Windows ThrdScan: Bump patch version number

Bumping patch version due to bug fixes.

Author: dgmcdona

volatility3/framework/plugins/windows/debugregisters.py

@@ -24,7 +24,7 @@
 class DebugRegisters(interfaces.plugins.PluginInterface):
     # version 2.6.0 adds support for scanning for 'Ethread' structures by pool tags
     _required_framework_version = (2, 6, 0)
-    _version = (1, 0, 1)
+    _version = (1, 0, 2)
 
     @classmethod
     def get_requirements(cls) -> List:
@@ -38,7 +38,7 @@ def get_requirements(cls) -> List:
                 name="pslist", component=pslist.PsList, version=(3, 0, 0)
             ),
             requirements.VersionRequirement(
-                name="threads", component=threads.Threads, version=(3, 0, 0)
+                name="threads", component=threads.Threads, version=(3, 0, 1)
             ),
             requirements.VersionRequirement(
                 name="pe_symbols", component=pe_symbols.PESymbols, version=(3, 0, 0)

volatility3/framework/plugins/windows/orphan_kernel_threads.py

@@ -18,7 +18,7 @@ class Threads(thrdscan.ThrdScan):
     _required_framework_version = (2, 4, 0)
 
     # 2.0.0 - changed the signature of `list_orphan_kernel_threads`
-    _version = (2, 0, 0)
+    _version = (2, 0, 1)
 
     def __init__(self, *args, **kwargs):
         super().__init__(*args, **kwargs)
@@ -34,7 +34,7 @@ def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]
                 architectures=["Intel32", "Intel64"],
             ),
             requirements.VersionRequirement(
-                name="thrdscan", component=thrdscan.ThrdScan, version=(2, 0, 0)
+                name="thrdscan", component=thrdscan.ThrdScan, version=(2, 0, 1)
             ),
             requirements.VersionRequirement(
                 name="ssdt", component=ssdt.SSDT, version=(2, 0, 0)

volatility3/framework/plugins/windows/psxview.py

@@ -34,7 +34,7 @@ class PsXView(plugins.PluginInterface):
     # code I do have from it, and will happily share it if anyone else wants to add it.
 
     _required_framework_version = (2, 0, 0)
-    _version = (1, 0, 0)
+    _version = (1, 0, 1)
 
     valid_proc_name_chars = set(
         string.ascii_lowercase + string.ascii_uppercase + "." + " "
@@ -55,7 +55,7 @@ def get_requirements(cls):
                 name="psscan", component=psscan.PsScan, version=(2, 0, 0)
             ),
             requirements.VersionRequirement(
-                name="thrdscan", component=thrdscan.ThrdScan, version=(2, 0, 0)
+                name="thrdscan", component=thrdscan.ThrdScan, version=(2, 0, 1)
             ),
             requirements.VersionRequirement(
                 name="handles", component=handles.Handles, version=(3, 0, 0)

volatility3/framework/plugins/windows/suspended_threads.py

@@ -19,7 +19,7 @@ class SuspendedThreads(interfaces.plugins.PluginInterface):
     """Enumerates suspended threads."""
 
     _required_framework_version = (2, 13, 0)
-    _version = (1, 0, 0)
+    _version = (1, 0, 1)
 
     @classmethod
     def get_requirements(cls):
@@ -36,7 +36,7 @@ def get_requirements(cls):
                 name="pe_symbols", component=pe_symbols.PESymbols, version=(3, 0, 0)
             ),
             requirements.VersionRequirement(
-                name="threads", component=threads.Threads, version=(3, 0, 0)
+                name="threads", component=threads.Threads, version=(3, 0, 1)
             ),
         ]
 

volatility3/framework/plugins/windows/suspicious_threads.py

@@ -17,7 +17,7 @@ class SuspiciousThreads(interfaces.plugins.PluginInterface):
     """Lists suspicious userland process threads"""
 
     _required_framework_version = (2, 4, 0)
-    _version = (2, 0, 1)
+    _version = (2, 0, 2)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:
@@ -35,13 +35,13 @@ def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]
                 optional=True,
             ),
             requirements.VersionRequirement(
-                name="thrdscan", component=thrdscan.ThrdScan, version=(2, 0, 0)
+                name="thrdscan", component=thrdscan.ThrdScan, version=(2, 0, 1)
             ),
             requirements.VersionRequirement(
                 name="pslist", component=pslist.PsList, version=(3, 0, 0)
             ),
             requirements.VersionRequirement(
-                name="threads", component=threads.Threads, version=(3, 0, 0)
+                name="threads", component=threads.Threads, version=(3, 0, 1)
             ),
             requirements.VersionRequirement(
                 name="vadinfo", component=vadinfo.VadInfo, version=(2, 0, 0)

volatility3/framework/plugins/windows/thrdscan.py

@@ -21,7 +21,7 @@ class ThrdScan(interfaces.plugins.PluginInterface, timeliner.TimeLinerInterface)
 
     # version 2.6.0 adds support for scanning for 'Ethread' structures by pool tags
     _required_framework_version = (2, 6, 0)
-    _version = (2, 0, 0)
+    _version = (2, 0, 1)
 
     class ThreadInfo(NamedTuple):
         offset: int

volatility3/framework/plugins/windows/threads.py

@@ -16,7 +16,7 @@ class Threads(thrdscan.ThrdScan):
     """Lists process threads"""
 
     _required_framework_version = (2, 4, 0)
-    _version = (3, 0, 0)
+    _version = (3, 0, 1)
 
     def __init__(self, *args, **kwargs):
         super().__init__(*args, **kwargs)
@@ -32,7 +32,7 @@ def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]
                 architectures=["Intel32", "Intel64"],
             ),
             requirements.VersionRequirement(
-                name="thrdscan", component=thrdscan.ThrdScan, version=(2, 0, 0)
+                name="thrdscan", component=thrdscan.ThrdScan, version=(2, 0, 1)
             ),
             requirements.VersionRequirement(
                 name="pslist", component=pslist.PsList, version=(3, 0, 0)