Checks the self referential pointers to find KPCRs. More...
Public Member Functions | |
def | __init__ (self, address_space) |
def | check (self, offset) |
We check that _KCPR.pSelfPCR points to the start of the _KCPR struct. | |
def | skip (self, data, offset) |
Public Member Functions inherited from volatility.scan.ScannerCheck | |
def | __init__ (self, address_space, _kwargs) |
def | object_offset (self, offset, address_space) |
def | check (self, _offset) |
Public Attributes | |
SelfPcr_offset | |
Prcb_offset | |
PrcbData_offset | |
address_equality | |
KPCR | |
Public Attributes inherited from volatility.scan.ScannerCheck | |
address_space | |
Checks the self referential pointers to find KPCRs.