The Volatility Framework
volatility.plugins.malware.svcscan.Service8x86 Class Reference

Service structures for Win8/8.1 32-bit. More...

Inheritance diagram for volatility.plugins.malware.svcscan.Service8x86:
volatility.obj.ProfileModification

Public Member Functions

def modification (self, profile)
 
- Public Member Functions inherited from volatility.obj.ProfileModification
def check (self, profile)
 Returns True or False as to whether the Modification should be applied.
 
def dependencies (self, profile)
 Returns a list of modifications that should go before this, and modifications that need to be after this.
 
def modification (self, profile)
 Abstract function for modifying the profile.
 

Static Public Attributes

list before = ['WindowsOverlay', 'WindowsObjectClasses', 'ServiceBase', 'ServiceVista']
 
dictionary conditions
 
- Static Public Attributes inherited from volatility.obj.ProfileModification
list before = []
 
list after = []
 
dictionary conditions = {}
 

Detailed Description

Service structures for Win8/8.1 32-bit.

Member Data Documentation

dictionary volatility.plugins.malware.svcscan.Service8x86.conditions
static
Initial value:
1 = {'os': lambda x: x == 'windows',
2  'major': lambda x: x == 6,
3  'minor': lambda x: x >= 2,
4  'memory_model': lambda x: x == '32bit'}

The documentation for this class was generated from the following file: