Eve
Eve
That makes sense at least. I'll try and make the plugin more resilient when i get the time. Thanks for double checking it!
Interesting! Looks like it would close off this issue if merged https://github.com/volatilityfoundation/volatility3/issues/464
That would be fantastic, but it is a lot of work. If you haven't seen it the art of memory forensics books covers a lot of ground and is worth...
I'll get that test fixed!
@ikelos that's a really good point. I've just been focused on getting rid of the back trace for @garanews rather than looking at the plugin as a whole. The windows...
No progress on this from me - thank you for the nudge.
Yes, i completely agree. It seems like it should be easy until you really start thinking about it. E.g. if you're scanning for something and there is a normal memory...
Yeah, at the moment it feels a helper function like that would work and a for each loop.
No progress from me on this one. I did spot this function in pdbscan: https://github.com/volatilityfoundation/volatility3/blob/1a71b03b8da6203616951923e316a245ae396d05/volatility3/framework/automagic/pdbscan.py#L173-L176 This could maybe be used as a holding function until we're able to come up...