The Windows 10 32-bit DTB signature.
More...
|
def | modification (self, profile) |
|
def | check (self, profile) |
| Returns True or False as to whether the Modification should be applied.
|
|
def | dependencies (self, profile) |
| Returns a list of modifications that should go before this, and modifications that need to be after this.
|
|
def | modification (self, profile) |
| Abstract function for modifying the profile.
|
|
|
list | before = ['WindowsOverlay', 'Win8x86DTB'] |
|
dictionary | conditions |
|
list | before = [] |
|
list | after = [] |
|
dictionary | conditions = {} |
|
The Windows 10 32-bit DTB signature.
dictionary volatility.plugins.overlays.windows.win10.Win10x86DTB.conditions |
|
static |
Initial value: 1 = {
'os':
lambda x: x ==
'windows',
2 'major':
lambda x: x == 6,
3 'minor':
lambda x: x == 4,
4 'memory_model':
lambda x: x ==
'32bit',
The documentation for this class was generated from the following file:
- volatility/plugins/overlays/windows/win10.py