WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-10-01 05:54:58 +02:00
Code Issues Packages Projects Releases Wiki Activity

Automagic: Improve debugging output for linux/mac

Browse Source
This commit is contained in:
Mike Auty
2020-12-02 09:51:42 +00:00
parent 8fb53a32a8
commit f88ce55199
2 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/automagic/linux.py
+1
View File
@@ -84,6 +84,7 @@ class LinuxIntelStacker(interfaces.automagic.StackerLayerInterface):
if layer and dtb:
vollog.debug("DTB was found at: 0x{:0x}".format(dtb))
return layer
vollog.debug("No suitable linux banner could be matched")
return None
@classmethod
volatility/framework/automagic/mac.py
+2 -1
View File
@@ -44,6 +44,7 @@ class MacIntelStacker(interfaces.automagic.StackerLayerInterface):
for banner_offset, banner in layer.scan(context = context, scanner = mss,
progress_callback = progress_callback):
dtb = None
vollog.debug("Identified banner: {}".format(repr(banner)))
symbol_files = mac_banners.get(banner, None)
if symbol_files:
@@ -102,9 +103,9 @@ class MacIntelStacker(interfaces.automagic.StackerLayerInterface):
metadata = {'kaslr_value': kaslr_shift})
if new_layer and dtb:
vollog.debug("Identified banner: {}".format(repr(banner)))
vollog.debug("DTB was found at: 0x{:0x}".format(dtb))
return new_layer
vollog.debug("No suitable mac banner could be matched")
return None
@classmethod