|
string | syscall_module = 'volatility.plugins.overlays.windows.win8_sp1_x64_syscalls' |
|
dictionary | conditions |
|
string | syscall_module = 'No default' |
|
list | before = [] |
|
list | after = [] |
|
dictionary | conditions = {} |
|
|
def | modification (self, profile) |
|
def | check (self, profile) |
| Returns True or False as to whether the Modification should be applied.
|
|
def | dependencies (self, profile) |
| Returns a list of modifications that should go before this, and modifications that need to be after this.
|
|
def | modification (self, profile) |
| Abstract function for modifying the profile.
|
|
dictionary volatility.plugins.overlays.windows.ssdt_vtypes.Win8SP1x64Syscalls.conditions |
|
static |
Initial value: 1 = {
'os':
lambda x: x ==
'windows',
2 'memory_model':
lambda x: x ==
'64bit',
3 'major':
lambda x : x == 6,
4 'minor':
lambda x : x == 3}
The documentation for this class was generated from the following file:
- volatility/plugins/overlays/windows/ssdt_vtypes.py