diff --git a/volatility/plugins/linux/linux_yarascan.py b/volatility/plugins/linux/linux_yarascan.py index bb257c51..4235f65e 100644 --- a/volatility/plugins/linux/linux_yarascan.py +++ b/volatility/plugins/linux/linux_yarascan.py @@ -44,6 +44,7 @@ class VmaYaraScanner(malfind.BaseYaraScanner): yield match class linux_yarascan(malfind.YaraScan): + """A shell in the Linux memory image""" @staticmethod def is_valid_profile(profile):