Windows: Update the required framework version for plugins outputting…

… LayerData
volatilityfoundation · Feb 15, 2025 · 07b0503 · 07b0503
1 parent fcbc4fa
commit 07b0503
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 4 deletions.
diff --git a/volatility3/framework/plugins/windows/malfind.py b/volatility3/framework/plugins/windows/malfind.py
@@ -17,7 +17,7 @@
 class Malfind(interfaces.plugins.PluginInterface):
     """Lists process memory ranges that potentially contain injected code."""
 
-    _required_framework_version = (2, 4, 0)
+    _required_framework_version = (2, 22, 0)
 
     @classmethod
     def get_requirements(cls):

diff --git a/volatility3/framework/plugins/windows/mbrscan.py b/volatility3/framework/plugins/windows/mbrscan.py
@@ -20,7 +20,7 @@
 class MBRScan(interfaces.plugins.PluginInterface):
     """Scans for and parses potential Master Boot Records (MBRs)"""
 
-    _required_framework_version = (2, 0, 1)
+    _required_framework_version = (2, 22, 0)
     _version = (1, 0, 0)
 
     @classmethod

diff --git a/volatility3/framework/plugins/windows/mftscan.py b/volatility3/framework/plugins/windows/mftscan.py
@@ -326,7 +326,7 @@ def run(self):
 class ADS(interfaces.plugins.PluginInterface):
     """Scans for Alternate Data Stream"""
 
-    _required_framework_version = (2, 7, 0)
+    _required_framework_version = (2, 22, 0)
 
     _version = (1, 0, 1)
 
@@ -396,7 +396,7 @@ def run(self):
 class ResidentData(interfaces.plugins.PluginInterface):
     """Scans for MFT Records with Resident Data"""
 
-    _required_framework_version = (2, 7, 0)
+    _required_framework_version = (2, 22, 0)
 
     _version = (1, 0, 1)