}\n".format(constants.PACKAGE_VERSION))
 
-        framework.require_interface_version(2, 0, 0)
+        framework.require_interface_version(1, 0, 0)
 
         parser = argparse.ArgumentParser(prog = 'volshell',
                                          description = "A tool for interactivate forensic analysis of memory images")

volatility3/cli/volshell/generic.py

@@ -26,7 +26,7 @@ except ImportError:
 
 class Volshell(interfaces.plugins.PluginInterface):
     """Shell environment to directly interact with a memory image."""
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     def __init__(self, *args, **kwargs):
         super().__init__(*args, **kwargs)

volatility3/framework/constants/__init__.py

@@ -38,7 +38,7 @@ BANG = "!"
 """Constant used to delimit table names from type names when referring to a symbol"""
 
 # We use the SemVer 2.0.0 versioning scheme
-VERSION_MAJOR = 2  # Number of releases of the library with a breaking change
+VERSION_MAJOR = 1  # Number of releases of the library with a breaking change
 VERSION_MINOR = 0  # Number of changes that only add to the interface
 VERSION_PATCH = 0  # Number of changes that do not change the interface
 VERSION_SUFFIX = ""

volatility3/framework/interfaces/plugins.py

@@ -94,8 +94,8 @@ class PluginInterface(interfaces.configuration.ConfigurableInterface,
     and configuration information in the context it is passed.
     """
 
-    # Be careful with inheritance around this
-    _required_framework_version = (1, 0, 0)  # type: Tuple[int, int, int]
+    # Be careful with inheritance around this (We default to requiring a version which doesn't exist, so it must be set)
+    _required_framework_version = (0, 0, 0)  # type: Tuple[int, int, int]
     """The _version variable is a quick way for plugins to define their current interface, it should follow SemVer rules"""
 
     def __init__(self,

volatility3/framework/plugins/banners.py

@@ -15,7 +15,7 @@ vollog = logging.getLogger(__name__)
 class Banners(interfaces.plugins.PluginInterface):
     """Attempts to identify potential linux banners in an image"""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:

volatility3/framework/plugins/configwriter.py

@@ -17,7 +17,7 @@ class ConfigWriter(plugins.PluginInterface):
     """Runs the automagics and both prints and outputs configuration in the
     output directory."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:

volatility3/framework/plugins/frameworkinfo.py

@@ -8,7 +8,7 @@ from volatility3.framework.interfaces import plugins
 class FrameworkInfo(plugins.PluginInterface):
     """Plugin to list the various modular components of Volatility"""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:

volatility3/framework/plugins/isfinfo.py

@@ -22,7 +22,7 @@ vollog = logging.getLogger(__name__)
 class IsfInfo(plugins.PluginInterface):
     """Determines information about the currently available ISF files, or a specific one"""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
     _version = (1, 0, 0)
 
     @classmethod

volatility3/framework/plugins/layerwriter.py

@@ -17,7 +17,7 @@ class LayerWriter(plugins.PluginInterface):
 
     default_block_size = 0x500000
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
     _version = (2, 0, 0)
 
     @classmethod

volatility3/framework/plugins/linux/bash.py

@@ -21,7 +21,7 @@ from volatility3.plugins.linux import pslist
 class Bash(plugins.PluginInterface, timeliner.TimeLinerInterface):
     """Recovers bash command history from memory."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:

volatility3/framework/plugins/linux/check_afinfo.py

@@ -18,7 +18,7 @@ vollog = logging.getLogger(__name__)
 class Check_afinfo(plugins.PluginInterface):
     """Verifies the operation function pointers of network protocols."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:

volatility3/framework/plugins/linux/check_creds.py

@@ -14,7 +14,7 @@ vollog = logging.getLogger(__name__)
 class Check_creds(interfaces.plugins.PluginInterface):
     """Checks if any processes are sharing credential structures"""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls):

volatility3/framework/plugins/linux/check_idt.py

@@ -17,7 +17,7 @@ vollog = logging.getLogger(__name__)
 class Check_idt(interfaces.plugins.PluginInterface):
     """ Checks if the IDT has been altered """
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:

volatility3/framework/plugins/linux/check_modules.py

@@ -18,7 +18,7 @@ vollog = logging.getLogger(__name__)
 class Check_modules(plugins.PluginInterface):
     """Compares module list to sysfs info, if available"""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:

volatility3/framework/plugins/linux/check_syscall.py

@@ -25,7 +25,7 @@ except ImportError:
 class Check_syscall(plugins.PluginInterface):
     """Check system call table for hooks."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:

volatility3/framework/plugins/linux/elfs.py

@@ -17,7 +17,7 @@ from volatility3.plugins.linux import pslist
 class Elfs(plugins.PluginInterface):
     """Lists all memory mapped ELF files for all processes."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:

volatility3/framework/plugins/linux/keyboard_notifiers.py

@@ -16,7 +16,7 @@ vollog = logging.getLogger(__name__)
 class Keyboard_notifiers(interfaces.plugins.PluginInterface):
     """Parses the keyboard notifier call chain"""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls):

volatility3/framework/plugins/linux/lsmod.py

@@ -20,7 +20,7 @@ vollog = logging.getLogger(__name__)
 class Lsmod(plugins.PluginInterface):
     """Lists loaded kernel modules."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
     _version = (1, 0, 0)
 
     @classmethod

volatility3/framework/plugins/linux/lsof.py

@@ -19,7 +19,7 @@ vollog = logging.getLogger(__name__)
 class Lsof(plugins.PluginInterface):
     """Lists all memory maps for all processes."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:

volatility3/framework/plugins/linux/malfind.py

@@ -15,7 +15,7 @@ from volatility3.plugins.linux import pslist
 class Malfind(interfaces.plugins.PluginInterface):
     """Lists process memory ranges that potentially contain injected code."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:

volatility3/framework/plugins/linux/proc.py

@@ -15,7 +15,7 @@ from volatility3.plugins.linux import pslist
 class Maps(plugins.PluginInterface):
     """Lists all memory maps for all processes."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls):

volatility3/framework/plugins/linux/pslist.py

@@ -12,7 +12,7 @@ from volatility3.framework.objects import utility
 class PsList(interfaces.plugins.PluginInterface):
     """Lists the processes present in a particular linux memory image."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     _version = (1, 0, 0)
 

volatility3/framework/plugins/linux/pstree.py

@@ -10,7 +10,7 @@ class PsTree(pslist.PsList):
     """Plugin for listing processes in a tree based on their parent process
     ID."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     def __init__(self, *args, **kwargs):
         super().__init__(*args, **kwargs)

volatility3/framework/plugins/linux/tty_check.py

@@ -19,7 +19,7 @@ vollog = logging.getLogger(__name__)
 class tty_check(plugins.PluginInterface):
     """Checks tty devices for hooks"""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:

volatility3/framework/plugins/mac/bash.py

@@ -20,7 +20,7 @@ from volatility3.plugins.mac import pslist
 class Bash(plugins.PluginInterface, timeliner.TimeLinerInterface):
     """Recovers bash command history from memory."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls):

volatility3/framework/plugins/mac/check_syscall.py

@@ -18,7 +18,7 @@ vollog = logging.getLogger(__name__)
 class Check_syscall(plugins.PluginInterface):
     """Check system call table for hooks."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:

volatility3/framework/plugins/mac/check_sysctl.py

@@ -20,7 +20,7 @@ vollog = logging.getLogger(__name__)
 class Check_sysctl(plugins.PluginInterface):
     """Check sysctl handlers for hooks."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:

volatility3/framework/plugins/mac/check_trap_table.py

@@ -19,7 +19,7 @@ vollog = logging.getLogger(__name__)
 class Check_trap_table(plugins.PluginInterface):
     """Check mach trap table for hooks."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:

volatility3/framework/plugins/mac/ifconfig.py

@@ -11,7 +11,7 @@ from volatility3.framework.symbols import mac
 class Ifconfig(plugins.PluginInterface):
     """Lists loaded kernel modules"""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls):

volatility3/framework/plugins/mac/kauth_listeners.py

@@ -13,7 +13,7 @@ from volatility3.plugins.mac import lsmod, kauth_scopes
 class Kauth_listeners(interfaces.plugins.PluginInterface):
     """ Lists kauth listeners and their status """
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls):

volatility3/framework/plugins/mac/kauth_scopes.py

@@ -16,7 +16,7 @@ class Kauth_scopes(interfaces.plugins.PluginInterface):
     """ Lists kauth scopes and their status """
 
     _version = (1, 0, 0)
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls):

volatility3/framework/plugins/mac/kevents.py

@@ -14,7 +14,7 @@ from volatility3.plugins.mac import pslist
 class Kevents(interfaces.plugins.PluginInterface):
     """ Lists event handlers registered by processes """
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     event_types = {
         1: "EVFILT_READ",

volatility3/framework/plugins/mac/lsmod.py

@@ -13,7 +13,7 @@ from volatility3.framework.renderers import format_hints
 class Lsmod(plugins.PluginInterface):
     """Lists loaded kernel modules."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     _version = (1, 0, 0)
 

volatility3/framework/plugins/mac/lsof.py

@@ -16,7 +16,7 @@ vollog = logging.getLogger(__name__)
 class Lsof(plugins.PluginInterface):
     """Lists all open file descriptors for all processes."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls):

volatility3/framework/plugins/mac/malfind.py

@@ -14,7 +14,7 @@ from volatility3.plugins.mac import pslist
 class Malfind(interfaces.plugins.PluginInterface):
     """Lists process memory ranges that potentially contain injected code."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls):

volatility3/framework/plugins/mac/mount.py

@@ -14,7 +14,7 @@ class Mount(plugins.PluginInterface):
     """A module containing a collection of plugins that produce data typically
     foundin Mac's mount command"""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     _version = (1, 0, 0)
 

volatility3/framework/plugins/mac/netstat.py

@@ -19,7 +19,7 @@ vollog = logging.getLogger(__name__)
 class Netstat(plugins.PluginInterface):
     """Lists all network connections for all processes."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls):

volatility3/framework/plugins/mac/proc_maps.py

@@ -12,7 +12,7 @@ from volatility3.plugins.mac import pslist
 class Maps(interfaces.plugins.PluginInterface):
     """Lists process memory ranges that potentially contain injected code."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls):

volatility3/framework/plugins/mac/psaux.py

@@ -14,7 +14,7 @@ from volatility3.plugins.mac import pslist
 class Psaux(plugins.PluginInterface):
     """Recovers program command line arguments."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:

volatility3/framework/plugins/mac/pslist.py

@@ -16,7 +16,7 @@ vollog = logging.getLogger(__name__)
 class PsList(interfaces.plugins.PluginInterface):
     """Lists the processes present in a particular mac memory image."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
     _version = (2, 0, 0)
     pslist_methods = ['tasks', 'allproc', 'process_group', 'sessions', 'pid_hash_table']
 

volatility3/framework/plugins/mac/pstree.py

@@ -13,7 +13,7 @@ class PsTree(plugins.PluginInterface):
     """Plugin for listing processes in a tree based on their parent process
     ID."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     def __init__(self, *args, **kwargs):
         super().__init__(*args, **kwargs)

volatility3/framework/plugins/mac/socket_filters.py

@@ -19,7 +19,7 @@ vollog = logging.getLogger(__name__)
 class Socket_filters(plugins.PluginInterface):
     """Enumerates kernel socket filters."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:

volatility3/framework/plugins/mac/timers.py

@@ -18,7 +18,7 @@ vollog = logging.getLogger(__name__)
 class Timers(plugins.PluginInterface):
     """Check for malicious kernel timers."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:

volatility3/framework/plugins/mac/trustedbsd.py

@@ -20,7 +20,7 @@ vollog = logging.getLogger(__name__)
 class Trustedbsd(plugins.PluginInterface):
     """Checks for malicious trustedbsd modules"""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:

volatility3/framework/plugins/mac/vfsevents.py

@@ -10,7 +10,7 @@ from volatility3.framework.objects import utility
 class VFSevents(interfaces.plugins.PluginInterface):
     """ Lists processes that are filtering file system events """
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     event_types = [
         "CREATE_FILE", "DELETE", "STAT_CHANGED", "RENAME", "CONTENT_MODIFIED", "EXCHANGE", "FINDER_INFO_CHANGED",

volatility3/framework/plugins/timeliner.py

@@ -42,7 +42,7 @@ class Timeliner(interfaces.plugins.PluginInterface):
     """Runs all relevant plugins that provide time related information and
     orders the results by time."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     def __init__(self, *args, **kwargs):
         super().__init__(*args, **kwargs)

volatility3/framework/plugins/windows/bigpools.py

@@ -19,7 +19,7 @@ vollog = logging.getLogger(__name__)
 class BigPools(interfaces.plugins.PluginInterface):
     """List big page pools."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
     _version = (1, 0, 0)
 
     @classmethod

volatility3/framework/plugins/windows/cachedump.py

@@ -17,7 +17,7 @@ from volatility3.plugins.windows.registry import hivelist
 class Cachedump(interfaces.plugins.PluginInterface):
     """Dumps lsa secrets from memory"""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
     _version = (1, 0, 0)
 
     @classmethod

volatility3/framework/plugins/windows/callbacks.py

@@ -19,7 +19,7 @@ vollog = logging.getLogger(__name__)
 class Callbacks(interfaces.plugins.PluginInterface):
     """Lists kernel callbacks and notification routines."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
     _version = (1, 0, 0)
 
     @classmethod

volatility3/framework/plugins/windows/cmdline.py

@@ -15,7 +15,7 @@ vollog = logging.getLogger(__name__)
 class CmdLine(interfaces.plugins.PluginInterface):
     """Lists process command line arguments."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
     _version = (1, 0, 0)
 
     @classmethod

volatility3/framework/plugins/windows/dlllist.py

@@ -20,7 +20,7 @@ vollog = logging.getLogger(__name__)
 class DllList(interfaces.plugins.PluginInterface, timeliner.TimeLinerInterface):
     """Lists the loaded modules in a particular windows memory image."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
     _version = (2, 0, 0)
 
     @classmethod

volatility3/framework/plugins/windows/driverirp.py

@@ -22,7 +22,7 @@ MAJOR_FUNCTIONS = [
 class DriverIrp(interfaces.plugins.PluginInterface):
     """List IRPs for drivers in a particular windows memory image."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls):

volatility3/framework/plugins/windows/driverscan.py

@@ -13,7 +13,7 @@ from volatility3.plugins.windows import poolscanner
 class DriverScan(interfaces.plugins.PluginInterface):
     """Scans for drivers present in a particular windows memory image."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
     _version = (1, 0, 0)
 
     @classmethod

volatility3/framework/plugins/windows/dumpfiles.py

@@ -25,7 +25,7 @@ EXTENSION_CACHE_MAP = {
 class DumpFiles(interfaces.plugins.PluginInterface):
     """Dumps cached file contents from Windows memory samples."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
     _version = (1, 0, 0)
 
     @classmethod

volatility3/framework/plugins/windows/envars.py

@@ -16,7 +16,7 @@ class Envars(interfaces.plugins.PluginInterface):
     "Display process environment variables"
 
     _version = (1, 0, 0)
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:

volatility3/framework/plugins/windows/filescan.py

@@ -13,7 +13,7 @@ from volatility3.plugins.windows import poolscanner
 class FileScan(interfaces.plugins.PluginInterface):
     """Scans for file objects present in a particular windows memory image."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls):

volatility3/framework/plugins/windows/getservicesids.py

@@ -31,7 +31,7 @@ class GetServiceSIDs(interfaces.plugins.PluginInterface):
     """Lists process token sids."""
 
     _version = (1, 0, 0)
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     def __init__(self, *args, **kwargs):
         super().__init__(*args, **kwargs)

volatility3/framework/plugins/windows/getsids.py

@@ -29,7 +29,7 @@ class GetSIDs(interfaces.plugins.PluginInterface):
     """Print the SIDs owning each process"""
 
     _version = (1, 0, 0)
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     def __init__(self, *args, **kwargs):
         super().__init__(*args, **kwargs)

volatility3/framework/plugins/windows/handles.py

@@ -24,7 +24,7 @@ except ImportError:
 class Handles(interfaces.plugins.PluginInterface):
     """Lists process open handles."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
     _version = (1, 0, 0)
 
     def __init__(self, *args, **kwargs):

volatility3/framework/plugins/windows/hashdump.py

@@ -21,7 +21,7 @@ vollog = logging.getLogger(__name__)
 class Hashdump(interfaces.plugins.PluginInterface):
     """Dumps user hashes from memory"""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls):

volatility3/framework/plugins/windows/info.py

@@ -16,7 +16,7 @@ from volatility3.framework.symbols.windows import extensions
 class Info(plugins.PluginInterface):
     """Show OS & kernel details of the memory sample being analyzed."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
     _version = (1, 0, 0)
 
     @classmethod

volatility3/framework/plugins/windows/lsadump.py

@@ -19,7 +19,7 @@ vollog = logging.getLogger(__name__)
 class Lsadump(interfaces.plugins.PluginInterface):
     """Dumps lsa secrets from memory"""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
     _version = (1, 0, 0)
 
     @classmethod

volatility3/framework/plugins/windows/malfind.py

@@ -17,7 +17,7 @@ vollog = logging.getLogger(__name__)
 class Malfind(interfaces.plugins.PluginInterface):
     """Lists process memory ranges that potentially contain injected code."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls):

volatility3/framework/plugins/windows/memmap.py

@@ -15,7 +15,7 @@ vollog = logging.getLogger(__name__)
 class Memmap(interfaces.plugins.PluginInterface):
     """Prints the memory map"""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:

volatility3/framework/plugins/windows/modscan.py

@@ -17,7 +17,7 @@ vollog = logging.getLogger(__name__)
 class ModScan(interfaces.plugins.PluginInterface):
     """Scans for modules present in a particular windows memory image."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
     _version = (1, 0, 0)
 
     @classmethod

volatility3/framework/plugins/windows/modules.py

@@ -19,7 +19,7 @@ vollog = logging.getLogger(__name__)
 class Modules(interfaces.plugins.PluginInterface):
     """Lists the loaded kernel modules."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
     _version = (1, 1, 0)
 
     @classmethod

volatility3/framework/plugins/windows/mutantscan.py

@@ -13,7 +13,7 @@ from volatility3.plugins.windows import poolscanner
 class MutantScan(interfaces.plugins.PluginInterface):
     """Scans for mutexes present in a particular windows memory image."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls):

volatility3/framework/plugins/windows/netscan.py

@@ -21,7 +21,7 @@ vollog = logging.getLogger(__name__)
 class NetScan(interfaces.plugins.PluginInterface, timeliner.TimeLinerInterface):
     """Scans for network objects present in a particular windows memory image."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
     _version = (1, 0, 0)
 
     @classmethod

volatility3/framework/plugins/windows/poolscanner.py

@@ -115,7 +115,7 @@ class PoolScanner(plugins.PluginInterface):
     """A generic pool scanner plugin."""
 
     _version = (1, 0, 0)
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:

volatility3/framework/plugins/windows/privileges.py

@@ -17,7 +17,7 @@ class Privs(interfaces.plugins.PluginInterface):
     """Lists process token privileges"""
 
     _version = (1, 0, 0)
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     def __init__(self, *args, **kwargs):
         super().__init__(*args, **kwargs)

volatility3/framework/plugins/windows/pslist.py

@@ -20,7 +20,7 @@ vollog = logging.getLogger(__name__)
 class PsList(interfaces.plugins.PluginInterface, timeliner.TimeLinerInterface):
     """Lists the processes present in a particular windows memory image."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
     _version = (2, 0, 0)
     PHYSICAL_DEFAULT = False
 

volatility3/framework/plugins/windows/psscan.py

@@ -22,7 +22,7 @@ vollog = logging.getLogger(__name__)
 class PsScan(interfaces.plugins.PluginInterface, timeliner.TimeLinerInterface):
     """Scans for processes present in a particular windows memory image."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
     _version = (1, 1, 0)
 
     @classmethod

volatility3/framework/plugins/windows/pstree.py

@@ -14,7 +14,7 @@ class PsTree(interfaces.plugins.PluginInterface):
     """Plugin for listing processes in a tree based on their parent process
     ID."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     def __init__(self, *args, **kwargs) -> None:
         super().__init__(*args, **kwargs)

volatility3/framework/plugins/windows/registry/hivelist.py

@@ -17,7 +17,7 @@ class HiveGenerator:
     """Walks the registry HiveList linked list in a given direction and stores an invalid offset
     if it's unable to fully walk the list"""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     def __init__(self, cmhive, forward = True):
         self._cmhive = cmhive
@@ -40,7 +40,7 @@ class HiveList(interfaces.plugins.PluginInterface):
     """Lists the registry hives present in a particular memory image."""
 
     _version = (1, 0, 0)
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:

volatility3/framework/plugins/windows/registry/hivescan.py

@@ -15,7 +15,7 @@ class HiveScan(interfaces.plugins.PluginInterface):
     """Scans for registry hives present in a particular windows memory
     image."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
     _version = (1, 0, 0)
 
     @classmethod

volatility3/framework/plugins/windows/registry/printkey.py

@@ -19,7 +19,7 @@ vollog = logging.getLogger(__name__)
 class PrintKey(interfaces.plugins.PluginInterface):
     """Lists the registry keys under a hive or specific key value."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
     _version = (1, 0, 0)
 
     @classmethod

volatility3/framework/plugins/windows/registry/userassist.py

@@ -23,7 +23,7 @@ vollog = logging.getLogger(__name__)
 class UserAssist(interfaces.plugins.PluginInterface):
     """Print userassist registry keys and information."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     def __init__(self, *args, **kwargs):
         super().__init__(*args, **kwargs)

volatility3/framework/plugins/windows/ssdt.py

@@ -18,7 +18,7 @@ from volatility3.plugins.windows import modules
 class SSDT(plugins.PluginInterface):
     """Lists the system call table."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
     _version = (1, 0, 0)
 
     @classmethod

volatility3/framework/plugins/windows/strings.py

@@ -19,7 +19,7 @@ vollog = logging.getLogger(__name__)
 class Strings(interfaces.plugins.PluginInterface):
     """Reads output from the strings command and indicates which process(es) each string belongs to."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
     strings_pattern = re.compile(rb"(?:\W*)([0-9]+)(?:\W*)(\w[\w\W]+)\n?")
 
     @classmethod

volatility3/framework/plugins/windows/svcscan.py

@@ -20,7 +20,7 @@ vollog = logging.getLogger(__name__)
 class SvcScan(interfaces.plugins.PluginInterface):
     """Scans for windows services."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
     _version = (1, 0, 0)
 
     @classmethod

volatility3/framework/plugins/windows/symlinkscan.py

@@ -15,7 +15,7 @@ from volatility3.plugins.windows import poolscanner
 class SymlinkScan(interfaces.plugins.PluginInterface, timeliner.TimeLinerInterface):
     """Scans for links present in a particular windows memory image."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls):

volatility3/framework/plugins/windows/vadinfo.py

@@ -33,7 +33,7 @@ winnt_protections = {
 class VadInfo(interfaces.plugins.PluginInterface):
     """Lists process memory ranges."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
     _version = (2, 0, 0)
     MAXSIZE_DEFAULT = 0
 

volatility3/framework/plugins/windows/vadyarascan.py

@@ -17,7 +17,7 @@ vollog = logging.getLogger(__name__)
 class VadYaraScan(interfaces.plugins.PluginInterface):
     """Scans all the Virtual Address Descriptor memory maps using yara."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
     _version = (1, 0, 0)
 
     @classmethod

volatility3/framework/plugins/windows/verinfo.py

@@ -25,7 +25,7 @@ except ImportError:
 class VerInfo(interfaces.plugins.PluginInterface):
     """Lists version information from PE files."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:

volatility3/framework/plugins/windows/virtmap.py

@@ -16,7 +16,7 @@ vollog = logging.getLogger(__name__)
 class VirtMap(interfaces.plugins.PluginInterface):
     """Lists virtual mapped sections."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:

volatility3/framework/plugins/yarascan.py

@@ -37,7 +37,7 @@ class YaraScanner(interfaces.layers.ScannerInterface):
 class YaraScan(plugins.PluginInterface):
     """Scans kernel memory using yara rules (string or file)."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
     _version = (1, 0, 0)
 
     @classmethod

volatility3/plugins/windows/registry/certificates.py

@@ -10,7 +10,7 @@ from volatility3.plugins.windows.registry import hivelist, printkey
 class Certificates(interfaces.plugins.PluginInterface):
     """Lists the certificates in the registry's Certificate Store."""
 
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:

volatility3/plugins/windows/statistics.py

@@ -13,7 +13,7 @@ vollog = logging.getLogger(__name__)
 
 
 class Statistics(plugins.PluginInterface):
-    _required_framework_version = (2, 0, 0)
+    _required_framework_version = (1, 0, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]: