Hey,
Depending on how you have volatility installed you can get at the plugins
folder several ways.
The easiest way is to invoke a plugin folder is to point to it like this
(pg 59 in the Art of memory forensics book, the plugin DIR is required
before any other commands):
vol.py --plugin=<DIR> psscan --profile=Win7SP1x64
Best,
Jared
On Tue, May 10, 2016 at 7:38 AM, P1kachu <p1kachu(a)lse.epita.fr> wrote:
Hello,
I am having some trouble loading a simple plugin with the '--plugins=.'
option. It seems to be loaded (there were some errors that were fixed
thanks to volatility displaying them) but it doesn't appear in the
--info list. If I try this option in one of the community folder, it
works (the plugins appear).
What is the basic requirement for a plugin to be recognized, and what
could I miss ? I started mine based on one from the
community folder (CsabaBarta/usnjrnl.py)
Thank you,
--
Stanislas 'P1kachu' Lejay
EPITA - LSE
If you're sleeping, you're doing it wrong.
_______________________________________________
Vol-users mailing list
Vol-users(a)volatilityfoundation.org
http://lists.volatilityfoundation.org/mailman/listinfo/vol-users