Skip to content

Commit 130d118

Browse files
authored
Merge pull request #1307 from dgmcdona/dgmcdona/windows-scheduled-tasks
Windows: Adds scheduled tasks plugin
2 parents a00a59c + efdbc27 commit 130d118

File tree

7 files changed

+1819
-0
lines changed

7 files changed

+1819
-0
lines changed

test/__init__.py

Whitespace-only changes.

test/plugins/__init__.py

Whitespace-only changes.

test/plugins/windows/__init__.py

Whitespace-only changes.

test/plugins/windows/test_scheduled_tasks.py

Lines changed: 387 additions & 0 deletions
Large diffs are not rendered by default.

volatility3/framework/layers/registry.py

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -170,6 +170,9 @@ def get_key(
170170
return_list specifies whether the return result will be a single
171171
node (default) or a list of nodes from root to the current node
172172
(if return_list is true).
173+
174+
Raises RegistryFormatException if an invalid structure is encountered
175+
Raises KeyError if the key is not found
173176
"""
174177
root_node = self.get_node(self.root_cell_offset)
175178
if not root_node.vol.type_name.endswith(constants.BANG + "_CM_KEY_NODE"):

0 commit comments

Comments
 (0)