The Volatility Framework
volatility.plugins.gui.sessions.SessionsMixin Class Reference

This is a mixin that plugins can inherit for access to the main sessions APIs. More...

Inheritance diagram for volatility.plugins.gui.sessions.SessionsMixin:
volatility.plugins.gui.clipboard.Clipboard volatility.plugins.gui.gditimers.GDITimers volatility.plugins.gui.messagehooks.MessageHooks volatility.plugins.gui.sessions.Sessions volatility.plugins.gui.windowstations.WndScan volatility.plugins.gui.editbox.EditBox volatility.plugins.gui.windows.Windows volatility.plugins.gui.windows.WinTree volatility.plugins.gui.eventhooks.EventHooks volatility.plugins.gui.gahti.Gahti volatility.plugins.gui.userhandles.UserHandles volatility.plugins.gui.desktops.DeskScan volatility.plugins.gui.screenshot.Screenshot

Public Member Functions

def session_spaces (self, kernel_space)
 Generators unique _MM_SESSION_SPACE objects referenced by active processes. More...
 
def find_session_space (self, kernel_space, session_id)
 Get a session address space by its ID. More...
 

Detailed Description

This is a mixin that plugins can inherit for access to the main sessions APIs.

Member Function Documentation

def volatility.plugins.gui.sessions.SessionsMixin.find_session_space (   self,
  kernel_space,
  session_id 
)

Get a session address space by its ID.

Parameters
spacea kernel AS for process enumeration
session_idthe session ID to find.
Returns
_MM_SESSION_SPACE instantiated from the session space native_vm.
def volatility.plugins.gui.sessions.SessionsMixin.session_spaces (   self,
  kernel_space 
)

Generators unique _MM_SESSION_SPACE objects referenced by active processes.

Parameters
spacea kernel AS for process enumeration

_MM_SESSION_SPACE instantiated from the session space native_vm.


The documentation for this class was generated from the following file: