Merge pull request #1550 from gcmoreira/linux_intel_32_pae_support

Linux: Add support for Intel 32bit with PAE

Author: ikelos

volatility3/framework/automagic/linux.py

@@ -71,6 +71,11 @@ def stack(
                 elif "init_level4_pgt" in table.symbols:
                     layer_class = intel.LinuxIntel32e
                     dtb_symbol_name = "init_level4_pgt"
+                elif "pkmap_count" in table.symbols and table.get_symbol(
+                    "pkmap_count"
+                ).type.count in (512, 2048):
+                    layer_class = intel.LinuxIntelPAE
+                    dtb_symbol_name = "swapper_pg_dir"
                 else:
                     layer_class = intel.LinuxIntel
                     dtb_symbol_name = "swapper_pg_dir"