What changed
- Separate session, raw, and structured readiness so ready no longer implies symbol-backed parsing.
- Detect LiME images as Linux, extract the kernel banner through fast raw search, and return actionable ISF guidance.
- Add symbols_root and isf_path inputs for Volatility symbol discovery.
- Route Linux process trees to linux.pslist and command history to linux.bash.
- Add aliases for Linux page-cache, hidden-module, module-list, and socket plugins.
- Prevent Linux or unknown images from falling through to Windows-only helpers.
- Preserve raw search/readraw when structured symbols are unavailable.
- Keep the Rust memoxide engine unchanged; this release updates the Python integration and routing layer.
Validation
- uv run pytest: 37 passed, 1 opt-in ISF integration test skipped.
Linux symbols
Structure-aware Linux plugins require a matching user-supplied ISF. Version 1.3.0 reports the exact banner and suggested ISF filename but does not automatically download or generate large symbol packages.