{"action":"created","issue":{"url":"https://api.github.com/repos/volatilityfoundation/community/issues/1","labels_url":"https://api.github.com/repos/volatilityfoundation/community/issues/1/labels{/name}","comments_url":"https://api.github.com/repos/volatilityfoundation/community/issues/1/comments","events_url":"https://api.github.com/repos/volatilityfoundation/community/issues/1/events","html_url":"https://github.com/volatilityfoundation/community/issues/1","id":62217562,"number":1,"title":"Third party plugins issue","user":{"login":"Arvandor","id":9610528,"avatar_url":"https://avatars.githubusercontent.com/u/9610528?v=3","gravatar_id":"","url":"https://api.github.com/users/Arvandor","html_url":"https://github.com/Arvandor","followers_url":"https://api.github.com/users/Arvandor/followers","following_url":"https://api.github.com/users/Arvandor/following{/other_user}","gists_url":"https://api.github.com/users/Arvandor/gists{/gist_id}","starred_url":"https://api.github.com/users/Arvandor/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Arvandor/subscriptions","organizations_url":"https://api.github.com/users/Arvandor/orgs","repos_url":"https://api.github.com/users/Arvandor/repos","events_url":"https://api.github.com/users/Arvandor/events{/privacy}","received_events_url":"https://api.github.com/users/Arvandor/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-03-16T21:41:43Z","updated_at":"2015-03-16T22:27:09Z","closed_at":null,"body":"I recently heard about some very cool volatility plugins like autoruns and mimikatz, just to name a couple. On my Kali Linux machine I put these plugins into the /usr/share/volatility/contrib/plugins folder, and then have tried running the pulgins with vol.py -f file --profile=profile --plugins=contrib/plugins autoruns\r\nBut it just gives me the line \"You must specify something to do.\" I've tried listing the full path for --plugins=/usr/share/volatility/contrib/plugins. I've tried listing the .py in the plugin name (autoruns.py,) and I keep getting the same issue. I've googled around to see if I could find something about some Kali specific directory or oddity in the volatility install, but I haven't found any useful information.\r\nAny advice on what to try or what I'm doing wrong will be greatly appreciated!\r\n-Thanks"},"comment":{"url":"https://api.github.com/repos/volatilityfoundation/community/issues/comments/81966549","html_url":"https://github.com/volatilityfoundation/community/issues/1#issuecomment-81966549","issue_url":"https://api.github.com/repos/volatilityfoundation/community/issues/1","id":81966549,"user":{"login":"gleeda","id":176825,"avatar_url":"https://avatars.githubusercontent.com/u/176825?v=3","gravatar_id":"","url":"https://api.github.com/users/gleeda","html_url":"https://github.com/gleeda","followers_url":"https://api.github.com/users/gleeda/followers","following_url":"https://api.github.com/users/gleeda/following{/other_user}","gists_url":"https://api.github.com/users/gleeda/gists{/gist_id}","starred_url":"https://api.github.com/users/gleeda/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gleeda/subscriptions","organizations_url":"https://api.github.com/users/gleeda/orgs","repos_url":"https://api.github.com/users/gleeda/repos","events_url":"https://api.github.com/users/gleeda/events{/privacy}","received_events_url":"https://api.github.com/users/gleeda/received_events","type":"User","site_admin":false},"created_at":"2015-03-16T22:27:09Z","updated_at":"2015-03-16T22:27:09Z","body":"Yes, you need to install the `construct` library.  It's mentioned in the dependencies here http://blog.digital-forensics.it/2014/03/mimikatz-offline-addendum_28.html\r\n\r\nyou can find info about it here: https://pypi.python.org/pypi/construct"}}