Files
volatility3/volatility/framework/constants/windows/__init__.py
T

6 lines
167 B
Python

"""Volatility 3 Linux Constants
Windows-specific values that aren't found in debug symbols"""
KERNEL_MODULE_NAMES = ["ntkrnlmp", "ntkrnlpa", "ntkrpamp", "ntoskrnl"]