Package rekall :: Package plugins :: Package addrspaces :: Module intel :: Class PhysicalAddressDescriptorCollector

Class PhysicalAddressDescriptorCollector

A descriptor collector which only cares about PhysicalAddressDescriptor.

This allows us to reuse all the code in describing the address space resolution and cheaply implement the standard vtop() method.

Instance Methods

add(self, descriptor_cls, *_, **kwargs)

source code

__getitem__(self, item)
Get a particular descriptor. (Inherited from rekall.plugins.addrspaces.intel.DescriptorCollection)

source code

__init__(self, session)
x.__init__(...) initializes x; see help(type(x)) for signature (Inherited from rekall.plugins.addrspaces.intel.DescriptorCollection)

source code

__iter__(self) (Inherited from rekall.plugins.addrspaces.intel.DescriptorCollection)

source code

__unicode__(self)
Render ourselves into a string. (Inherited from rekall.plugins.addrspaces.intel.DescriptorCollection)

source code

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Class Variables
	physical_address = `None` hash(x)

Properties
Inherited from `object`: `__class__`

Method Details

add(self, descriptor_cls, *_, **kwargs)

source code

Overrides: DescriptorCollection.add