|
|
|
|
|
by dr_zoidberg
3540 days ago
|
|
We tested last week, distorm3 and yara bindings for python are the big things that just didn't work (yet again) with our test case (the volatility memory forensics framework). We got them installed with pip, but they just didn work. Volatility still runs without them, it just complains a bit. Also, startup time of volatility exploded for no apparent reason (4 seconds CPython vs 12 seconds PyPy, latest 2.7 branch). Real analysis time was indeed faster (~30 seconds CPython vs ~15 seconds PyPy), but half the plugins won't work. Plus, in the end (startup+analysis), both CPython and PyPy got close results (though arguably PyPy was some about 15% faster). |
|