Python module for viewing Portable Executable (PE) files in a tree-view using pefile and PyQt5. Can also be used with IDA Pro and Rekall to dump in-memory PE files and reconstruct imports.
Hi,
The latest version of Volatility 3 is 2.4.0, which is not supported. Any chance newer versions of Volatility 3 will be supported?
$ pe-tree-vol /dumps/memory.dmp
Traceback (most recent call last):
File "/usr/local/bin/pe-tree-vol", line 8, in
sys.exit(main())
File "/usr/local/lib/python3.8/dist-packages/pe_tree/volatility.py", line 340, in main
window = pe_tree.window.PETreeWindow(application, VolatilityRuntime, args, open_file=False)
File "/usr/local/lib/python3.8/dist-packages/pe_tree/window.py", line 47, in init
self.runtime = runtime(widget, args)
File "/usr/local/lib/python3.8/dist-packages/pe_tree/volatility.py", line 55, in init
framework.require_interface_version(1, 0, 0)
File "/usr/local/lib/python3.8/dist-packages/volatility3/framework/init.py", line 57, in require_interface_version
raise RuntimeError(
RuntimeError: Framework interface version 2 is incompatible with required version 1
Hi, The latest version of Volatility 3 is 2.4.0, which is not supported. Any chance newer versions of Volatility 3 will be supported?
$ pe-tree-vol /dumps/memory.dmp Traceback (most recent call last): File "/usr/local/bin/pe-tree-vol", line 8, in
sys.exit(main())
File "/usr/local/lib/python3.8/dist-packages/pe_tree/volatility.py", line 340, in main
window = pe_tree.window.PETreeWindow(application, VolatilityRuntime, args, open_file=False)
File "/usr/local/lib/python3.8/dist-packages/pe_tree/window.py", line 47, in init
self.runtime = runtime(widget, args)
File "/usr/local/lib/python3.8/dist-packages/pe_tree/volatility.py", line 55, in init
framework.require_interface_version(1, 0, 0)
File "/usr/local/lib/python3.8/dist-packages/volatility3/framework/init.py", line 57, in require_interface_version
raise RuntimeError(
RuntimeError: Framework interface version 2 is incompatible with required version 1
~Salty