Donghyun Kim
Donghyun Kim
@iMHLv2 Thank you for your interest in this PR despite your busy schedule. 😀
Hello @mrratherford, This time, I developed DeviceTree Plugin, one of the requests covered in this issue. It was finally merged in the `develop` branch, so I would appreciate it if...
> This looks like it'll be really awesome, but I'm afraid the renderer is hard coded with column names to produce the relationships (`PID` and `PPID`). Given that the parental...
> Another option would be to make this a very handy additional tool to run over existing output methods (such as JSON, JSONL or similar) if you'd prefer? @ikelos Could...
> > @ikelos Could you give me a little more detail about the this comment, I'll try it the way you first suggested it, but if it's a good suggestion...
Thank you for the good issue. 🙂 I checked as you said and it seems that the new version does not support the `ThreadProcess` structure of `_ETHREAD`. Maybe it's right...
@paulkermann Thank you for your answer! I think it was a very easy question..😅 Additional, I've explored and the `owning_process` method is being used here. https://github.com/volatilityfoundation/volatility3/blob/c40e088370baa8318c5912d1eec7cb98e587045f/volatility3/framework/plugins/windows/psscan.py#L119 There is no separate...
Hello, @paulkermann This issue we were discussing has been merged well this time. If you have any good issues in the future, please leave them. It's fun to discuss and...
Hello, @lic-8 Thank you for uploading the detailed log. It would be helpful to solve the problem if you could explain in more detail what commands you tried, what the...
It is understood that the development of `TrueCrypt` has stopped over time. Would it be significant for this plugin to go into `volatility3`? Wouldn't supporting other programs like `VeraCrypt` and...