#1471 - getattribute instead of getattr, and removal date

volatility3/framework/plugins/windows/amcache.py

@@ -14,8 +14,11 @@ class Amcache(amcache.Amcache):
     _required_framework_version = (2, 0, 0)
     _version = (2, 0, 0)
 
-    def __getattr__(self, *args, **kwargs):
+    def __getattribute__(self, *args, **kwargs):
         warnings.warn(
-            FutureWarning("This plugin is now called windows.registry.amcache.Amcache")
+            FutureWarning(
+                "The windows.amcache.Amcache plugin is deprecated and will be removed on "
+                "September 19, 2025. Use windows.registry.amcache.Amcache instead."
+            )
         )
-        return super().__getattr__(*args, **kwargs)
+        return super().__getattribute__(*args, **kwargs)

volatility3/framework/plugins/windows/cachedump.py

@@ -14,10 +14,11 @@ class Cachedump(cachedump.Cachedump):
     _required_framework_version = (2, 0, 0)
     _version = (1, 0, 2)
 
-    def __getattr__(self, *args, **kwargs):
+    def __getattribute__(self, *args, **kwargs):
         warnings.warn(
             FutureWarning(
-                "This plugin is now called windows.registry.cachedump.Cachedump"
+                "The windows.cachedump.Cachedump plugin is deprecated and will be removed on "
+                "September 19, 2025. Use windows.registry.cachedump.Cachedump instead."
             )
         )
-        return super().__getattr__(*args, **kwargs)
+        return super().__getattribute__(*args, **kwargs)

volatility3/framework/plugins/windows/hashdump.py

@@ -14,10 +14,11 @@ class Hashdump(hashdump.Hashdump):
     _required_framework_version = (2, 0, 0)
     _version = (1, 1, 1)
 
-    def __getattr__(self, *args, **kwargs):
+    def __getattribute__(self, *args, **kwargs):
         warnings.warn(
             FutureWarning(
-                "This plugin is now called windows.registry.hashdump.Hashdump"
+                "The windows.hashdump.Hashdump plugin is deprecated and will be removed on "
+                "September 19, 2025. Use windows.registry.hashdump.Hashdump instead."
             )
         )
-        return super().__getattr__(*args, **kwargs)
+        return super().__getattribute__(*args, **kwargs)

volatility3/framework/plugins/windows/lsadump.py

@@ -14,8 +14,11 @@ class Lsadump(lsadump.Lsadump):
     _required_framework_version = (2, 0, 0)
     _version = (1, 0, 1)
 
-    def __getattr__(self, *args, **kwargs):
+    def __getattribute__(self, *args, **kwargs):
         warnings.warn(
-            FutureWarning("This plugin is now called windows.registry.lsadump.Lsadump")
+            FutureWarning(
+                "The windows.lsadump.Lsadump plugin is deprecated and will be removed on "
+                "September 19, 2025. Use windows.registry.lsadump.Lsadump instead."
+            )
         )
-        return super().__getattr__(*args, **kwargs)
+        return super().__getattribute__(*args, **kwargs)

volatility3/framework/plugins/windows/registry/scheduled_tasks.py

@@ -1108,8 +1108,8 @@ class DynamicInfo:
 
 
 class ScheduledTasks(interfaces.plugins.PluginInterface, timeliner.TimeLinerInterface):
-    """Decodes scheduled task information from the Windows registry, including \
-information about triggers, actions, run times, and creation times."""
+    """Decodes scheduled task information from the Windows registry, including
+    information about triggers, actions, run times, and creation times."""
 
     _required_framework_version = (2, 11, 0)
     _version = (2, 0, 0)

volatility3/framework/plugins/windows/scheduled_tasks.py

@@ -9,16 +9,17 @@ vollog = logging.getLogger(__name__)
 
 
 class ScheduledTasks(scheduled_tasks.ScheduledTasks):
-    """Decodes scheduled task information from the Windows registry, including \
-information about triggers, actions, run times, and creation times (deprecated)."""
+    """Decodes scheduled task information from the Windows registry, including
+    information about triggers, actions, run times, and creation times (deprecated)."""
 
     _required_framework_version = (2, 11, 0)
     _version = (2, 0, 0)
 
-    def __getattr__(self, *args, **kwargs):
+    def __getattribute__(self, *args, **kwargs):
         warnings.warn(
             FutureWarning(
-                "This plugin is now called windows.registry.scheduled_tasks.ScheduledTasks"
+                "The windows.registry.scheduled_tasks.ScheduledTasks plugin is deprecated and will be removed on "
+                "September 19, 2025. Use windows.registry.scheduled_tasks.ScheduledTasks instead."
             )
         )
-        return super().__getattr__(*args, **kwargs)
+        return super().__getattribute__(*args, **kwargs)