Package rekall :: Module obj

Module obj

The Rekall Memory Forensics object system.

Author: Michael Cohen <scudette@gmail.com> based on original code by AAron Walters and Brendan Dolan-Gavitt with contributions by Mike Auty

Classes
	ProfileLog
	Curry
	NoneObject A magical object which is like None but swallows bad dereferences, __getattr__, iterators etc to return itself.
	Error All object related exceptions come from this one.
	ProfileError Errors in setting the profile.
	BaseObject
	NumericProxyMixIn This MixIn implements the numeric protocol
	StringProxyMixIn This MixIn implements proxying for strings.
	NativeType
	Bool
	BitField A class splitting an integer into a bunch of bit.
	Pointer A pointer reads an 'address' object from the address space.
	Pointer32 A 32 bit pointer (Even in 64 bit arch).
	Void
	Array An array of objects of the same size
	PointerArray This is an optimized Array implementation for arrays of Pointers.
	ListArray An array of structs which do not all have the same size.
	BaseAddressComparisonMixIn A mixin providing comparison operators for its base offset.
	Struct A Struct is an object which represents a c struct
	ProfileSectionLoader A loader for a section in the profile JSON file.
	MetadataProfileSectionLoader
	ConstantProfileSectionLoader
	ConstantTypeProfileSectionLoader
	FunctionsProfileSectionLoader
	EnumProfileSectionLoader
	ReverseEnumProfileSectionLoader
	StructProfileLoader
	MergeProfileLoader This section specifies a list of profiles to be merged into this one.
	DummyAS
	Profile A collection of types relating to a single compilation unit.
	TestProfile
	ProfileModification A profile modification adds new types to an existing profile.
	Address A BaseObject representing an address.

Functions

CreateMixIn(mixin)

source code