The Volatility Framework
contrib.plugins.psdispscan.CheckDTBAligned Class Reference

Checks that _EPROCESS.Pcb.DirectoryTableBase is aligned to 0x20. More...

Inheritance diagram for contrib.plugins.psdispscan.CheckDTBAligned:

Public Member Functions

def check (self, offset)
 

Detailed Description

Checks that _EPROCESS.Pcb.DirectoryTableBase is aligned to 0x20.


The documentation for this class was generated from the following file: