The Volatility Framework
volatility.plugins.linux.dentry_cache.linux_dentry_cache Class Reference

Gather files from the dentry cache. More...

Inheritance diagram for volatility.plugins.linux.dentry_cache.linux_dentry_cache:

Public Member Functions

def __init__ (self, config, args, kwargs)
 
def make_body (self, dentry)
 Create a pipe-delimited bodyfile from a dentry structure. More...
 
def calculate (self)
 
def render_text (self, outfd, data)
 

Detailed Description

Gather files from the dentry cache.

Member Function Documentation

def volatility.plugins.linux.dentry_cache.linux_dentry_cache.make_body (   self,
  dentry 
)

Create a pipe-delimited bodyfile from a dentry structure.

MD5|name|inode|mode_as_string|UID|GID|size|atime|mtime|ctime|crtime


The documentation for this class was generated from the following file: