volatility  2.6.1
About: The Volatility Framework is a collection of tools for the extraction of digital artifacts from volatile memory (RAM) samples (requires Python).
  Fossies Dox: volatility-2.6.1.tar.gz  ("inofficial" and yet experimental doxygen-generated source code documentation)  

volatility.plugins.overlays.windows.pe_vtypes.WinPEVTypes Class Reference
Inheritance diagram for volatility.plugins.overlays.windows.pe_vtypes.WinPEVTypes:
[legend]
Collaboration diagram for volatility.plugins.overlays.windows.pe_vtypes.WinPEVTypes:
[legend]

Public Member Functions

def modification (self, profile)
 
- Public Member Functions inherited from volatility.obj.ProfileModification
def check (self, profile)
 
def dependencies (self, profile)
 

Static Public Attributes

list before = ['WindowsOverlay']
 
dictionary conditions = {'os': lambda x : x == 'windows'}
 
- Static Public Attributes inherited from volatility.obj.ProfileModification
list before = []
 
list after = []
 
dictionary conditions = {}
 

Detailed Description

Definition at line 1015 of file pe_vtypes.py.

Member Function Documentation

◆ modification()

def volatility.plugins.overlays.windows.pe_vtypes.WinPEVTypes.modification (   self,
  profile 
)
Abstract function for modifying the profile 

Reimplemented from volatility.obj.ProfileModification.

Definition at line 1018 of file pe_vtypes.py.

Member Data Documentation

◆ before

list volatility.plugins.overlays.windows.pe_vtypes.WinPEVTypes.before = ['WindowsOverlay']
static

Definition at line 1016 of file pe_vtypes.py.

◆ conditions

dictionary volatility.plugins.overlays.windows.pe_vtypes.WinPEVTypes.conditions = {'os': lambda x : x == 'windows'}
static

The documentation for this class was generated from the following file: