We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 94a0292 commit fc7e13fCopy full SHA for fc7e13f
volatility3/framework/plugins/windows/etwpatch.py
@@ -34,13 +34,11 @@ class EtwPatch(interfaces.plugins.PluginInterface):
34
"ZwTraceEvent",
35
"NtTraceControl",
36
"ZwTraceControl",
37
- "EtwpEventWriteFull"
+ "EtwpEventWriteFull",
38
],
39
},
40
"advapi32.dll": {
41
- pe_symbols.wanted_names_identifier: [
42
- "EventWrite",
43
- "TraceEvent"],
+ pe_symbols.wanted_names_identifier: ["EventWrite", "TraceEvent"],
44
45
}
46
0 commit comments