volatility.plugins.linux.check_evt_arm.linux_check_evt_arm Class Reference

Checks the Exception Vector Table to look for syscall table hooking. More...

Inheritance diagram for volatility.plugins.linux.check_evt_arm.linux_check_evt_arm:

Public Member Functions
def	calculate (self)
def	render_text (self, outfd, data)

Static Public Attributes
int	VECTOR_BASE = 0xffff0000
int	SWI_BASE = VECTOR_BASE+8

Detailed Description

Checks the Exception Vector Table to look for syscall table hooking.

---

The documentation for this class was generated from the following file:

• volatility/plugins/linux/check_evt_arm.py