volatility icon indicating copy to clipboard operation
volatility copied to clipboard

plugin output shortened/cut-off

Open OpalSec opened this issue 3 years ago • 1 comments

I'm running volatility in a full screen window with plenty of space to print the output, but it's still coming back either cut short or printed with ellipsis in fields like the PID:

Offset(P)          Name                PID   PPID PDB                Time created                   Time exited                   
------------------ ---------------- ------ ------ ------------------ ------------------------------ ------------------------------
0x0000ba8a9d64e040 System           26...6      0 0x00000000001aa000 2021-03-28 13:43:54 UTC+0000                                 
0x0000ba8a9d79a040 Registry         26...2      4 0x00000000008e6000 2021-03-28 13:43:50 UTC+0000                                 
0x0000ba8aa02c9640 smss.exe         26...2      4 0x0000000007569000 2021-03-28 13:43:54 UTC+0000                                 
0x0000ba8aa0877080 services.exe     26...6    452 0x000000001be88000 2021-03-28 13:44:01 UTC+0000                                 
0x0000ba8aa098a080 svchost.exe      27...4    584 0x0000000018377000 2021-03-28 13:44:05 UTC+0000                                 
0x0000ba8aa0c7b080 csrss.exe        26...6    372 0x000000001f1a6000 2021-03-28 13:44:00 UTC+0000                                 
0x0000ba8aa1ee1280 svchost.exe      27...8    584 0x00000000277c6000 2021-03-28 13:44:14 UTC+0000                                 
0x0000ba8aa1ee4240 Microsoft.Acti   27...8    584 0x000000002768c000 2021-03-28 13:44:14 UTC+0000                                 
0x0000ba8aa1ee9080 dns.exe          27...4    584 0x000000002c6a6000 2021-03-28 13:44:14 UTC+0000                                 
0x0000ba8aa20271c0 svchost.exe      27...2    584 0x0000000029b17000 2021-03-28 13:44:14 UTC+0000                                 
0x0000ba8aa2032240 ossec-agent.ex   27...0    584 0x000000002c3a7000 2021-03-28 13:44:14 UTC+0000                                 
0x0000ba8aa20b92c0 MsMpEng.exe      27...8    584 0x000000002ecf0000 2021-03-28 13:44:15 UTC+0000                                 
0x0000ba8aa217d380 fontdrvhost.ex   27...6    452 0x000000004fb29000 2021-03-28 13:44:30 UTC+0000                                 
0x0000ba8aa2e194c0 svchost.exe      27...6    584 0x000000003b13b000 2021-03-28 13:44:17 UTC+0000                                 
0x0000ba8aa313f080 dfsrs.exe        27...2    584 0x0000000072a5d000 2021-03-28 19:22:31 UTC+0000                                 
0x0000ba8aa4371080 userinit.exe     27...0    520 0x0000000026530000 2021-03-28 19:05:37 UTC+0000                                 
0x0000ba8aa4676080 SecurityHealth   27...6    584 0x000000003574c000 2021-03-28 19:15:07 UTC+0000                                 
0x0000ba8aa4a182c0 smartscreen.ex   27...4    792 0x0000000011502000 2021-03-28 19:06:02 UTC+0000   

I haven't run into this issue before and couldn't find any reports of a similar issue - can you advise troubleshooting steps, or perhaps a setting I might've overlooked?

OpalSec avatar Apr 18 '21 07:04 OpalSec

Hey,

That is strange. What is the profile you are using?

atcuno avatar Apr 19 '21 00:04 atcuno