admin/volatilityfoundation-volatility
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility synced 2026-06-08 18:04:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix up filescan output formatting.

Browse Source
This commit is contained in:
mike.auty@gmail.com
2012-06-03 18:01:27 +00:00
parent 506b7612ff
commit 0366b269a9
1 changed files with 9 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/plugins/filescan.py
+9 -4
View File
@@ -94,13 +94,18 @@ class FileScan(common.AbstractWindowsCommand):
yield (object_obj, file_obj)
def render_text(self, outfd, data):
outfd.write("{0:10} {1:4} {2:4} {3:6} {4}\n".format(
'Offset(P)', '#Ptr', '#Hnd', 'Access', 'Name'))
self.table_header(outfd, [('Offset(P)', '[addrpad]'),
('#Ptr', '>6'),
('#Hnd', '>6'),
('Access', '>6'),
('Name', '')
])
for object_obj, file_obj in data:
outfd.write("{0:#010x} {1:4} {2:4} {3:6} {4}\n".format(
self.table_row(outfd,
file_obj.obj_offset, object_obj.PointerCount,
object_obj.HandleCount, file_obj.access_string(), str(file_obj.FileName or '')))
object_obj.HandleCount, file_obj.access_string(), str(file_obj.FileName or ''))
class PoolScanDriver(PoolScanFile):
""" Scanner for _DRIVER_OBJECT """