The Volatility Framework
volatility.scan.ScannerCheck Class Reference

A scanner check is a special class which is invoked on an AS to check for a specific condition. More...

Inheritance diagram for volatility.scan.ScannerCheck:
volatility.plugins.kdbgscan.MultiStringFinderCheck volatility.plugins.kpcrscan.KPCRScannerCheck volatility.poolscan.CheckPoolSize volatility.poolscan.CheckPoolType volatility.poolscan.PoolTagCheck volatility.plugins.kdbgscan.MultiPrefixFinderCheck

Public Member Functions

def __init__ (self, address_space, _kwargs)
 
def object_offset (self, offset, address_space)
 
def check (self, _offset)
 

Public Attributes

 address_space
 

Detailed Description

A scanner check is a special class which is invoked on an AS to check for a specific condition.

The main method is def check(self, offset): This will return True if the condition is true or False otherwise.

This class is the base class for all checks.


The documentation for this class was generated from the following file: