The Volatility Framework
volatility.plugins.overlays.windows.windows.ExecutiveObjectMixin Class Reference

A mixin for executive objects to allow easy derivation of the object's _OBJECT_HEADER struct. More...

Inheritance diagram for volatility.plugins.overlays.windows.windows.ExecutiveObjectMixin:
volatility.plugins.overlays.windows.windows._EPROCESS volatility.plugins.overlays.windows.windows._ETHREAD volatility.plugins.overlays.windows.windows._FILE_OBJECT volatility.plugins.overlays.windows.windows._KMUTANT volatility.plugins.overlays.windows.windows._OBJECT_SYMBOLIC_LINK volatility.plugins.overlays.windows.windows._OBJECT_TYPE volatility.plugins.overlays.windows.vista._ETHREAD

Public Member Functions

def get_object_header (self)
 

Detailed Description

A mixin for executive objects to allow easy derivation of the object's _OBJECT_HEADER struct.


The documentation for this class was generated from the following file: