Skip to content

Commit a515e57

Browse files
author
Dave Lassalle
committed
add Win10x64 17763
1 parent fdb131f commit a515e57

File tree

3 files changed

+608
-0
lines changed

3 files changed

+608
-0
lines changed

volatility3/framework/plugins/windows/consoles.py

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -203,6 +203,7 @@ def determine_conhost_version(
203203
version_dict = {}
204204
else:
205205
version_dict = {
206+
(10, 0, 17763, 0): "consoles-win10-17763-x64",
206207
(10, 0, 20348, 1): "consoles-win10-20348-x64",
207208
(10, 0, 20348, 1970): "consoles-win10-20348-1970-x64",
208209
(10, 0, 20348, 2461): "consoles-win10-20348-2461-x64",
@@ -580,6 +581,13 @@ def get_console_info(
580581
"data": command_history.CommandCount,
581582
}
582583
)
584+
console_properties.append(
585+
{
586+
"name": f"_CONSOLE_INFORMATION.HistoryList.CommandHistory_{index}_LastDisplayed",
587+
"address": command_history.LastDisplayed.vol.offset,
588+
"data": command_history.LastDisplayed,
589+
}
590+
)
583591
for (
584592
cmd_index,
585593
bucket_cmd,

0 commit comments

Comments
 (0)