tking2 / volatility

Automatically exported from code.google.com/p/volatility
GNU General Public License v2.0
0 stars 1 forks source link

Added JSON Output to vaddinfo output #338

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
This is a very hairy enhancement, and I was not sure how to really represent 
the vadinfo in JSON.  I only added functionality for the vadinfo command, and 
the output will look something like, where the PID is the key:

   "1264": {
        "VadExt": {
            "LastContiguousPte": "0x1000", 
            "FirstPrototypePte": "0x0", 
            "VadFlags2": "LongVad: 1, OneSecured: 1"
        }, 
        "VadControl": null, 
        "UniqueProcessId": 1264, 
        "VadShort": {
            "Tag": "Vadl", 
            "End": 2147352575, 
            "VadType": "", 
            "Start": 2147348480, 
            "VadFlags": "CommitCharge: 1, MemCommit: 1, NoChange: 1, PrivateMemory: 1, Protection: 4", 
            "Protection": "PAGE_READWRITE", 
            "offset": 2185100824
        }
    }, 

Original issue reported on code.google.com by adam.pri...@thecoverofnight.com on 31 Aug 2012 at 5:34

Attachments:

GoogleCodeExporter commented 9 years ago

Original comment by michael.hale@gmail.com on 31 Aug 2012 at 11:45