volatility  2.6.1
About: The Volatility Framework is a collection of tools for the extraction of digital artifacts from volatile memory (RAM) samples (requires Python).
  Fossies Dox: volatility-2.6.1.tar.gz  ("inofficial" and yet experimental doxygen-generated source code documentation)  

volatility.plugins.overlays.windows.pe_vtypes.WinPEx64VTypes Class Reference
Inheritance diagram for volatility.plugins.overlays.windows.pe_vtypes.WinPEx64VTypes:
Collaboration diagram for volatility.plugins.overlays.windows.pe_vtypes.WinPEx64VTypes:

Public Member Functions

def modification (self, profile)
- Public Member Functions inherited from volatility.obj.ProfileModification
def check (self, profile)
def dependencies (self, profile)

Static Public Attributes

list before = ['WinPEVTypes']
dictionary conditions
- Static Public Attributes inherited from volatility.obj.ProfileModification
list before = []
list after = []
dictionary conditions = {}

Detailed Description

Definition at line 1021 of file pe_vtypes.py.

Member Function Documentation

◆ modification()

def volatility.plugins.overlays.windows.pe_vtypes.WinPEx64VTypes.modification (   self,
Abstract function for modifying the profile 

Reimplemented from volatility.obj.ProfileModification.

Definition at line 1025 of file pe_vtypes.py.

Member Data Documentation

◆ before

list volatility.plugins.overlays.windows.pe_vtypes.WinPEx64VTypes.before = ['WinPEVTypes']

Definition at line 1022 of file pe_vtypes.py.

◆ conditions

dictionary volatility.plugins.overlays.windows.pe_vtypes.WinPEx64VTypes.conditions
Initial value:
= {'os': lambda x : x == 'windows',
'memory_model': lambda x: x == '64bit'}

Definition at line 1023 of file pe_vtypes.py.

Referenced by volatility.plugins.overlays.windows.win8_kdbg.VolatilityKDBG.unique_sizes().

The documentation for this class was generated from the following file: