volatility.plugins.kpcrscan.KPCRScannerCheck Class Reference

Checks the self referential pointers to find KPCRs. More...

Inheritance diagram for volatility.plugins.kpcrscan.KPCRScannerCheck:

Public Member Functions
def	__init__ (self, address_space)
def	check (self, offset)
	We check that _KCPR.pSelfPCR points to the start of the _KCPR struct.
def	skip (self, data, offset)
Public Member Functions inherited from volatility.scan.ScannerCheck
def	__init__ (self, address_space, _kwargs)
def	object_offset (self, offset, address_space)
def	check (self, _offset)

Public Attributes
	SelfPcr_offset
	Prcb_offset
	PrcbData_offset
	address_equality
	KPCR
Public Attributes inherited from volatility.scan.ScannerCheck
	address_space

Detailed Description

Checks the self referential pointers to find KPCRs.

---

The documentation for this class was generated from the following file:

• volatility/plugins/kpcrscan.py