Hey, Depending on how you have volatility installed you can get at the plugins folder several ways. The easiest way is to invoke a plugin folder is to point to it like this (pg 59 in the Art of memory forensics book, the plugin DIR is required before any other commands):
vol.py --plugin=<DIR> psscan --profile=Win7SP1x64 Best, Jared On Tue, May 10, 2016 at 7:38 AM, P1kachu <[email protected]> wrote: > Hello, > > I am having some trouble loading a simple plugin with the '--plugins=.' > option. It seems to be loaded (there were some errors that were fixed > thanks to volatility displaying them) but it doesn't appear in the > --info list. If I try this option in one of the community folder, it > works (the plugins appear). > What is the basic requirement for a plugin to be recognized, and what > could I miss ? I started mine based on one from the > community folder (CsabaBarta/usnjrnl.py) > > Thank you, > > -- > Stanislas 'P1kachu' Lejay > EPITA - LSE > If you're sleeping, you're doing it wrong. > _______________________________________________ > Vol-users mailing list > [email protected] > http://lists.volatilesystems.com/mailman/listinfo/vol-users >
_______________________________________________ Vol-users mailing list [email protected] http://lists.volatilesystems.com/mailman/listinfo/vol-users
