Comments (4)
Hiya,
Could you please verify that you're using the latest copy of volatility3 from git without any modifications?
This error message suggests that the psscan plugin is expecting to return a string for its first column, but the code in question should be expecting an integer (which a Pointer
is), and that code hasn't changed in the repository in 8 months (so long before the public release). It's therefore not clear why the plugin would be expecting a string to be returned?
from volatility3.
recent volatility is strange.
In vol2 it comes out normally
from volatility3.
Volatility 3 is written in python3, which means that strings are now unicode by default. This means that when invalid/corrupt data is displayed as a string it may display oddly (and include new lines or other special characters). If you think this is problematic, please open a separate issue about it, and we'll be happy to make a decision on what the best behaviour for the tool would be... 5:)
If that wasn't what you meant by "normally", but in fact you get different results between volatility2 and volatility3 then please file a separate issue as well, and include both the vol2 and vol3 output against the same image. Also, output to a file rather than images would be more useful for us to help diagnose the issue... 5:)
from volatility3.
This memory file is unicode??
not print iexplore.exe and rundll32.exe
vol2'result is normal
vol3'result translate txt --> this picture
vol3'result print --> 1hours ago picture
trouble process is iexplore.exe and rundll32.exe
why this problem?
from volatility3.
Related Issues (20)
- Extract complete executable command in linux.pslist HOT 8
- Error outputting file when attempting to `--dump` processes in `linux.pslist` HOT 12
- A symbol table requirement was not fulfilled. HOT 10
- README: Link to license is broken HOT 1
- Volatility Plugin Requirements HOT 4
- ProcessHeaps access problems HOT 11
- Volatility3 not work - symbol and pdbconv problem HOT 2
- Symbols are not picked up HOT 8
- Symbols table requirement not being fulfilled HOT 3
- How to analyse individual dump files? HOT 4
- Games processes in Volatility HOT 1
- Volatility3 not work - symbol and pdb problem HOT 18
- Allow strings as arguments to subtype for array (and similar)?
- Votality Symbol Table Problems HOT 4
- PluginRequirements: Fix `optional` and no `default` value behaviour HOT 3
- Handles unable to process sample Volatility 2 reports correctly. UnionType error? HOT 10
- Missing stable branch? HOT 1
- Unable to validate the plugin requirements: ['plugins.PsList.kernel.layer_name', 'plugins.PsList.kernel.symbol_table_name'] HOT 1
- TypeError: unsupported operand type(s) for +: 'module' and 'str' HOT 1
- Windows YARA scan across page boundaries
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from volatility3.