Add proper support for non-raw memory samples where the page at offset 0 is missing

Author: atcuno

volatility/plugins/overlays/basic.py

@@ -221,7 +221,7 @@ def generate_suggestions(self):
                                   vm = self.obj_vm)
                 if 'Idle\x00\x00\x00\x00\x00\x00\x00\x00' in proc.ImageFileName.v() and \
                     int(proc.UniqueProcessId) == 0 and \
-                    proc.Peb.v() == 0:
+                    proc.Peb.v() in [None, 0]:
 
                     yield proc.Pcb.DirectoryTableBase.v()