The Volatility Framework
volatility.plugins.linux.check_syscall.linux_check_syscall Class Reference

Checks if the system call table has been altered. More...

Inheritance diagram for volatility.plugins.linux.check_syscall.linux_check_syscall:

Public Member Functions

def __init__ (self, config, args, kwargs)
 
def get_syscalls
 
def calculate (self)
 This works by walking the system call table and verifies that each is a symbol in the kernel.
 
def unified_output (self, data)
 
def generator (self, data)
 
def render_text (self, outfd, data)
 

Detailed Description

Checks if the system call table has been altered.


The documentation for this class was generated from the following file: