The Volatility Framework
contrib.plugins.psdispscan.CheckSynchronization Class Reference

Checks that _EPROCESS.WorkingSetLock and _EPROCESS.AddressCreationLock look valid. More...

Inheritance diagram for contrib.plugins.psdispscan.CheckSynchronization:

Public Member Functions

def check (self, offset)
 

Detailed Description

Checks that _EPROCESS.WorkingSetLock and _EPROCESS.AddressCreationLock look valid.


The documentation for this class was generated from the following file: