volatilityfoundation / volatility3

Volatility 3.0 development
http://volatilityfoundation.org/
Other
2.72k stars 461 forks source link

Windows: Netscan - fix missing TCP connections #1277

Closed dgmcdona closed 1 month ago

dgmcdona commented 1 month ago

This fixes some missing TCP connections in Windows 10 20348 by adding a scan constraint for TTcb pool tags when using the netscan-win10-20348 layer.

atcuno commented 1 month ago

@ikelos this is another critical bug fix