volatilityfoundation / volatilityfoundation/volatility3
Support to run against multiple memory images
@ikelos is already working on this.
Since Jan 25, 2021.
- Dominant language
- Python
- Stars
- 4.4k
- Forks
- 705
- Avg merge
- 1d 10h
- Merged PRs (30d)
- 3
Description
Is your feature request related to a problem? Please describe.
It would be useful to run the same plugin against multiple memory images and have the output one after the other. (This, in particular, for throwing a number of images at the automagic and having error messages bunched up, for example for finding the windows PDB signatures needed for a number of images).
Describe the solution you'd like
Allow the CLI to accept multiple different memory images and run the chosen plugin against each of them one after the other.
Describe alternatives you've considered
Writing bash/powershell scripting to repeatedly re-run volatility, which would work but is cumbersome and requires a separate script.
Additional information
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.