volatility.plugins.gui.win32k_core.Win32KGahtiVType Class Reference

Apply a vtype for win32k!gahti. More...

Inheritance diagram for volatility.plugins.gui.win32k_core.Win32KGahtiVType:

Public Member Functions
def	modification (self, profile)
Public Member Functions inherited from volatility.obj.ProfileModification
def	check (self, profile)
	Returns True or False as to whether the Modification should be applied.
def	dependencies (self, profile)
	Returns a list of modifications that should go before this, and modifications that need to be after this.
def	modification (self, profile)
	Abstract function for modifying the profile.

Static Public Attributes
dictionary	conditions = {'os': lambda x: x == 'windows'}
Static Public Attributes inherited from volatility.obj.ProfileModification
list	before = []
list	after = []
dictionary	conditions = {}

Detailed Description

Apply a vtype for win32k!gahti.

Adjust the number of handles according to the OS version

---

The documentation for this class was generated from the following file:

• volatility/plugins/gui/win32k_core.py