The Volatility Framework
volatility.plugins.linux.check_idt.linux_check_idt Class Reference

Checks if the IDT has been altered. More...

Inheritance diagram for volatility.plugins.linux.check_idt.linux_check_idt:

Public Member Functions

def calculate (self)
 This works by walking the IDT table for the entries that Linux uses and verifies that each is a symbol in the kernel.
 
def unified_output (self, data)
 
def generator (self, data)
 
def render_text (self, outfd, data)
 

Detailed Description

Checks if the IDT has been altered.


The documentation for this class was generated from the following file: