diff --git a/volatility/framework/symbols/windows/services-win10-15063-x86.json b/volatility/framework/symbols/windows/services-win10-15063-x86.json index bac6641f9..36b3b33e3 100644 --- a/volatility/framework/symbols/windows/services-win10-15063-x86.json +++ b/volatility/framework/symbols/windows/services-win10-15063-x86.json @@ -196,7 +196,18 @@ } }, "offset": 44 - }, + }, + "Tag": { + "type": { + "count": 4, + "subtype": { + "kind": "base", + "name": "unsigned char" + }, + "kind": "array" + }, + "offset": 0 + }, "DriverName": { "type": { "kind": "pointer", diff --git a/volatility/framework/symbols/windows/services-win10-16299-x86.json b/volatility/framework/symbols/windows/services-win10-16299-x86.json index 421cb6134..8949765bb 100644 --- a/volatility/framework/symbols/windows/services-win10-16299-x86.json +++ b/volatility/framework/symbols/windows/services-win10-16299-x86.json @@ -196,7 +196,18 @@ } }, "offset": 44 - }, + }, + "Tag": { + "type": { + "count": 4, + "subtype": { + "kind": "base", + "name": "unsigned char" + }, + "kind": "array" + }, + "offset": 0 + }, "DriverName": { "type": { "kind": "pointer",