volatility  2.6.1
About: The Volatility Framework is a collection of tools for the extraction of digital artifacts from volatile memory (RAM) samples (requires Python).
  Fossies Dox: volatility-2.6.1.tar.gz  ("inofficial" and yet experimental doxygen-generated source code documentation)  

volatility.plugins.overlays.windows.pe_vtypes.WinPEx64VTypes Class Reference
Inheritance diagram for volatility.plugins.overlays.windows.pe_vtypes.WinPEx64VTypes:
[legend]
Collaboration diagram for volatility.plugins.overlays.windows.pe_vtypes.WinPEx64VTypes:
[legend]

Public Member Functions

def modification (self, profile)
 
- Public Member Functions inherited from volatility.obj.ProfileModification
def check (self, profile)
 
def dependencies (self, profile)
 

Static Public Attributes

list before = ['WinPEVTypes']
 
dictionary conditions
 
- Static Public Attributes inherited from volatility.obj.ProfileModification
list before = []
 
list after = []
 
dictionary conditions = {}
 

Detailed Description

Definition at line 1021 of file pe_vtypes.py.

Member Function Documentation

◆ modification()

def volatility.plugins.overlays.windows.pe_vtypes.WinPEx64VTypes.modification (   self,
  profile 
)
Abstract function for modifying the profile 

Reimplemented from volatility.obj.ProfileModification.

Definition at line 1025 of file pe_vtypes.py.

Member Data Documentation

◆ before

list volatility.plugins.overlays.windows.pe_vtypes.WinPEx64VTypes.before = ['WinPEVTypes']
static

Definition at line 1022 of file pe_vtypes.py.

◆ conditions

dictionary volatility.plugins.overlays.windows.pe_vtypes.WinPEx64VTypes.conditions
static
Initial value:
= {'os': lambda x : x == 'windows',
'memory_model': lambda x: x == '64bit'}

Definition at line 1023 of file pe_vtypes.py.

Referenced by volatility.plugins.overlays.windows.win8_kdbg.VolatilityKDBG.unique_sizes().


The documentation for this class was generated from the following file: