volatility  2.6.1
About: The Volatility Framework is a collection of tools for the extraction of digital artifacts from volatile memory (RAM) samples (requires Python).
  Fossies Dox: volatility-2.6.1.tar.gz  ("inofficial" and yet experimental doxygen-generated source code documentation)  

volatility.plugins.overlays.windows.pe_vtypes.WinPEVTypes Class Reference
Inheritance diagram for volatility.plugins.overlays.windows.pe_vtypes.WinPEVTypes:
Collaboration diagram for volatility.plugins.overlays.windows.pe_vtypes.WinPEVTypes:

Public Member Functions

def modification (self, profile)
- Public Member Functions inherited from volatility.obj.ProfileModification
def check (self, profile)
def dependencies (self, profile)

Static Public Attributes

list before = ['WindowsOverlay']
dictionary conditions = {'os': lambda x : x == 'windows'}
- Static Public Attributes inherited from volatility.obj.ProfileModification
list before = []
list after = []
dictionary conditions = {}

Detailed Description

Definition at line 1015 of file pe_vtypes.py.

Member Function Documentation

◆ modification()

def volatility.plugins.overlays.windows.pe_vtypes.WinPEVTypes.modification (   self,
Abstract function for modifying the profile 

Reimplemented from volatility.obj.ProfileModification.

Definition at line 1018 of file pe_vtypes.py.

Member Data Documentation

◆ before

list volatility.plugins.overlays.windows.pe_vtypes.WinPEVTypes.before = ['WindowsOverlay']

Definition at line 1016 of file pe_vtypes.py.

◆ conditions

dictionary volatility.plugins.overlays.windows.pe_vtypes.WinPEVTypes.conditions = {'os': lambda x : x == 'windows'}

The documentation for this class was generated from the following file: