{"action":"created","issue":{"url":"https://api.github.com/repos/tklengyel/drakvuf/issues/36","labels_url":"https://api.github.com/repos/tklengyel/drakvuf/issues/36/labels{/name}","comments_url":"https://api.github.com/repos/tklengyel/drakvuf/issues/36/comments","events_url":"https://api.github.com/repos/tklengyel/drakvuf/issues/36/events","html_url":"https://github.com/tklengyel/drakvuf/pull/36","id":122829001,"number":36,"title":"Created drakvuf_get_current_process API in libdrakvuf","user":{"login":"v-p-b","id":540246,"avatar_url":"https://avatars.githubusercontent.com/u/540246?v=3","gravatar_id":"","url":"https://api.github.com/users/v-p-b","html_url":"https://github.com/v-p-b","followers_url":"https://api.github.com/users/v-p-b/followers","following_url":"https://api.github.com/users/v-p-b/following{/other_user}","gists_url":"https://api.github.com/users/v-p-b/gists{/gist_id}","starred_url":"https://api.github.com/users/v-p-b/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/v-p-b/subscriptions","organizations_url":"https://api.github.com/users/v-p-b/orgs","repos_url":"https://api.github.com/users/v-p-b/repos","events_url":"https://api.github.com/users/v-p-b/events{/privacy}","received_events_url":"https://api.github.com/users/v-p-b/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":5,"created_at":"2015-12-17T21:42:14Z","updated_at":"2015-12-28T11:17:31Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/tklengyel/drakvuf/pulls/36","html_url":"https://github.com/tklengyel/drakvuf/pull/36","diff_url":"https://github.com/tklengyel/drakvuf/pull/36.diff","patch_url":"https://github.com/tklengyel/drakvuf/pull/36.patch"},"body":"I updated the `filedelete` plugin to use the new API. Please test this carefully as I didn't manage to get `filedelete` to work properly in the `master` branch so I couldn't really test the modifications comprehensively. \r\n\r\nThis is the output in case of 64-bit guest:\r\n\r\n```\r\nVolatility Foundation Volatility Framework 2.5\r\nNo suitable address space mapping found\r\nTried to open image as:\r\n MachOAddressSpace: mac: need base\r\n LimeAddressSpace: lime: need base\r\n WindowsHiberFileSpace32: No base Address Space\r\n WindowsCrashDumpSpace64BitMap: No base Address Space\r\n WindowsCrashDumpSpace64: No base Address Space\r\n HPAKAddressSpace: No base Address Space\r\n VirtualBoxCoreDumpElf64: No base Address Space\r\n VMWareMetaAddressSpace: No base Address Space\r\n VMWareAddressSpace: No base Address Space\r\n QemuCoreDumpElf: No base Address Space\r\n WindowsCrashDumpSpace32: No base Address Space\r\n AMD64PagedMemory: No base Address Space\r\n IA32PagedMemoryPae: No base Address Space\r\n IA32PagedMemory: No base Address Space\r\n OSXPmemELF: No base Address Space\r\n FileAddressSpace: Location is not of file scheme\r\n ArmAddressSpace: No base Address Space\r\n```\r\n\r\nIn case of 32-bit guests neither the `master` nor my version give results."},"comment":{"url":"https://api.github.com/repos/tklengyel/drakvuf/issues/comments/167544657","html_url":"https://github.com/tklengyel/drakvuf/pull/36#issuecomment-167544657","issue_url":"https://api.github.com/repos/tklengyel/drakvuf/issues/36","id":167544657,"user":{"login":"v-p-b","id":540246,"avatar_url":"https://avatars.githubusercontent.com/u/540246?v=3","gravatar_id":"","url":"https://api.github.com/users/v-p-b","html_url":"https://github.com/v-p-b","followers_url":"https://api.github.com/users/v-p-b/followers","following_url":"https://api.github.com/users/v-p-b/following{/other_user}","gists_url":"https://api.github.com/users/v-p-b/gists{/gist_id}","starred_url":"https://api.github.com/users/v-p-b/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/v-p-b/subscriptions","organizations_url":"https://api.github.com/users/v-p-b/orgs","repos_url":"https://api.github.com/users/v-p-b/repos","events_url":"https://api.github.com/users/v-p-b/events{/privacy}","received_events_url":"https://api.github.com/users/v-p-b/received_events","type":"User","site_admin":false},"created_at":"2015-12-28T11:17:31Z","updated_at":"2015-12-28T11:17:31Z","body":"I fixed my Volatility installation, FILEDELETE seems to work fine but I1ll run some more tests, while integrating any proposed more changes. Please note if you think the PR is ready to merge so I can squash the commits."}}