The Volatility Framework
volatility.plugins.overlays.windows.ssdt_vtypes.AbstractSyscalls Class Reference
Inheritance diagram for volatility.plugins.overlays.windows.ssdt_vtypes.AbstractSyscalls:
volatility.obj.ProfileModification volatility.plugins.overlays.windows.ssdt_vtypes.VistaSP0Syscalls volatility.plugins.overlays.windows.ssdt_vtypes.VistaSP0x64Syscalls volatility.plugins.overlays.windows.ssdt_vtypes.VistaSP12Syscalls volatility.plugins.overlays.windows.ssdt_vtypes.VistaSP12x64Syscalls volatility.plugins.overlays.windows.ssdt_vtypes.Win2003SP0Syscalls volatility.plugins.overlays.windows.ssdt_vtypes.Win2003SP12Syscalls volatility.plugins.overlays.windows.ssdt_vtypes.Win2003SP12x64Syscalls volatility.plugins.overlays.windows.ssdt_vtypes.Win7SP01Syscalls volatility.plugins.overlays.windows.ssdt_vtypes.Win7SP01x64Syscalls volatility.plugins.overlays.windows.ssdt_vtypes.Win8SP0x64Syscalls volatility.plugins.overlays.windows.ssdt_vtypes.Win8SP0x86Syscalls volatility.plugins.overlays.windows.ssdt_vtypes.Win8SP1x64Syscalls volatility.plugins.overlays.windows.ssdt_vtypes.Win8SP1x86Syscalls volatility.plugins.overlays.windows.ssdt_vtypes.WinXPSyscalls

Public Member Functions

def modification (self, profile)
 
- Public Member Functions inherited from volatility.obj.ProfileModification
def check (self, profile)
 Returns True or False as to whether the Modification should be applied.
 
def dependencies (self, profile)
 Returns a list of modifications that should go before this, and modifications that need to be after this.
 
def modification (self, profile)
 Abstract function for modifying the profile.
 

Static Public Attributes

string syscall_module = 'No default'
 
- Static Public Attributes inherited from volatility.obj.ProfileModification
list before = []
 
list after = []
 
dictionary conditions = {}
 

The documentation for this class was generated from the following file: