volatility.plugins.overlays.windows.ssdt_vtypes.Win2003SP12Syscalls Class Reference

Inheritance diagram for volatility.plugins.overlays.windows.ssdt_vtypes.Win2003SP12Syscalls:

Static Public Attributes
string	syscall_module = 'volatility.plugins.overlays.windows.win2003_sp12_x86_syscalls'
dictionary	conditions
Static Public Attributes inherited from volatility.plugins.overlays.windows.ssdt_vtypes.AbstractSyscalls
string	syscall_module = 'No default'
Static Public Attributes inherited from volatility.obj.ProfileModification
list	before = []
list	after = []
dictionary	conditions = {}

Additional Inherited Members
Public Member Functions inherited from volatility.plugins.overlays.windows.ssdt_vtypes.AbstractSyscalls
def	modification (self, profile)
Public Member Functions inherited from volatility.obj.ProfileModification
def	check (self, profile)
	Returns True or False as to whether the Modification should be applied.
def	dependencies (self, profile)
	Returns a list of modifications that should go before this, and modifications that need to be after this.
def	modification (self, profile)
	Abstract function for modifying the profile.

Member Data Documentation

dictionary volatility.plugins.overlays.windows.ssdt_vtypes.Win2003SP12Syscalls.conditions

static

Initial value:

= {'os': lambda x: x == 'windows',
                  'memory_model': lambda x: x == '32bit',
                  'major': lambda x : x == 5,
                  'minor': lambda x : x == 2}

---

The documentation for this class was generated from the following file:

• volatility/plugins/overlays/windows/ssdt_vtypes.py