diff --git a/volatility3/framework/plugins/windows/netscan.py b/volatility3/framework/plugins/windows/netscan.py
index fa422e103d..685d2b18ca 100644
--- a/volatility3/framework/plugins/windows/netscan.py
+++ b/volatility3/framework/plugins/windows/netscan.py
@@ -105,7 +105,14 @@ def create_netscan_constraints(
             ),
         ]
 
-        if symbol_table.startswith("netscan-win10-20348"):
+        if symbol_table.startswith(
+            (
+                "netscan-win10-20348",
+                "netscan-win10-22000",
+                "netscan-win10-22621",
+                "netscan-win10-26100",
+            )
+        ):
             vollog.debug("Adding additional pool constraint for `TTcb` tags")
             constraints.append(
                 poolscanner.PoolConstraint(
@@ -234,6 +241,16 @@ def determine_tcpip_version(
                 (10, 0, 18363, 0): "netscan-win10-18363-x64",
                 (10, 0, 19041, 0): "netscan-win10-19041-x64",
                 (10, 0, 20348, 0): "netscan-win10-20348-x64",
+                # Windows 11 21H2 (build 22000): _TCP_ENDPOINT State/ports and Owner moved
+                (10, 0, 22000, 0): "netscan-win10-22000-x64",
+                # Windows 11 22H2 / 23H2 (build 22621): _TCP_ENDPOINT.Owner and CreateTime moved
+                (10, 0, 22621, 0): "netscan-win10-22621-x64",
+                # Windows 11 24H2 and later (build 26100): the objects start 8 bytes after the
+                # pool body (see pool_object_offset()) and _TCP_ENDPOINT changed. The original
+                # 26100.1742 has Owner/CreateTime 8 bytes before the serviced builds (26100.6584,
+                # 28000.1340); it is picked when tcpip.sys's FileVersion can be read
+                (10, 0, 26100, 0): "netscan-win10-26100-x64",
+                (10, 0, 26100, 1742): "netscan-win10-26100-1742-x64",
             }
 
         # we do not need to check for tcpip's specific FileVersion in every case
@@ -377,13 +394,54 @@ def scan(
         """
 
         constraints = cls.create_netscan_constraints(context, netscan_symbol_table)
+        object_offset = cls.pool_object_offset(context, kernel_module_name)
+        if object_offset:
+            vollog.debug(
+                f"Network objects start {object_offset} bytes after the pool body on this build"
+            )
 
         for result in poolscanner.PoolScanner.generate_pool_scan(
             context, kernel_module_name, constraints
         ):
             _constraint, mem_object, _header = result
+            if object_offset:
+                mem_object = context.object(
+                    mem_object.vol.type_name,
+                    layer_name=mem_object.vol.layer_name,
+                    offset=mem_object.vol.offset + object_offset,
+                )
             yield mem_object
 
+    @classmethod
+    def pool_object_offset(
+        cls, context: interfaces.context.ContextInterface, kernel_module_name: str
+    ) -> int:
+        """Offset of the network object inside its pool allocation.
+
+        On Windows 11 24H2 and later (build 26100) the _TCP_LISTENER, _TCP_ENDPOINT and
+        _UDP_ENDPOINT objects start 8 bytes after the pool body (the first 8 bytes of the
+        allocation are not part of the object), so every field would be read 8 bytes too
+        early and no object would validate. windows.netstat, which reaches the same objects
+        through the partition table, reports them at that +8 address.
+
+        Args:
+            context: The context to retrieve required elements (layers, symbol tables) from
+            kernel_module_name: The name of the module for the kernel
+
+        Returns:
+            The number of bytes between the pool body and the object (0 before build 26100).
+        """
+        kuser = info.Info.get_kuser_structure(context, kernel_module_name)
+        vers = info.Info.get_version_structure(context, kernel_module_name)
+        try:
+            if int(kuser.NtMajorVersion) >= 10 and int(vers.MinorVersion) >= 26100:
+                return 8
+        except ValueError:
+            # The version fields are unreadable (smeared or paged out): keep the
+            # historical layout, where the object starts at the pool body
+            pass
+        return 0
+
     def _generator(self, show_corrupt_results: Optional[bool] = None):
         """Generates the network objects for use in rendering."""
 
diff --git a/volatility3/framework/symbols/windows/netscan/netscan-win10-22000-x64.json b/volatility3/framework/symbols/windows/netscan/netscan-win10-22000-x64.json
new file mode 100644
index 0000000000..4c2e46f89e
--- /dev/null
+++ b/volatility3/framework/symbols/windows/netscan/netscan-win10-22000-x64.json
@@ -0,0 +1,577 @@
+{
+  "base_types": {
+    "unsigned long": {
+      "kind": "int",
+      "size": 4,
+      "signed": false,
+      "endian": "little"
+    },
+    "unsigned char": {
+      "kind": "char",
+      "size": 1,
+      "signed": false,
+      "endian": "little"
+    },
+    "pointer": {
+      "kind": "int",
+      "size": 8,
+      "signed": false,
+      "endian": "little"
+    },
+    "unsigned int": {
+      "kind": "int",
+      "size": 4,
+      "signed": false,
+      "endian": "little"
+    },
+    "unsigned short": {
+      "kind": "int",
+      "size": 2,
+      "signed": false,
+      "endian": "little"
+    },
+    "unsigned be short": {
+      "kind": "int",
+      "size": 2,
+      "signed": false,
+      "endian": "big"
+    },
+    "long long": {
+      "endian": "little",
+      "kind": "int",
+      "signed": true,
+      "size": 8
+    },
+    "long": {
+      "kind": "int",
+      "size": 4,
+      "signed": false,
+      "endian": "little"
+    }
+  },
+  "symbols": {},
+  "user_types": {
+    "_UDP_ENDPOINT": {
+      "fields": {
+        "Owner": {
+          "offset": 40,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "nt_symbols!_EPROCESS"
+            }
+          }
+        },
+        "CreateTime": {
+          "offset": 88,
+          "type": {
+            "kind": "union",
+            "name": "_LARGE_INTEGER"
+          }
+        },
+        "Next": {
+          "offset": 112,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_UDP_ENDPOINT"
+            }
+          }
+        },
+        "LocalAddr": {
+          "offset": 168,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_LOCAL_ADDRESS_WIN10_UDP"
+            }
+          }
+        },
+        "InetAF": {
+          "offset": 32,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_INETAF"
+            }
+          }
+        },
+        "Port": {
+          "offset": 160,
+          "type": {
+            "kind": "base",
+            "name": "unsigned be short"
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 168
+    },
+    "_TCP_LISTENER": {
+      "fields": {
+        "Owner": {
+          "offset": 48,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "nt_symbols!_EPROCESS"
+            }
+          }
+        },
+        "CreateTime": {
+          "offset": 64,
+          "type": {
+            "kind": "union",
+            "name": "_LARGE_INTEGER"
+          }
+        },
+        "LocalAddr": {
+          "offset": 96,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_LOCAL_ADDRESS"
+            }
+          }
+        },
+        "InetAF": {
+          "offset": 40,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_INETAF"
+            }
+          }
+        },
+        "Next": {
+          "offset": 120,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_TCP_LISTENER"
+            }
+          }
+        },
+        "Port": {
+          "offset": 114,
+          "type": {
+            "kind": "base",
+            "name": "unsigned be short"
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 128
+    },
+    "_TCP_ENDPOINT": {
+      "fields": {
+        "Owner": {
+          "offset": 760,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "nt_symbols!_EPROCESS"
+            }
+          }
+        },
+        "CreateTime": {
+          "offset": 776,
+          "type": {
+            "kind": "union",
+            "name": "_LARGE_INTEGER"
+          }
+        },
+        "AddrInfo": {
+          "offset": 24,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_ADDRINFO"
+            }
+          }
+        },
+        "ListEntry": {
+          "offset": 40,
+          "type": {
+            "kind": "union",
+            "name": "nt_symbols!_LIST_ENTRY"
+          }
+        },
+        "InetAF": {
+          "offset": 16,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_INETAF"
+            }
+          }
+        },
+        "LocalPort": {
+          "offset": 116,
+          "type": {
+            "kind": "base",
+            "name": "unsigned be short"
+          }
+        },
+        "RemotePort": {
+          "offset": 118,
+          "type": {
+            "kind": "base",
+            "name": "unsigned be short"
+          }
+        },
+        "State": {
+          "offset": 112,
+          "type": {
+            "kind": "enum",
+            "name": "TCPStateEnum"
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 784
+    },
+    "_LOCAL_ADDRESS": {
+      "fields": {
+        "pData": {
+          "offset": 16,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "pointer",
+              "subtype": {
+                "kind": "struct",
+                "name": "_IN_ADDR"
+              }
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 20
+    },
+    "_LOCAL_ADDRESS_WIN10_UDP": {
+      "fields": {
+        "pData": {
+          "offset": 0,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_IN_ADDR"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 4
+    },
+    "_ADDRINFO": {
+      "fields": {
+        "Local": {
+          "offset": 0,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_LOCAL_ADDRESS"
+            }
+          }
+        },
+        "Remote": {
+          "offset": 16,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_IN_ADDR"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 4
+    },
+    "_IN_ADDR": {
+      "fields": {
+        "addr4": {
+          "offset": 0,
+          "type": {
+            "count": 4,
+            "subtype": {
+              "kind": "base",
+              "name": "unsigned char"
+            },
+            "kind": "array"
+          }
+        },
+        "addr6": {
+          "offset": 0,
+          "type": {
+            "count": 16,
+            "subtype": {
+              "kind": "base",
+              "name": "unsigned char"
+            },
+            "kind": "array"
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 6
+    },
+    "_INETAF": {
+      "fields": {
+        "AddressFamily": {
+          "offset": 24,
+          "type": {
+            "kind": "base",
+            "name": "unsigned short"
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 26
+    },
+    "_LARGE_INTEGER": {
+      "fields": {
+        "HighPart": {
+          "offset": 4,
+          "type": {
+            "kind": "base",
+            "name": "long"
+          }
+        },
+        "LowPart": {
+          "offset": 0,
+          "type": {
+            "kind": "base",
+            "name": "unsigned long"
+          }
+        },
+        "QuadPart": {
+          "offset": 0,
+          "type": {
+            "kind": "base",
+            "name": "long long"
+          }
+        },
+        "u": {
+          "offset": 0,
+          "type": {
+            "kind": "struct",
+            "name": "__unnamed_2"
+          }
+        }
+      },
+      "kind": "union",
+      "size": 8
+    },
+    "_INET_COMPARTMENT_SET": {
+      "fields": {
+        "InetCompartment": {
+          "offset": 328,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_INET_COMPARTMENT"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 384
+    },
+    "_INET_COMPARTMENT": {
+      "fields": {
+        "ProtocolCompartment": {
+          "offset": 32,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_PROTOCOL_COMPARTMENT"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 48
+    },
+    "_PROTOCOL_COMPARTMENT": {
+      "fields": {
+        "PortPool": {
+          "offset": 0,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_INET_PORT_POOL"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 16
+    },
+    "_PORT_ASSIGNMENT_ENTRY": {
+      "fields": {
+        "Entry": {
+          "offset": 16,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "base",
+              "name": "void"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 32
+    },
+    "_PORT_ASSIGNMENT_LIST": {
+      "fields": {
+        "Assignments": {
+          "offset": 0,
+          "type": {
+            "count": 256,
+            "kind": "array",
+            "subtype": {
+              "kind": "struct",
+              "name": "_PORT_ASSIGNMENT_ENTRY"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 6144
+    },
+    "_PORT_ASSIGNMENT": {
+      "fields": {
+        "InPaBigPoolBase": {
+          "offset": 24,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_PORT_ASSIGNMENT_LIST"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 32
+    },
+    "_INET_PORT_POOL": {
+      "fields": {
+        "PortAssignments": {
+          "offset": 224,
+          "type": {
+            "count": 256,
+            "kind": "array",
+            "subtype": {
+              "kind": "pointer",
+              "subtype": {
+                "kind": "struct",
+                "name": "_PORT_ASSIGNMENT"
+              }
+            }
+          }
+        },
+        "PortBitMap": {
+          "offset": 208,
+          "type": {
+            "kind": "struct",
+            "name": "nt_symbols!_RTL_BITMAP"
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 11200
+    },
+    "_PARTITION": {
+      "fields": {
+        "Endpoints": {
+          "offset": 8,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "nt_symbols!_RTL_DYNAMIC_HASH_TABLE"
+            }
+          }
+        },
+        "UnknownHashTable": {
+          "offset": 16,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "nt_symbols!_RTL_DYNAMIC_HASH_TABLE"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 192
+    },
+    "_PARTITION_TABLE": {
+      "fields": {
+        "Partitions": {
+          "offset": 0,
+          "type": {
+            "count": 1,
+            "kind": "array",
+            "subtype": {
+              "kind": "struct",
+              "name": "_PARTITION"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 128
+    }
+  },
+  "enums": {
+    "TCPStateEnum": {
+      "base": "long",
+      "constants": {
+        "CLOSED": 0,
+        "LISTENING": 1,
+        "SYN_SENT": 2,
+        "SYN_RCVD": 3,
+        "ESTABLISHED": 4,
+        "FIN_WAIT1": 5,
+        "FIN_WAIT2": 6,
+        "CLOSE_WAIT": 7,
+        "CLOSING": 8,
+        "LAST_ACK": 9,
+        "TIME_WAIT": 12,
+        "DELETE_TCB": 13
+      },
+      "size": 4
+    }
+  },
+  "metadata": {
+    "producer": {
+      "version": "0.0.1",
+      "name": "Ozer0x777-by-hand",
+      "datetime": "2026-10-17T07:00:00"
+    },
+    "format": "6.0.0"
+  }
+}
diff --git a/volatility3/framework/symbols/windows/netscan/netscan-win10-22621-x64.json b/volatility3/framework/symbols/windows/netscan/netscan-win10-22621-x64.json
new file mode 100644
index 0000000000..3f29762ca2
--- /dev/null
+++ b/volatility3/framework/symbols/windows/netscan/netscan-win10-22621-x64.json
@@ -0,0 +1,577 @@
+{
+  "base_types": {
+    "unsigned long": {
+      "kind": "int",
+      "size": 4,
+      "signed": false,
+      "endian": "little"
+    },
+    "unsigned char": {
+      "kind": "char",
+      "size": 1,
+      "signed": false,
+      "endian": "little"
+    },
+    "pointer": {
+      "kind": "int",
+      "size": 8,
+      "signed": false,
+      "endian": "little"
+    },
+    "unsigned int": {
+      "kind": "int",
+      "size": 4,
+      "signed": false,
+      "endian": "little"
+    },
+    "unsigned short": {
+      "kind": "int",
+      "size": 2,
+      "signed": false,
+      "endian": "little"
+    },
+    "unsigned be short": {
+      "kind": "int",
+      "size": 2,
+      "signed": false,
+      "endian": "big"
+    },
+    "long long": {
+      "endian": "little",
+      "kind": "int",
+      "signed": true,
+      "size": 8
+    },
+    "long": {
+      "kind": "int",
+      "size": 4,
+      "signed": false,
+      "endian": "little"
+    }
+  },
+  "symbols": {},
+  "user_types": {
+    "_UDP_ENDPOINT": {
+      "fields": {
+        "Owner": {
+          "offset": 40,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "nt_symbols!_EPROCESS"
+            }
+          }
+        },
+        "CreateTime": {
+          "offset": 88,
+          "type": {
+            "kind": "union",
+            "name": "_LARGE_INTEGER"
+          }
+        },
+        "Next": {
+          "offset": 112,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_UDP_ENDPOINT"
+            }
+          }
+        },
+        "LocalAddr": {
+          "offset": 168,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_LOCAL_ADDRESS_WIN10_UDP"
+            }
+          }
+        },
+        "InetAF": {
+          "offset": 32,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_INETAF"
+            }
+          }
+        },
+        "Port": {
+          "offset": 160,
+          "type": {
+            "kind": "base",
+            "name": "unsigned be short"
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 168
+    },
+    "_TCP_LISTENER": {
+      "fields": {
+        "Owner": {
+          "offset": 48,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "nt_symbols!_EPROCESS"
+            }
+          }
+        },
+        "CreateTime": {
+          "offset": 64,
+          "type": {
+            "kind": "union",
+            "name": "_LARGE_INTEGER"
+          }
+        },
+        "LocalAddr": {
+          "offset": 96,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_LOCAL_ADDRESS"
+            }
+          }
+        },
+        "InetAF": {
+          "offset": 40,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_INETAF"
+            }
+          }
+        },
+        "Next": {
+          "offset": 120,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_TCP_LISTENER"
+            }
+          }
+        },
+        "Port": {
+          "offset": 114,
+          "type": {
+            "kind": "base",
+            "name": "unsigned be short"
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 128
+    },
+    "_TCP_ENDPOINT": {
+      "fields": {
+        "Owner": {
+          "offset": 856,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "nt_symbols!_EPROCESS"
+            }
+          }
+        },
+        "CreateTime": {
+          "offset": 872,
+          "type": {
+            "kind": "union",
+            "name": "_LARGE_INTEGER"
+          }
+        },
+        "AddrInfo": {
+          "offset": 24,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_ADDRINFO"
+            }
+          }
+        },
+        "ListEntry": {
+          "offset": 40,
+          "type": {
+            "kind": "union",
+            "name": "nt_symbols!_LIST_ENTRY"
+          }
+        },
+        "InetAF": {
+          "offset": 16,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_INETAF"
+            }
+          }
+        },
+        "LocalPort": {
+          "offset": 112,
+          "type": {
+            "kind": "base",
+            "name": "unsigned be short"
+          }
+        },
+        "RemotePort": {
+          "offset": 114,
+          "type": {
+            "kind": "base",
+            "name": "unsigned be short"
+          }
+        },
+        "State": {
+          "offset": 108,
+          "type": {
+            "kind": "enum",
+            "name": "TCPStateEnum"
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 880
+    },
+    "_LOCAL_ADDRESS": {
+      "fields": {
+        "pData": {
+          "offset": 16,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "pointer",
+              "subtype": {
+                "kind": "struct",
+                "name": "_IN_ADDR"
+              }
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 20
+    },
+    "_LOCAL_ADDRESS_WIN10_UDP": {
+      "fields": {
+        "pData": {
+          "offset": 0,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_IN_ADDR"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 4
+    },
+    "_ADDRINFO": {
+      "fields": {
+        "Local": {
+          "offset": 0,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_LOCAL_ADDRESS"
+            }
+          }
+        },
+        "Remote": {
+          "offset": 16,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_IN_ADDR"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 4
+    },
+    "_IN_ADDR": {
+      "fields": {
+        "addr4": {
+          "offset": 0,
+          "type": {
+            "count": 4,
+            "subtype": {
+              "kind": "base",
+              "name": "unsigned char"
+            },
+            "kind": "array"
+          }
+        },
+        "addr6": {
+          "offset": 0,
+          "type": {
+            "count": 16,
+            "subtype": {
+              "kind": "base",
+              "name": "unsigned char"
+            },
+            "kind": "array"
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 6
+    },
+    "_INETAF": {
+      "fields": {
+        "AddressFamily": {
+          "offset": 24,
+          "type": {
+            "kind": "base",
+            "name": "unsigned short"
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 26
+    },
+    "_LARGE_INTEGER": {
+      "fields": {
+        "HighPart": {
+          "offset": 4,
+          "type": {
+            "kind": "base",
+            "name": "long"
+          }
+        },
+        "LowPart": {
+          "offset": 0,
+          "type": {
+            "kind": "base",
+            "name": "unsigned long"
+          }
+        },
+        "QuadPart": {
+          "offset": 0,
+          "type": {
+            "kind": "base",
+            "name": "long long"
+          }
+        },
+        "u": {
+          "offset": 0,
+          "type": {
+            "kind": "struct",
+            "name": "__unnamed_2"
+          }
+        }
+      },
+      "kind": "union",
+      "size": 8
+    },
+    "_INET_COMPARTMENT_SET": {
+      "fields": {
+        "InetCompartment": {
+          "offset": 328,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_INET_COMPARTMENT"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 384
+    },
+    "_INET_COMPARTMENT": {
+      "fields": {
+        "ProtocolCompartment": {
+          "offset": 32,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_PROTOCOL_COMPARTMENT"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 48
+    },
+    "_PROTOCOL_COMPARTMENT": {
+      "fields": {
+        "PortPool": {
+          "offset": 0,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_INET_PORT_POOL"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 16
+    },
+    "_PORT_ASSIGNMENT_ENTRY": {
+      "fields": {
+        "Entry": {
+          "offset": 16,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "base",
+              "name": "void"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 32
+    },
+    "_PORT_ASSIGNMENT_LIST": {
+      "fields": {
+        "Assignments": {
+          "offset": 0,
+          "type": {
+            "count": 256,
+            "kind": "array",
+            "subtype": {
+              "kind": "struct",
+              "name": "_PORT_ASSIGNMENT_ENTRY"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 6144
+    },
+    "_PORT_ASSIGNMENT": {
+      "fields": {
+        "InPaBigPoolBase": {
+          "offset": 24,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_PORT_ASSIGNMENT_LIST"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 32
+    },
+    "_INET_PORT_POOL": {
+      "fields": {
+        "PortAssignments": {
+          "offset": 224,
+          "type": {
+            "count": 256,
+            "kind": "array",
+            "subtype": {
+              "kind": "pointer",
+              "subtype": {
+                "kind": "struct",
+                "name": "_PORT_ASSIGNMENT"
+              }
+            }
+          }
+        },
+        "PortBitMap": {
+          "offset": 208,
+          "type": {
+            "kind": "struct",
+            "name": "nt_symbols!_RTL_BITMAP"
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 11200
+    },
+    "_PARTITION": {
+      "fields": {
+        "Endpoints": {
+          "offset": 8,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "nt_symbols!_RTL_DYNAMIC_HASH_TABLE"
+            }
+          }
+        },
+        "UnknownHashTable": {
+          "offset": 16,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "nt_symbols!_RTL_DYNAMIC_HASH_TABLE"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 192
+    },
+    "_PARTITION_TABLE": {
+      "fields": {
+        "Partitions": {
+          "offset": 0,
+          "type": {
+            "count": 1,
+            "kind": "array",
+            "subtype": {
+              "kind": "struct",
+              "name": "_PARTITION"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 128
+    }
+  },
+  "enums": {
+    "TCPStateEnum": {
+      "base": "long",
+      "constants": {
+        "CLOSED": 0,
+        "LISTENING": 1,
+        "SYN_SENT": 2,
+        "SYN_RCVD": 3,
+        "ESTABLISHED": 4,
+        "FIN_WAIT1": 5,
+        "FIN_WAIT2": 6,
+        "CLOSE_WAIT": 7,
+        "CLOSING": 8,
+        "LAST_ACK": 9,
+        "TIME_WAIT": 12,
+        "DELETE_TCB": 13
+      },
+      "size": 4
+    }
+  },
+  "metadata": {
+    "producer": {
+      "version": "0.0.1",
+      "name": "Ozer0x777-by-hand",
+      "datetime": "2026-10-17T06:00:00"
+    },
+    "format": "6.0.0"
+  }
+}
diff --git a/volatility3/framework/symbols/windows/netscan/netscan-win10-26100-1742-x64.json b/volatility3/framework/symbols/windows/netscan/netscan-win10-26100-1742-x64.json
new file mode 100644
index 0000000000..f65a66d11b
--- /dev/null
+++ b/volatility3/framework/symbols/windows/netscan/netscan-win10-26100-1742-x64.json
@@ -0,0 +1,577 @@
+{
+  "base_types": {
+    "unsigned long": {
+      "kind": "int",
+      "size": 4,
+      "signed": false,
+      "endian": "little"
+    },
+    "unsigned char": {
+      "kind": "char",
+      "size": 1,
+      "signed": false,
+      "endian": "little"
+    },
+    "pointer": {
+      "kind": "int",
+      "size": 8,
+      "signed": false,
+      "endian": "little"
+    },
+    "unsigned int": {
+      "kind": "int",
+      "size": 4,
+      "signed": false,
+      "endian": "little"
+    },
+    "unsigned short": {
+      "kind": "int",
+      "size": 2,
+      "signed": false,
+      "endian": "little"
+    },
+    "unsigned be short": {
+      "kind": "int",
+      "size": 2,
+      "signed": false,
+      "endian": "big"
+    },
+    "long long": {
+      "endian": "little",
+      "kind": "int",
+      "signed": true,
+      "size": 8
+    },
+    "long": {
+      "kind": "int",
+      "size": 4,
+      "signed": false,
+      "endian": "little"
+    }
+  },
+  "symbols": {},
+  "user_types": {
+    "_UDP_ENDPOINT": {
+      "fields": {
+        "Owner": {
+          "offset": 40,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "nt_symbols!_EPROCESS"
+            }
+          }
+        },
+        "CreateTime": {
+          "offset": 88,
+          "type": {
+            "kind": "union",
+            "name": "_LARGE_INTEGER"
+          }
+        },
+        "Next": {
+          "offset": 112,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_UDP_ENDPOINT"
+            }
+          }
+        },
+        "LocalAddr": {
+          "offset": 168,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_LOCAL_ADDRESS_WIN10_UDP"
+            }
+          }
+        },
+        "InetAF": {
+          "offset": 32,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_INETAF"
+            }
+          }
+        },
+        "Port": {
+          "offset": 160,
+          "type": {
+            "kind": "base",
+            "name": "unsigned be short"
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 168
+    },
+    "_TCP_LISTENER": {
+      "fields": {
+        "Owner": {
+          "offset": 48,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "nt_symbols!_EPROCESS"
+            }
+          }
+        },
+        "CreateTime": {
+          "offset": 64,
+          "type": {
+            "kind": "union",
+            "name": "_LARGE_INTEGER"
+          }
+        },
+        "LocalAddr": {
+          "offset": 96,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_LOCAL_ADDRESS"
+            }
+          }
+        },
+        "InetAF": {
+          "offset": 40,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_INETAF"
+            }
+          }
+        },
+        "Next": {
+          "offset": 120,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_TCP_LISTENER"
+            }
+          }
+        },
+        "Port": {
+          "offset": 114,
+          "type": {
+            "kind": "base",
+            "name": "unsigned be short"
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 128
+    },
+    "_TCP_ENDPOINT": {
+      "fields": {
+        "Owner": {
+          "offset": 832,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "nt_symbols!_EPROCESS"
+            }
+          }
+        },
+        "CreateTime": {
+          "offset": 848,
+          "type": {
+            "kind": "union",
+            "name": "_LARGE_INTEGER"
+          }
+        },
+        "AddrInfo": {
+          "offset": 24,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_ADDRINFO"
+            }
+          }
+        },
+        "ListEntry": {
+          "offset": 40,
+          "type": {
+            "kind": "union",
+            "name": "nt_symbols!_LIST_ENTRY"
+          }
+        },
+        "InetAF": {
+          "offset": 16,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_INETAF"
+            }
+          }
+        },
+        "LocalPort": {
+          "offset": 108,
+          "type": {
+            "kind": "base",
+            "name": "unsigned be short"
+          }
+        },
+        "RemotePort": {
+          "offset": 110,
+          "type": {
+            "kind": "base",
+            "name": "unsigned be short"
+          }
+        },
+        "State": {
+          "offset": 104,
+          "type": {
+            "kind": "enum",
+            "name": "TCPStateEnum"
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 856
+    },
+    "_LOCAL_ADDRESS": {
+      "fields": {
+        "pData": {
+          "offset": 16,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "pointer",
+              "subtype": {
+                "kind": "struct",
+                "name": "_IN_ADDR"
+              }
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 20
+    },
+    "_LOCAL_ADDRESS_WIN10_UDP": {
+      "fields": {
+        "pData": {
+          "offset": 0,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_IN_ADDR"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 4
+    },
+    "_ADDRINFO": {
+      "fields": {
+        "Local": {
+          "offset": 0,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_LOCAL_ADDRESS"
+            }
+          }
+        },
+        "Remote": {
+          "offset": 16,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_IN_ADDR"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 4
+    },
+    "_IN_ADDR": {
+      "fields": {
+        "addr4": {
+          "offset": 0,
+          "type": {
+            "count": 4,
+            "subtype": {
+              "kind": "base",
+              "name": "unsigned char"
+            },
+            "kind": "array"
+          }
+        },
+        "addr6": {
+          "offset": 0,
+          "type": {
+            "count": 16,
+            "subtype": {
+              "kind": "base",
+              "name": "unsigned char"
+            },
+            "kind": "array"
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 6
+    },
+    "_INETAF": {
+      "fields": {
+        "AddressFamily": {
+          "offset": 24,
+          "type": {
+            "kind": "base",
+            "name": "unsigned short"
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 26
+    },
+    "_LARGE_INTEGER": {
+      "fields": {
+        "HighPart": {
+          "offset": 4,
+          "type": {
+            "kind": "base",
+            "name": "long"
+          }
+        },
+        "LowPart": {
+          "offset": 0,
+          "type": {
+            "kind": "base",
+            "name": "unsigned long"
+          }
+        },
+        "QuadPart": {
+          "offset": 0,
+          "type": {
+            "kind": "base",
+            "name": "long long"
+          }
+        },
+        "u": {
+          "offset": 0,
+          "type": {
+            "kind": "struct",
+            "name": "__unnamed_2"
+          }
+        }
+      },
+      "kind": "union",
+      "size": 8
+    },
+    "_INET_COMPARTMENT_SET": {
+      "fields": {
+        "InetCompartment": {
+          "offset": 328,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_INET_COMPARTMENT"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 384
+    },
+    "_INET_COMPARTMENT": {
+      "fields": {
+        "ProtocolCompartment": {
+          "offset": 32,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_PROTOCOL_COMPARTMENT"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 48
+    },
+    "_PROTOCOL_COMPARTMENT": {
+      "fields": {
+        "PortPool": {
+          "offset": 0,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_INET_PORT_POOL"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 16
+    },
+    "_PORT_ASSIGNMENT_ENTRY": {
+      "fields": {
+        "Entry": {
+          "offset": 16,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "base",
+              "name": "void"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 32
+    },
+    "_PORT_ASSIGNMENT_LIST": {
+      "fields": {
+        "Assignments": {
+          "offset": 0,
+          "type": {
+            "count": 256,
+            "kind": "array",
+            "subtype": {
+              "kind": "struct",
+              "name": "_PORT_ASSIGNMENT_ENTRY"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 6144
+    },
+    "_PORT_ASSIGNMENT": {
+      "fields": {
+        "InPaBigPoolBase": {
+          "offset": 24,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_PORT_ASSIGNMENT_LIST"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 32
+    },
+    "_INET_PORT_POOL": {
+      "fields": {
+        "PortAssignments": {
+          "offset": 224,
+          "type": {
+            "count": 256,
+            "kind": "array",
+            "subtype": {
+              "kind": "pointer",
+              "subtype": {
+                "kind": "struct",
+                "name": "_PORT_ASSIGNMENT"
+              }
+            }
+          }
+        },
+        "PortBitMap": {
+          "offset": 208,
+          "type": {
+            "kind": "struct",
+            "name": "nt_symbols!_RTL_BITMAP"
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 11200
+    },
+    "_PARTITION": {
+      "fields": {
+        "Endpoints": {
+          "offset": 8,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "nt_symbols!_RTL_DYNAMIC_HASH_TABLE"
+            }
+          }
+        },
+        "UnknownHashTable": {
+          "offset": 16,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "nt_symbols!_RTL_DYNAMIC_HASH_TABLE"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 192
+    },
+    "_PARTITION_TABLE": {
+      "fields": {
+        "Partitions": {
+          "offset": 0,
+          "type": {
+            "count": 1,
+            "kind": "array",
+            "subtype": {
+              "kind": "struct",
+              "name": "_PARTITION"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 128
+    }
+  },
+  "enums": {
+    "TCPStateEnum": {
+      "base": "long",
+      "constants": {
+        "CLOSED": 0,
+        "LISTENING": 1,
+        "SYN_SENT": 2,
+        "SYN_RCVD": 3,
+        "ESTABLISHED": 4,
+        "FIN_WAIT1": 5,
+        "FIN_WAIT2": 6,
+        "CLOSE_WAIT": 7,
+        "CLOSING": 8,
+        "LAST_ACK": 9,
+        "TIME_WAIT": 12,
+        "DELETE_TCB": 13
+      },
+      "size": 4
+    }
+  },
+  "metadata": {
+    "producer": {
+      "version": "0.0.1",
+      "name": "Ozer0x777-by-hand",
+      "datetime": "2026-10-17T07:00:00"
+    },
+    "format": "6.0.0"
+  }
+}
diff --git a/volatility3/framework/symbols/windows/netscan/netscan-win10-26100-x64.json b/volatility3/framework/symbols/windows/netscan/netscan-win10-26100-x64.json
new file mode 100644
index 0000000000..65e6fac8b5
--- /dev/null
+++ b/volatility3/framework/symbols/windows/netscan/netscan-win10-26100-x64.json
@@ -0,0 +1,577 @@
+{
+  "base_types": {
+    "unsigned long": {
+      "kind": "int",
+      "size": 4,
+      "signed": false,
+      "endian": "little"
+    },
+    "unsigned char": {
+      "kind": "char",
+      "size": 1,
+      "signed": false,
+      "endian": "little"
+    },
+    "pointer": {
+      "kind": "int",
+      "size": 8,
+      "signed": false,
+      "endian": "little"
+    },
+    "unsigned int": {
+      "kind": "int",
+      "size": 4,
+      "signed": false,
+      "endian": "little"
+    },
+    "unsigned short": {
+      "kind": "int",
+      "size": 2,
+      "signed": false,
+      "endian": "little"
+    },
+    "unsigned be short": {
+      "kind": "int",
+      "size": 2,
+      "signed": false,
+      "endian": "big"
+    },
+    "long long": {
+      "endian": "little",
+      "kind": "int",
+      "signed": true,
+      "size": 8
+    },
+    "long": {
+      "kind": "int",
+      "size": 4,
+      "signed": false,
+      "endian": "little"
+    }
+  },
+  "symbols": {},
+  "user_types": {
+    "_UDP_ENDPOINT": {
+      "fields": {
+        "Owner": {
+          "offset": 40,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "nt_symbols!_EPROCESS"
+            }
+          }
+        },
+        "CreateTime": {
+          "offset": 88,
+          "type": {
+            "kind": "union",
+            "name": "_LARGE_INTEGER"
+          }
+        },
+        "Next": {
+          "offset": 112,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_UDP_ENDPOINT"
+            }
+          }
+        },
+        "LocalAddr": {
+          "offset": 168,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_LOCAL_ADDRESS_WIN10_UDP"
+            }
+          }
+        },
+        "InetAF": {
+          "offset": 32,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_INETAF"
+            }
+          }
+        },
+        "Port": {
+          "offset": 160,
+          "type": {
+            "kind": "base",
+            "name": "unsigned be short"
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 168
+    },
+    "_TCP_LISTENER": {
+      "fields": {
+        "Owner": {
+          "offset": 48,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "nt_symbols!_EPROCESS"
+            }
+          }
+        },
+        "CreateTime": {
+          "offset": 64,
+          "type": {
+            "kind": "union",
+            "name": "_LARGE_INTEGER"
+          }
+        },
+        "LocalAddr": {
+          "offset": 96,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_LOCAL_ADDRESS"
+            }
+          }
+        },
+        "InetAF": {
+          "offset": 40,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_INETAF"
+            }
+          }
+        },
+        "Next": {
+          "offset": 120,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_TCP_LISTENER"
+            }
+          }
+        },
+        "Port": {
+          "offset": 114,
+          "type": {
+            "kind": "base",
+            "name": "unsigned be short"
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 128
+    },
+    "_TCP_ENDPOINT": {
+      "fields": {
+        "Owner": {
+          "offset": 840,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "nt_symbols!_EPROCESS"
+            }
+          }
+        },
+        "CreateTime": {
+          "offset": 856,
+          "type": {
+            "kind": "union",
+            "name": "_LARGE_INTEGER"
+          }
+        },
+        "AddrInfo": {
+          "offset": 24,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_ADDRINFO"
+            }
+          }
+        },
+        "ListEntry": {
+          "offset": 40,
+          "type": {
+            "kind": "union",
+            "name": "nt_symbols!_LIST_ENTRY"
+          }
+        },
+        "InetAF": {
+          "offset": 16,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_INETAF"
+            }
+          }
+        },
+        "LocalPort": {
+          "offset": 108,
+          "type": {
+            "kind": "base",
+            "name": "unsigned be short"
+          }
+        },
+        "RemotePort": {
+          "offset": 110,
+          "type": {
+            "kind": "base",
+            "name": "unsigned be short"
+          }
+        },
+        "State": {
+          "offset": 104,
+          "type": {
+            "kind": "enum",
+            "name": "TCPStateEnum"
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 864
+    },
+    "_LOCAL_ADDRESS": {
+      "fields": {
+        "pData": {
+          "offset": 16,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "pointer",
+              "subtype": {
+                "kind": "struct",
+                "name": "_IN_ADDR"
+              }
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 20
+    },
+    "_LOCAL_ADDRESS_WIN10_UDP": {
+      "fields": {
+        "pData": {
+          "offset": 0,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_IN_ADDR"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 4
+    },
+    "_ADDRINFO": {
+      "fields": {
+        "Local": {
+          "offset": 0,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_LOCAL_ADDRESS"
+            }
+          }
+        },
+        "Remote": {
+          "offset": 16,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_IN_ADDR"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 4
+    },
+    "_IN_ADDR": {
+      "fields": {
+        "addr4": {
+          "offset": 0,
+          "type": {
+            "count": 4,
+            "subtype": {
+              "kind": "base",
+              "name": "unsigned char"
+            },
+            "kind": "array"
+          }
+        },
+        "addr6": {
+          "offset": 0,
+          "type": {
+            "count": 16,
+            "subtype": {
+              "kind": "base",
+              "name": "unsigned char"
+            },
+            "kind": "array"
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 6
+    },
+    "_INETAF": {
+      "fields": {
+        "AddressFamily": {
+          "offset": 24,
+          "type": {
+            "kind": "base",
+            "name": "unsigned short"
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 26
+    },
+    "_LARGE_INTEGER": {
+      "fields": {
+        "HighPart": {
+          "offset": 4,
+          "type": {
+            "kind": "base",
+            "name": "long"
+          }
+        },
+        "LowPart": {
+          "offset": 0,
+          "type": {
+            "kind": "base",
+            "name": "unsigned long"
+          }
+        },
+        "QuadPart": {
+          "offset": 0,
+          "type": {
+            "kind": "base",
+            "name": "long long"
+          }
+        },
+        "u": {
+          "offset": 0,
+          "type": {
+            "kind": "struct",
+            "name": "__unnamed_2"
+          }
+        }
+      },
+      "kind": "union",
+      "size": 8
+    },
+    "_INET_COMPARTMENT_SET": {
+      "fields": {
+        "InetCompartment": {
+          "offset": 328,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_INET_COMPARTMENT"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 384
+    },
+    "_INET_COMPARTMENT": {
+      "fields": {
+        "ProtocolCompartment": {
+          "offset": 32,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_PROTOCOL_COMPARTMENT"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 48
+    },
+    "_PROTOCOL_COMPARTMENT": {
+      "fields": {
+        "PortPool": {
+          "offset": 0,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_INET_PORT_POOL"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 16
+    },
+    "_PORT_ASSIGNMENT_ENTRY": {
+      "fields": {
+        "Entry": {
+          "offset": 16,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "base",
+              "name": "void"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 32
+    },
+    "_PORT_ASSIGNMENT_LIST": {
+      "fields": {
+        "Assignments": {
+          "offset": 0,
+          "type": {
+            "count": 256,
+            "kind": "array",
+            "subtype": {
+              "kind": "struct",
+              "name": "_PORT_ASSIGNMENT_ENTRY"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 6144
+    },
+    "_PORT_ASSIGNMENT": {
+      "fields": {
+        "InPaBigPoolBase": {
+          "offset": 24,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "_PORT_ASSIGNMENT_LIST"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 32
+    },
+    "_INET_PORT_POOL": {
+      "fields": {
+        "PortAssignments": {
+          "offset": 224,
+          "type": {
+            "count": 256,
+            "kind": "array",
+            "subtype": {
+              "kind": "pointer",
+              "subtype": {
+                "kind": "struct",
+                "name": "_PORT_ASSIGNMENT"
+              }
+            }
+          }
+        },
+        "PortBitMap": {
+          "offset": 208,
+          "type": {
+            "kind": "struct",
+            "name": "nt_symbols!_RTL_BITMAP"
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 11200
+    },
+    "_PARTITION": {
+      "fields": {
+        "Endpoints": {
+          "offset": 8,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "nt_symbols!_RTL_DYNAMIC_HASH_TABLE"
+            }
+          }
+        },
+        "UnknownHashTable": {
+          "offset": 16,
+          "type": {
+            "kind": "pointer",
+            "subtype": {
+              "kind": "struct",
+              "name": "nt_symbols!_RTL_DYNAMIC_HASH_TABLE"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 192
+    },
+    "_PARTITION_TABLE": {
+      "fields": {
+        "Partitions": {
+          "offset": 0,
+          "type": {
+            "count": 1,
+            "kind": "array",
+            "subtype": {
+              "kind": "struct",
+              "name": "_PARTITION"
+            }
+          }
+        }
+      },
+      "kind": "struct",
+      "size": 128
+    }
+  },
+  "enums": {
+    "TCPStateEnum": {
+      "base": "long",
+      "constants": {
+        "CLOSED": 0,
+        "LISTENING": 1,
+        "SYN_SENT": 2,
+        "SYN_RCVD": 3,
+        "ESTABLISHED": 4,
+        "FIN_WAIT1": 5,
+        "FIN_WAIT2": 6,
+        "CLOSE_WAIT": 7,
+        "CLOSING": 8,
+        "LAST_ACK": 9,
+        "TIME_WAIT": 12,
+        "DELETE_TCB": 13
+      },
+      "size": 4
+    }
+  },
+  "metadata": {
+    "producer": {
+      "version": "0.0.1",
+      "name": "Ozer0x777-by-hand",
+      "datetime": "2026-10-17T05:30:00"
+    },
+    "format": "6.0.0"
+  }
+}