Merge pull request #1299 from volatilityfoundation/1298-printkey-outp…

…ut-confusing-when-key-not-found #1298 - include hive name in key path
volatilityfoundation · Oct 7, 2024 · d1c5fc2 · d1c5fc2
2 parents 64d55bf + 996875c
commit d1c5fc2
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/volatility3/framework/plugins/windows/registry/printkey.py b/volatility3/framework/plugins/windows/registry/printkey.py
@@ -20,7 +20,7 @@ class PrintKey(interfaces.plugins.PluginInterface):
     """Lists the registry keys under a hive or specific key value."""
 
     _required_framework_version = (2, 0, 0)
-    _version = (1, 0, 0)
+    _version = (1, 1, 0)
 
     @classmethod
     def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:
@@ -282,7 +282,7 @@ def _registry_walker(
                         renderers.UnreadableValue(),
                         format_hints.Hex(hive.hive_offset),
                         "Key",
-                        "?\\" + (key or ""),
+                        f"{hive.get_name()}\\" + (key or ""),
                         renderers.UnreadableValue(),
                         renderers.UnreadableValue(),
                         renderers.UnreadableValue(),