diff --git a/volatility/framework/plugins/windows/poolscanner.py b/volatility/framework/plugins/windows/poolscanner.py index aba7f6fd2..9e9eaf5f6 100644 --- a/volatility/framework/plugins/windows/poolscanner.py +++ b/volatility/framework/plugins/windows/poolscanner.py @@ -396,6 +396,7 @@ class PoolScanner(plugins.PluginInterface): # Setup the pool header and offset differential try: module = context.module(symbol_table, layer_name, offset = 0) + module.get_type("_POOL_HEADER") except exceptions.SymbolError: # We have to manually load a symbol table