Files
volatility3/doc
David McDonaldandAndrew Case 5cbc07887c Windows PsList: Add method for listing procs from kernel
This adds a new classmethod, `list_processes_from_kernel`, updates the
`list_processes` method signature to use only the kernel module name and
the context instead of splitting information about the kernel between
the layer_name and symbol_table_name paramters, and does a major version
number increase on the plugin.

Also updates the documentation to reflect pslist method signature
change.

Co-authored-by: Andrew Case <andrew@dfir.org>
2025-03-05 17:59:38 -06:00
..
2021-01-20 21:46:20 +00:00