Class TimedCache

source code

A limited time Cache.

This is useful for live analysis to ensure that information is not stale.

Instance Methods

Get(self, item, default=None)

source code

Set(self, item, value, volatile=True)
Sets the item to the value.

source code

__str__(self)
Print the contents somewhat concisely.

source code

Clear(self) (Inherited from rekall.cache.Cache)

source code

Flush(self)
Called to sync the cache to external storage if required. (Inherited from rekall.cache.Cache)

source code

__init__(self, session)
x.__init__(...) initializes x; see help(type(x)) for signature (Inherited from rekall.cache.Cache)

source code

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __subclasshook__

Properties
	expire_time
Inherited from `object`: `__class__`

Method Details

Get(self, item, default=None)

source code

Overrides: Cache.Get

Set(self, item, value, volatile=True)

source code

Sets the item to the value.

The value will be cached for the expiry time if it is volatile (by default). Non-volatile data will never expire.

Even on a live system, we cache information which can not change for the life of the system (e.g. the profile or dtb values). These are marked non-volatile and will not be expired.

Overrides: Cache.Set

str(self)
(Informal representation operator)

source code

Print the contents somewhat concisely.

Overrides: object.__str__

Property Details

expire_time

Get Method:: unreachable.expire_time(self)

Class TimedCache

Get(self, item, default=None)

Set(self, item, value, volatile=True)

__str__(self) (Informal representation operator)

expire_time

str(self)
(Informal representation operator)