WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-08 02:37:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

Reduce the number of input variables need for the vol test CLI still to run.

Browse Source
This commit is contained in:
Mike Auty
2016-08-24 01:32:06 +01:00
parent 32bdeafa8a
commit eb9b2dcb79
1 changed files with 2 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/cli/__init__.py
+2 -7
View File
@@ -52,22 +52,17 @@ class CommandLine(object):
# UI fills in the config:
ctx = contexts.Context()
ctx.config["plugins.pslist.primary.class"] = "volatility.framework.layers.intel.IntelPAE"
ctx.config["plugins.pslist.primary.memory_layer.class"] = "volatility.framework.layers.physical.FileLayer"
ctx.config[
"plugins.pslist.primary.memory_layer.filename"] = "/run/media/mike/disk/memory/xp-laptop-2005-07-04-1430.img"
ctx.config["ui.single_location"] = "file:///run/media/mike/disk/memory/xp-laptop-2005-07-04-1430.img"
ctx.config["plugins.pslist.offset"] = 0x023c87c0
ctx.config["plugins.pslist.primary.memory_layer.filename"] = "/run/media/mike/disk/memory/private/jon-fres.dmp"
ctx.config["ui.single_location"] = "file:///run/media/mike/disk/memory/private/jon-fres.dmp"
ctx.config["plugins.pslist.offset"] = 0x01bcc830
ctx.config["plugins.pslist.ntkrnlmp.class"] = "volatility.framework.symbols.windows.WindowsKernelVTypeSymbols"
ctx.config["plugins.pslist.ntkrnlmp.vtype_pymodule"] = "volatility.framework.symbols.windows.xp_sp2_x86_vtypes"
ctx.config["plugins.pslist.ntkrnlmp.vtype_variable"] = "ntkrnlmp_types"
# ctx.config["plugins.pslist.primary.page_map_offset"] = 0x39000
###
# BACK TO THE FRAMEWORK
###