The Volatility Framework
volatility.plugins.gui.vtypes.win7.Win7SP0x86GuiVTypes Class Reference

Apply the base vtypes for Windows 7 SP0 x86. More...

Inheritance diagram for volatility.plugins.gui.vtypes.win7.Win7SP0x86GuiVTypes:
volatility.obj.ProfileModification

Public Member Functions

def modification (self, profile)
 
- Public Member Functions inherited from volatility.obj.ProfileModification
def check (self, profile)
 Returns True or False as to whether the Modification should be applied.
 
def dependencies (self, profile)
 Returns a list of modifications that should go before this, and modifications that need to be after this.
 
def modification (self, profile)
 Abstract function for modifying the profile.
 

Static Public Attributes

dictionary conditions
 
- Static Public Attributes inherited from volatility.obj.ProfileModification
list before = []
 
list after = []
 
dictionary conditions = {}
 

Detailed Description

Apply the base vtypes for Windows 7 SP0 x86.

Member Data Documentation

dictionary volatility.plugins.gui.vtypes.win7.Win7SP0x86GuiVTypes.conditions
static
Initial value:
1 = {'os': lambda x: x == 'windows',
2  'memory_model': lambda x: x == '32bit',
3  'major': lambda x: x == 6,
4  'minor': lambda x: x == 1,
5  'build': lambda x : x == 7600}

The documentation for this class was generated from the following file: