Files
volatility3/doc/source
David McDonaldandAndrew Case 5cbc07887c Windows PsList: Add method for listing procs from kernel
This adds a new classmethod, `list_processes_from_kernel`, updates the
`list_processes` method signature to use only the kernel module name and
the context instead of splitting information about the kernel between
the layer_name and symbol_table_name paramters, and does a major version
number increase on the plugin.

Also updates the documentation to reflect pslist method signature
change.

Co-authored-by: Andrew Case <andrew@dfir.org>
2025-03-05 17:59:38 -06:00
..
2019-09-25 22:21:21 +01:00
2024-12-06 21:52:51 +00:00
2025-01-17 12:54:54 +00:00
2024-12-18 17:49:56 +00:00
2023-05-05 23:39:33 +09:00
2024-12-07 16:37:39 +00:00
2024-12-11 12:42:20 +00:00