The Volatility Framework
volatility.plugins.common.AbstractWindowsCommand Class Reference
Inheritance diagram for volatility.plugins.common.AbstractWindowsCommand:
volatility.commands.Command volatility.plugins.bigpagepools.BigPools volatility.plugins.bioskbd.BiosKbd volatility.plugins.common.AbstractScanCommand volatility.plugins.connections.Connections volatility.plugins.crashinfo.CrashInfo volatility.plugins.drivermodule.drivermodule volatility.plugins.dumpfiles.DumpFiles volatility.plugins.evtlogs.EvtLogs volatility.plugins.getservicesids.GetServiceSids volatility.plugins.gui.atoms.Atoms volatility.plugins.gui.clipboard.Clipboard volatility.plugins.gui.gditimers.GDITimers volatility.plugins.gui.sessions.Sessions volatility.plugins.hibinfo.HibInfo volatility.plugins.kdbgscan.KDBGScan volatility.plugins.kpcrscan.KPCRScan volatility.plugins.malware.cmdhistory.CmdScan volatility.plugins.malware.idt.GDT volatility.plugins.malware.idt.IDT volatility.plugins.malware.impscan.ImpScan volatility.plugins.malware.psxview.PsXview volatility.plugins.malware.svcscan.SvcScan volatility.plugins.malware.timers.Timers volatility.plugins.mftparser.MFTParser volatility.plugins.modules.Modules volatility.plugins.modules.UnloadedModules volatility.plugins.pooltracker.PoolPeek volatility.plugins.pooltracker.PoolTracker volatility.plugins.pstree.PSTree volatility.plugins.registry.amcache.AmCache volatility.plugins.registry.auditpol.Auditpol volatility.plugins.registry.dumpregistry.DumpRegistry volatility.plugins.registry.lsadump.CacheDump volatility.plugins.registry.lsadump.HashDump volatility.plugins.registry.lsadump.LSADump volatility.plugins.registry.printkey.HiveDump volatility.plugins.registry.shellbags.ShellBags volatility.plugins.registry.shimcache.ShimCache volatility.plugins.registry.shutdown.ShutdownTime volatility.plugins.registry.userassist.UserAssist volatility.plugins.sockets.Sockets volatility.plugins.ssdt.SSDT volatility.plugins.strings.Strings volatility.plugins.taskmods.DllList volatility.plugins.tcaudit.TrueCryptMaster volatility.plugins.tcaudit.TrueCryptPassphrase volatility.plugins.tcaudit.TrueCryptSummary volatility.plugins.timeliner.TimeLiner volatility.plugins.volshell.volshell volatility.plugins.win10cookie.Win10Cookie

Static Public Member Functions

def is_valid_profile (profile)
 
- Static Public Member Functions inherited from volatility.commands.Command
def register_options (config)
 Registers options into a config object provided.
 
def is_valid_profile (profile)
 

Additional Inherited Members

- Public Member Functions inherited from volatility.commands.Command
def __init__ (self, config, _args, _kwargs)
 Constructor uses args as an initializer. More...
 
def help (cls)
 This function returns a string that will be displayed when a user lists available plugins.
 
def calculate (self)
 This function is responsible for performing all calculations. More...
 
def execute (self)
 Executes the plugin command. More...
 
def format_value (self, value, fmt)
 Formats an individual field using the table formatting codes.
 
def table_header
 Table header renders the title row of a table. More...
 
def table_row (self, outfd, args)
 Outputs a single row of a table.
 
def text_cell_renderers (self, columns)
 Returns default renderers for the columns listed.
 
def unified_output (self, data)
 
def render_text (self, outfd, data)
 
def render_greptext (self, outfd, data)
 
def render_json (self, outfd, data)
 
def render_sqlite (self, outfd, data)
 
def render_dot (self, outfd, data)
 
def render_html (self, outfd, data)
 
def render_xlsx (self, outfd, data)
 
- Static Public Attributes inherited from volatility.commands.Command
string op = ""
 
string opts = ""
 
string args = ""
 
string cmdname = ""
 
dictionary meta_info = {}
 
 elide_data = True
 
string tablesep = " "
 
 text_sort_column = None
 
dictionary text_stock_renderers
 

The documentation for this class was generated from the following file: