This modification applies the vtypes for 64bit Windows up to Windows 7. More...
Public Member Functions | |
def | check (self, profile) |
def | modification (self, profile) |
Public Member Functions inherited from volatility.obj.ProfileModification | |
def | check (self, profile) |
Returns True or False as to whether the Modification should be applied. | |
def | dependencies (self, profile) |
Returns a list of modifications that should go before this, and modifications that need to be after this. | |
def | modification (self, profile) |
Abstract function for modifying the profile. | |
Static Public Attributes | |
list | before = ['WindowsObjectClasses'] |
Static Public Attributes inherited from volatility.obj.ProfileModification | |
list | before = [] |
list | after = [] |
dictionary | conditions = {} |
This modification applies the vtypes for 64bit Windows up to Windows 7.