|
def | modification (self, profile) |
|
def | check (self, profile) |
| Returns True or False as to whether the Modification should be applied.
|
|
def | dependencies (self, profile) |
| Returns a list of modifications that should go before this, and modifications that need to be after this.
|
|
def | modification (self, profile) |
| Abstract function for modifying the profile.
|
|
|
list | before = ["XP2003x86BaseVTypes", "Win32Kx86VTypes", "AtomTablex86Overlay", "Win32KCoreClasses"] |
|
dictionary | conditions |
|
list | before = [] |
|
list | after = [] |
|
dictionary | conditions = {} |
|
dictionary volatility.plugins.gui.vtypes.win8.Win8x86Gui.conditions |
|
static |
Initial value: 1 = {
'os':
lambda x: x ==
'windows',
2 'memory_model':
lambda x: x ==
'32bit',
3 'major':
lambda x: x == 6,
4 'minor':
lambda x: x > 1}
The documentation for this class was generated from the following file:
- volatility/plugins/gui/vtypes/win8.py