The Volatility Framework
contrib.plugins.aspaces.ewf.EWFAddressSpace Class Reference

An EWF capable address space. More...

Inheritance diagram for contrib.plugins.aspaces.ewf.EWFAddressSpace:

Public Member Functions

def __init__ (self, base, config, kwargs)
 
def write (self, _addr, _buf)
 

Public Attributes

 fhandle
 
 fsize
 

Static Public Attributes

int order = 20
 

Detailed Description

An EWF capable address space.

In order for us to work we need: 1) There must be a base AS. 2) The first 6 bytes must be 45 56 46 09 0D 0A (EVF header)


The documentation for this class was generated from the following file: