ikelos

Thanks @coreyoconnor , the error message in the original post seems to suggest that needs to happen too: ``` Bail out! St:ERROR:../gnome-shell/src/st/st-bin.c:206:st_bin_destroy: assertion failed: (priv->child == NULL) ``` since it's...

Ah, I'd been running it ok for a bit (and no crashes, but a slight pause), but it seems that it could cause gnome-shell to keel over after unlocking in...

Dwarf2json is used for volatility 3, and is not relevant/used by volatility 2. Transferring this issue....

Hiya, This looks to be a slight problem with using RootTools.exists(file) rather than RootTools.exists(file, true) which will allow directories as well. Otherwise the custompath dialog will only allow filenames and...

Yep, There's experimental support for arm in pull request 1088, but nothing official yet... Mike 5:) On Mon, 25 Mar 2024, 13:44 Ilya, ***@***.***> wrote: > Thanks for reaching out!...

I haven't looked through the PR, but I'd like to make sure there's a way to differentiate ISF files made using a full kernel and those made using the `module.ko`...

Yep, it might be worth including an additional field in the file that a) identifies it as based on module.ko and b) contains the version of `module.ko` that was used?...

I agree, that's why I figured it had to be something specific that existed in the DWARF output of `module.ko`. There currently is specific logic for handling the banner to...

Hiya, would it be possible to get the output with `-vvvv` now that you're trying a linux plugin please? It will help us diagnose whether the automagic is finding the...

Please also note that just the System.map is usually not enough to create the structures for the kernel (which volatility needs to know to understand how everything's laid out). It...