Jan

Windows XP handles network connections differently than Vista onwards. Vol2 has 4 different plugins for network objects in XP (https://github.com/volatilityfoundation/volatility/wiki/Command-Reference#networking) incorporating different approaches. When porting `netscan` to vol3 I made...

@wilsq36 Can you provide more information about the memory image you are looking at? It is possible that newer Windows versions may have changed their offsets again.

Heya, I know it's been a while, but is there a chance for you to provide the dump file? The problem is caused by the plugin not finding the GUID...

This plays nicely when checking if at least one return value is Unreadable or Unparsable. However plugins might define their own sanity checks specific to the data they are handling,...