Andrew Case
Andrew Case
@ikelos Unhandled page faults are definitely bugs in our code, and plugins not being able to know if an object they instantiated is valid or not makes reliable programming extremely...
@olifre Could you please apply this patch to your vol2 code and then re-run: ``` $ git diff volatility/utils.py diff --git a/volatility/utils.py b/volatility/utils.py index 8795f26d..661604bb 100644 --- a/volatility/utils.py +++ b/volatility/utils.py...
Ok the profile is definitely broken if you are getting that error. task_struct has a "comm" member in all versions of Linux going back to the beginning. Could you upload...
@olifre can you git pull volatility 2 and try to run again with that profile? I updated for the dwarf.py issue. Also, be aware, plugins might be really slow to...
Okay, lets move the discussion to https://github.com/volatilityfoundation/volatility/issues/638 for now. We will come back to this ticket once we sort the Vol2 part.
> Sorry for my late reply. > > I closed this request once. I will re-open it when I am ready. These are important plugins to the framework's parity effort...
@ikelos this one is not fixed by #1145 . This is a newly uncovered bug that triggered once I had 1145 code in place.
I really like this idea. It would be good to have it merged @ikelos
@ikelos this one has been tested quite a bit and is good from my end. It is a powerful plugin for rootkit detection.
@ikelos after reading the current code and some users of the different paths into, @gcmoreira's comment above to use: `dname = dentry.d_name.name_as_str` still stands as the correct way. This will...