Skip to content

Commit

Permalink
Windows: change warnings around large memory maps to debug level as p…
Browse files Browse the repository at this point in the history
  • Loading branch information
eve-mem committed Sep 25, 2024
1 parent 67f8265 commit 09fa859
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions volatility3/framework/plugins/windows/vadyarascan.py
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ class VadYaraScan(interfaces.plugins.PluginInterface):
"""Scans all the Virtual Address Descriptor memory maps using yara."""

_required_framework_version = (2, 4, 0)
_version = (1, 1, 0)
_version = (1, 1, 1)

@classmethod
def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:
Expand Down Expand Up @@ -68,7 +68,7 @@ def _generator(self):
layer = self.context.layers[layer_name]
for start, size in self.get_vad_maps(task):
if size > sanity_check:
vollog.warn(
vollog.debug(
f"VAD at 0x{start:x} over sanity-check size, not scanning"
)
continue
Expand Down

0 comments on commit 09fa859

Please sign in to comment.