volatility  2.6.1
About: The Volatility Framework is a collection of tools for the extraction of digital artifacts from volatile memory (RAM) samples (requires Python).
  Fossies Dox: volatility-2.6.1.tar.gz  ("inofficial" and yet experimental doxygen-generated source code documentation)  

volatility.plugins.overlays.windows.pe_vtypes.WinPEObjectClasses Class Reference
Inheritance diagram for volatility.plugins.overlays.windows.pe_vtypes.WinPEObjectClasses:
Collaboration diagram for volatility.plugins.overlays.windows.pe_vtypes.WinPEObjectClasses:

Public Member Functions

def modification (self, profile)
- Public Member Functions inherited from volatility.obj.ProfileModification
def check (self, profile)
def dependencies (self, profile)

Static Public Attributes

list before = ['WindowsOverlay']
dictionary conditions = {'os': lambda x : x == 'windows'}
- Static Public Attributes inherited from volatility.obj.ProfileModification
list before = []
list after = []
dictionary conditions = {}

Detailed Description

Definition at line 1028 of file pe_vtypes.py.

Member Function Documentation

◆ modification()

def volatility.plugins.overlays.windows.pe_vtypes.WinPEObjectClasses.modification (   self,
Abstract function for modifying the profile 

Reimplemented from volatility.obj.ProfileModification.

Definition at line 1031 of file pe_vtypes.py.

Member Data Documentation

◆ before

list volatility.plugins.overlays.windows.pe_vtypes.WinPEObjectClasses.before = ['WindowsOverlay']

Definition at line 1029 of file pe_vtypes.py.

◆ conditions

dictionary volatility.plugins.overlays.windows.pe_vtypes.WinPEObjectClasses.conditions = {'os': lambda x : x == 'windows'}

The documentation for this class was generated from the following file: