volatility
volatility copied to clipboard
plugin output shortened/cut-off
I'm running volatility in a full screen window with plenty of space to print the output, but it's still coming back either cut short or printed with ellipsis in fields like the PID:
Offset(P) Name PID PPID PDB Time created Time exited
------------------ ---------------- ------ ------ ------------------ ------------------------------ ------------------------------
0x0000ba8a9d64e040 System 26...6 0 0x00000000001aa000 2021-03-28 13:43:54 UTC+0000
0x0000ba8a9d79a040 Registry 26...2 4 0x00000000008e6000 2021-03-28 13:43:50 UTC+0000
0x0000ba8aa02c9640 smss.exe 26...2 4 0x0000000007569000 2021-03-28 13:43:54 UTC+0000
0x0000ba8aa0877080 services.exe 26...6 452 0x000000001be88000 2021-03-28 13:44:01 UTC+0000
0x0000ba8aa098a080 svchost.exe 27...4 584 0x0000000018377000 2021-03-28 13:44:05 UTC+0000
0x0000ba8aa0c7b080 csrss.exe 26...6 372 0x000000001f1a6000 2021-03-28 13:44:00 UTC+0000
0x0000ba8aa1ee1280 svchost.exe 27...8 584 0x00000000277c6000 2021-03-28 13:44:14 UTC+0000
0x0000ba8aa1ee4240 Microsoft.Acti 27...8 584 0x000000002768c000 2021-03-28 13:44:14 UTC+0000
0x0000ba8aa1ee9080 dns.exe 27...4 584 0x000000002c6a6000 2021-03-28 13:44:14 UTC+0000
0x0000ba8aa20271c0 svchost.exe 27...2 584 0x0000000029b17000 2021-03-28 13:44:14 UTC+0000
0x0000ba8aa2032240 ossec-agent.ex 27...0 584 0x000000002c3a7000 2021-03-28 13:44:14 UTC+0000
0x0000ba8aa20b92c0 MsMpEng.exe 27...8 584 0x000000002ecf0000 2021-03-28 13:44:15 UTC+0000
0x0000ba8aa217d380 fontdrvhost.ex 27...6 452 0x000000004fb29000 2021-03-28 13:44:30 UTC+0000
0x0000ba8aa2e194c0 svchost.exe 27...6 584 0x000000003b13b000 2021-03-28 13:44:17 UTC+0000
0x0000ba8aa313f080 dfsrs.exe 27...2 584 0x0000000072a5d000 2021-03-28 19:22:31 UTC+0000
0x0000ba8aa4371080 userinit.exe 27...0 520 0x0000000026530000 2021-03-28 19:05:37 UTC+0000
0x0000ba8aa4676080 SecurityHealth 27...6 584 0x000000003574c000 2021-03-28 19:15:07 UTC+0000
0x0000ba8aa4a182c0 smartscreen.ex 27...4 792 0x0000000011502000 2021-03-28 19:06:02 UTC+0000
I haven't run into this issue before and couldn't find any reports of a similar issue - can you advise troubleshooting steps, or perhaps a setting I might've overlooked?
Hey,
That is strange. What is the profile you are using?