Skip to content

Problems with the process hierarchy with volatility  #10

Description

@jholgui

Volatility has problemas with the hierarchy of smss.exe:

Session 0
smss.exe

smss.exe (This process does not usually exist because it dies)

csrss.exe
winint

Session 1
smss.exe

smss.exe (This process does not usually exist because it dies)

winlogon
csrrss.exe

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

Input_VolatilityVolatility ModulebugSomething isn't working

Projects

No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions