The Volatility Framework
volatility.plugins.malware.malfind.BaseYaraScanner Class Reference

An address space scanner for Yara signatures. More...

Inheritance diagram for volatility.plugins.malware.malfind.BaseYaraScanner:
volatility.plugins.malware.malfind.DiscontigYaraScanner volatility.plugins.malware.malfind.VadYaraScanner

Public Member Functions

def __init__
 
def scan (self, offset, maxlen)
 

Public Attributes

 rules
 
 address_space
 

Static Public Attributes

int overlap = 1024
 

Detailed Description

An address space scanner for Yara signatures.


The documentation for this class was generated from the following file: