Someone wrote in ![[info]](http://l-stat.livejournal.com/img/userinfo.gif){kind=small} jessekornblum, |
Problem Using Suspicious
When I place the suspicious.py in volatlity's memory_plugins folder and then type 'python volatility', I get the following error.
Traceback (most recent call last):
File "volatility", line 219, in
main()
File "volatility", line 201, in main
MemoryRegistry.Init()
File "C:\Documents and Settings\User\My Documents\Volatility-1.3_Beta\forensics\r
OBJECT_CLASSES = VolatilityObjectRegistry(object2.Object)
File "C:\Documents and Settings\User\My Documents\Volatility-1.3_Beta\forensics\r
raise Exception("Object %s has already been defined by %s" % (obj,self.objects[obj]))
Exception: Object _EPROCESS has already been defined by
When I place the suspicious.py in volatlity's memory_plugins folder and then type 'python volatility', I get the following error.
Traceback (most recent call last):
File "volatility", line 219, in
main()
File "volatility", line 201, in main
MemoryRegistry.Init()
File "C:\Documents and Settings\User\My Documents\Volatility-1.3_Beta\forensics\r
OBJECT_CLASSES = VolatilityObjectRegistry(object2.Object)
File "C:\Documents and Settings\User\My Documents\Volatility-1.3_Beta\forensics\r
raise Exception("Object %s has already been defined by %s" % (obj,self.objects[obj]))
Exception: Object _EPROCESS has already been defined by
[Error: Irreparable invalid markup ('<class 'example3._eprocess'>') in entry. Owner must fix manually. Raw contents below.]
When I place the suspicious.py in volatlity's memory_plugins folder and then type 'python volatility', I get the following error.
Traceback (most recent call last):
File "volatility", line 219, in <module>
main()
File "volatility", line 201, in main
MemoryRegistry.Init()
File "C:\Documents and Settings\User\My Documents\Volatility-1.3_Beta\forensics\registry.py", line 269, in Init
OBJECT_CLASSES = VolatilityObjectRegistry(object2.Object)
File "C:\Documents and Settings\User\My Documents\Volatility-1.3_Beta\forensics\registry.py", line 244, in __init__
raise Exception("Object %s has already been defined by %s" % (obj,self.objects[obj]))
Exception: Object _EPROCESS has already been defined by <class 'example3._EPROCESS'>
How can I correct this? Thanks.
Traceback (most recent call last):
File "volatility", line 219, in <module>
main()
File "volatility", line 201, in main
MemoryRegistry.Init()
File "C:\Documents and Settings\User\My Documents\Volatility-1.3_Beta\forensics\registry.py", line 269, in Init
OBJECT_CLASSES = VolatilityObjectRegistry(object2.Object)
File "C:\Documents and Settings\User\My Documents\Volatility-1.3_Beta\forensics\registry.py", line 244, in __init__
raise Exception("Object %s has already been defined by %s" % (obj,self.objects[obj]))
Exception: Object _EPROCESS has already been defined by <class 'example3._EPROCESS'>
How can I correct this? Thanks.
