The Volatility Framework
volatility.plugins.malware.threads.HwBreakpoint Class Reference

Detect threads with hardware breakpoints. More...

Inheritance diagram for volatility.plugins.malware.threads.HwBreakpoint:
volatility.plugins.malware.threads.AbstractThreadCheck

Public Member Functions

def check (self)
 This check is True when a thread's trap frame shows usage of the Dr* registers in a manner consistent with hardware breakpoints. More...
 
- Public Member Functions inherited from volatility.plugins.malware.threads.AbstractThreadCheck
def __init__ (self, thread, mods, mod_addrs, hooked_tables, found_by_scanner)
 
def check (self)
 Return True or False from this method.
 

Additional Inherited Members

- Public Attributes inherited from volatility.plugins.malware.threads.AbstractThreadCheck
 thread
 
 mods
 
 mod_addrs
 
 hooked_tables
 
 found_by_scanner
 
 flags
 

Detailed Description

Detect threads with hardware breakpoints.

Member Function Documentation

def volatility.plugins.malware.threads.HwBreakpoint.check (   self)

This check is True when a thread's trap frame shows usage of the Dr* registers in a manner consistent with hardware breakpoints.


The documentation for this class was generated from the following file: