This plugin subclasses linux_pslist so it enumerates processes in the same way as described above. $ python vol.py -f ~/Desktop/Linux/ubuntu.lime -profile=LinuxUbuntu1204圆4 linux_pslist If the DTB column is blank, the item is likely a kernel thread.
This plugin prints the list of active processes starting from the init_task symbol and walking the task_struct->tasks linked list.
0 kommentar(er)
