tking2 / volatility

Automatically exported from code.google.com/p/volatility
GNU General Public License v2.0
0 stars 1 forks source link

patch to enable cmdscan/consoles on w7x64 #318

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
This is patch that fixes the cmdscan and consoles plugins on w7x64. Previously 
I thought conhost.exe on w7x64 was a wow64 process, but I was either plain 
wrong or its extremely rare. On second look, I can't find a w7x64 system with a 
32-bit conhost.exe on disk, so I'm leaning toward me just being wrong 
initially. So the good news is now we can enable this plugin on all platforms 
and not just all except w7x64. The bad news is it may be too late for 2.1 
release, so just in case I'm posting it here so people who download 2.1 can 
still immediately use the plugin if they want. 

Original issue reported on code.google.com by michael.hale@gmail.com on 30 Jul 2012 at 1:58

Attachments:

GoogleCodeExporter commented 9 years ago
fixed in r2125

Original comment by michael.hale@gmail.com on 4 Aug 2012 at 5:06