volatility  2.6.1
About: The Volatility Framework is a collection of tools for the extraction of digital artifacts from volatile memory (RAM) samples (requires Python).
  Fossies Dox: volatility-2.6.1.tar.gz  ("inofficial" and yet experimental doxygen-generated source code documentation)  

pe_vtypes.py File Reference

Go to the source code of this file.

Classes

class  volatility.plugins.overlays.windows.pe_vtypes._IMAGE_EXPORT_DIRECTORY
 
class  volatility.plugins.overlays.windows.pe_vtypes._IMAGE_IMPORT_DESCRIPTOR
 
class  volatility.plugins.overlays.windows.pe_vtypes._LDR_DATA_TABLE_ENTRY
 
class  volatility.plugins.overlays.windows.pe_vtypes._IMAGE_DOS_HEADER
 
class  volatility.plugins.overlays.windows.pe_vtypes._IMAGE_NT_HEADERS64
 
class  volatility.plugins.overlays.windows.pe_vtypes._IMAGE_NT_HEADERS
 
class  volatility.plugins.overlays.windows.pe_vtypes._IMAGE_SECTION_HEADER
 
class  volatility.plugins.overlays.windows.pe_vtypes.VerStruct
 
class  volatility.plugins.overlays.windows.pe_vtypes._VS_VERSION_INFO
 
class  volatility.plugins.overlays.windows.pe_vtypes._VS_FIXEDFILEINFO
 
class  volatility.plugins.overlays.windows.pe_vtypes._IMAGE_RESOURCE_DIR_STRING_U
 
class  volatility.plugins.overlays.windows.pe_vtypes._IMAGE_RESOURCE_DIRECTORY
 
class  volatility.plugins.overlays.windows.pe_vtypes.WinPEVTypes
 
class  volatility.plugins.overlays.windows.pe_vtypes.WinPEx64VTypes
 
class  volatility.plugins.overlays.windows.pe_vtypes.WinPEObjectClasses
 

Namespaces

 volatility.plugins.overlays.windows.pe_vtypes
 

Variables

dictionary volatility.plugins.overlays.windows.pe_vtypes.pe_vtypes
 
dictionary volatility.plugins.overlays.windows.pe_vtypes.pe_vtypes_64
 
dictionary volatility.plugins.overlays.windows.pe_vtypes.resource_types
 
int volatility.plugins.overlays.windows.pe_vtypes.IMAGE_NT_OPTIONAL_HDR32_MAGIC = 0x10b
 
int volatility.plugins.overlays.windows.pe_vtypes.IMAGE_NT_OPTIONAL_HDR64_MAGIC = 0x20b