volatility.plugins.mac.dump_map.mac_dump_maps Class Reference

Dumps memory ranges of process(es), optionally including pages in compressed swap. More...

Inheritance diagram for volatility.plugins.mac.dump_map.mac_dump_maps:

Public Member Functions
def	__init__ (self, config, args, kwargs)
def	compressed_page_location (self, outfd, map, addr)
def	decompress (self, outfd, seg, idx)
def	render_text (self, outfd, data)
Public Member Functions inherited from volatility.plugins.mac.proc_maps.mac_proc_maps
def	calculate (self)
def	unified_output (self, data)
def	generator (self, data)
def	render_text (self, outfd, data)
Public Member Functions inherited from volatility.plugins.mac.pstasks.mac_tasks
def	__init__ (self, config, args, kwargs)
def	allprocs (self)
def	calculate (self)
Public Member Functions inherited from volatility.plugins.mac.pslist.mac_pslist
def	__init__ (self, config, args, kwargs)
def	calculate (self)
def	unified_output (self, data)
def	generator (self, data)
def	render_text (self, outfd, data)
Public Member Functions inherited from volatility.plugins.mac.common.AbstractMacCommand
def	__init__ (self, args, kwargs)
def	profile (self)
def	execute (self, args, kwargs)
Public Member Functions inherited from volatility.commands.Command
def	__init__ (self, config, _args, _kwargs)
	Constructor uses args as an initializer. More...
def	help (cls)
	This function returns a string that will be displayed when a user lists available plugins.
def	calculate (self)
	This function is responsible for performing all calculations. More...
def	execute (self)
	Executes the plugin command. More...
def	format_value (self, value, fmt)
	Formats an individual field using the table formatting codes.
def	table_header
	Table header renders the title row of a table. More...
def	table_row (self, outfd, args)
	Outputs a single row of a table.
def	text_cell_renderers (self, columns)
	Returns default renderers for the columns listed.
def	unified_output (self, data)
def	render_text (self, outfd, data)
def	render_greptext (self, outfd, data)
def	render_json (self, outfd, data)
def	render_sqlite (self, outfd, data)
def	render_dot (self, outfd, data)
def	render_html (self, outfd, data)
def	render_xlsx (self, outfd, data)

Public Attributes
	C_SEG_BUFSIZE
	C_SEG_ALLOCSIZE
	C_SEG_SLOT_ARRAYS
	C_SEG_SLOT_ARRAY_SIZE
	C_SEG_SLOT_ARRAY_MASK
	C_SEG_OFFSET_ALIGNMENT_MASK
	COMPRESSOR_SLOTS_CHUNK_SIZE
	COMPRESSOR_SLOTS_PER_CHUNK
	wkdm
	dest
	successful_decompressions
	MAXMAPSIZE
	compressor_object
	c_segment_count
	c_segments_ptr
	c_segments
Public Attributes inherited from volatility.plugins.mac.common.AbstractMacCommand
	addr_space

Additional Inherited Members
Static Public Member Functions inherited from volatility.plugins.mac.pslist.mac_pslist
def	virtual_process_from_physical_offset (addr_space, offset)
Static Public Member Functions inherited from volatility.plugins.mac.common.AbstractMacCommand
def	register_options (config)
def	is_valid_profile (profile)
Static Public Member Functions inherited from volatility.commands.Command
def	register_options (config)
	Registers options into a config object provided.
def	is_valid_profile (profile)
Static Public Attributes inherited from volatility.commands.Command
string	op = ""
string	opts = ""
string	args = ""
string	cmdname = ""
dictionary	meta_info = {}
	elide_data = True
string	tablesep = " "
	text_sort_column = None
dictionary	text_stock_renderers

Detailed Description

Dumps memory ranges of process(es), optionally including pages in compressed swap.

---

The documentation for this class was generated from the following file:

• volatility/plugins/mac/dump_map.py