From d32f3e76d4746ca235c1d5ae1a3668167ece1297 Mon Sep 17 00:00:00 2001 From: Dave Lassalle Date: Tue, 11 Mar 2025 09:47:47 -0500 Subject: [PATCH] #1645 - remove quoutes around type --- volatility3/framework/layers/registry.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/volatility3/framework/layers/registry.py b/volatility3/framework/layers/registry.py index 57747c14a..9444df675 100644 --- a/volatility3/framework/layers/registry.py +++ b/volatility3/framework/layers/registry.py @@ -95,7 +95,7 @@ class RegistryHive(linear.LinearlyMappedLayer): f"Exception when setting hive {self.name} max address, using {hex(self._maxaddr)}", ) - def _find_registry_process(self) -> Optional["extensions.EPROCESS"]: + def _find_registry_process(self) -> Optional[extensions.EPROCESS]: """Walk the active process list and return the Registry process if it exists. Duplicates PsList.list_processes() since pulling in the plugin causes problems.