Merge pull request #1863 from volatilityfoundation/malfind_warning

ikelos · web-flow · commit 385192acd0ed · 2025-07-01T00:59:18.000+01:00
Change warning to debug to not break plugin output and to conform to …
diff --git a/volatility3/framework/plugins/windows/malware/malfind.py b/volatility3/framework/plugins/windows/malware/malfind.py
@@ -173,7 +173,7 @@ def list_injection_sites(
 
                 if dirty_page is not None:
                     # Useful information to investigate the page content with volshell afterwards.
-                    vollog.warning(
+                    vollog.debug(
                         f"[proc_id {proc_id}] Found suspicious DIRTY + {protection_string} page at {hex(dirty_page)}",
                     )
                 start = vad.get_start()

Original file line number	Diff line number	Diff line change
`@@ -173,7 +173,7 @@ def list_injection_sites(`
`173`	`173`
`174`	`174`	`if dirty_page is not None:`
`175`	`175`	`# Useful information to investigate the page content with volshell afterwards.`
`176`		`- vollog.warning(`
	`176`	`+ vollog.debug(`
`177`	`177`	`f"[proc_id {proc_id}] Found suspicious DIRTY + {protection_string} page at {hex(dirty_page)}",`
`178`	`178`	`)`
`179`	`179`	`start = vad.get_start()`