Package rekall :: Module obj :: Class ProfileSectionLoader

Class ProfileSectionLoader

A loader for a section in the profile JSON file.

The profile json serialization contains a number of sections, each has a well known name (e.g. $CONSTANTS, $FUNCTIONS, $STRUCT). When a profile class is initialized, it uses a variety of loaders to handle each section in the profile. This allows more complex sections to be introduced and extended.

Nested Classes
	__metaclass__ Automatic Plugin Registration through metaclasses.
	top_level_class A loader for a section in the profile JSON file.

Instance Methods

LoadIntoProfile(self, session, profile, data)
Loads the data into the profile.

source code

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __init__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Class Methods

ImplementationByClass(self, name)

source code

ImplementationByName(self, name)

source code

Class Variables
	order = `100`
	classes = `{'ArtifactDefinitionProfileSectionLoader': <class 'r...`
	classes_by_name = `{'$ARTIFACTS': [<class 'rekall.plugins.respo...`
	plugin_feature = `'ProfileSectionLoader'`

Properties
Inherited from `object`: `__class__`

Class Variable Details

classes

Value:

{'ArtifactDefinitionProfileSectionLoader': <class 'rekall.plugins.resp
onse.forensic_artifacts.ArtifactDefinitionProfileSectionLoader'>,
 'ConstantProfileSectionLoader': <class 'rekall.obj.ConstantProfileSec
tionLoader'>,
 'ConstantTypeProfileSectionLoader': <class 'rekall.obj.ConstantTypePr
ofileSectionLoader'>,
 'DynamicConstantProfileLoader': <class 'rekall.plugins.tools.dynamic_
profiles.DynamicConstantProfileLoader'>,
...

classes_by_name

Value:

{'$ARTIFACTS': [<class 'rekall.plugins.response.forensic_artifacts.Art
ifactDefinitionProfileSectionLoader'>],
 '$CONFIG': [<class 'rekall.plugins.overlays.linux.linux.LinuxConfigPr
ofileLoader'>],
 '$CONSTANTS': [<class 'rekall.obj.ConstantProfileSectionLoader'>],
 '$CONSTANT_TYPES': [<class 'rekall.obj.ConstantTypeProfileSectionLoad
er'>],
 '$DYNAMIC_CONSTANTS': [<class 'rekall.plugins.tools.dynamic_profiles.
...